OWASP Dublin - September Meetup

OWASP Dublin are delighted to announce Workday will be sponsoring & hosting the next OWASP Dublin chapter meetup.

We will have two great talks from industry experts, details can be found below:

Speaker 1: Pamir Erdem is an experienced Technical Architect with a demonstrated history of working in the computer software industry. Skilled in Application Performance Management, DevSecOps, Java, .NET Framework, and Secure SDLC, Kubernetes.

Talk Description: Database fundamentals and security

This talk will cover all things database from architecture to security. This talk will not only be informational but also educational.

Topics discussed:

• SQL Server Architecture Fundamentals
• Authentication Methods
• Database Server - Reconnaissance
• Database Password Attacks and protection
• Privileged Escalation and Protection
• Process Injection Protection
• Analysis of Attacks
• Preventing Data Exploits.

We will also have a second talk on Confused Deputy attack, primarily focused on AWS.

Speaker 1: Bhavin Makwana is a security engineer in Workday. He has 8 years of experience in Penetration testing and Offensive Security.
At Workday, he does Full Stack Penetration Testing of Workday IT Infrastructure and manages several key initiatives like BugBounty and Cloud Pentesting Program.

Speaker 2: Ee En (Vincent) also works as a Security Engineer within Workday. He has 2 years’ experience on AWS in terms of Architecting and Security. He is in charge of implementing enterprise wide Security controls and building AWS based systems for cloud related issues within Workday.

Talk Description: Confused Deputy Attack is one of the uncommon attack patterns that can be found on any trust-based environment. We will be focusing on Confused Deputy Attack on AWS environment. In this presentation, we will dive into what this attack is about, how threat actors have abused this in the wild and the prevention techniques to mitigate this attack.

This will be an exciting evening, however please note there is a limited capacity at the venue so please ensure you register early.

Refreshments will be available and plenty of opportunity to speak with others in the Security Community.

A big thanks to our hosts for the evening Workday.