OWASP Manchester, UK Chapter

This summer OWASP Manchester is joining forces with SecureFlag to bring you a summertime capture the flag tournament
-------------------------
All attendees will need to bring their own laptop in order to participate in the capture the flag activities.
-------------------------
SecureFlag’s Secure-The-Flag tournaments transform security training from passive lectures
into an interactive, social event. Engineers compete to solve hands-on coding labs in a
time-bound challenge session.

Participants work inside fully provisioned hands-on development environments. They identify
vulnerabilities in running applications, then write and submit fixes that must pass both security
and functional tests. A live leaderboard tracks progress in real time, and the top three
performers win gifts from SecureFlag & our sponsor Anaplan.

This July, OWASP Manchester welcomes you to AJ Bell’s generously hosted venue for an evening of thought-provoking talks, where three cybersecurity experts will unpack the latest innovations, emerging challenges, and developments shaping the security landscape.

Whether you're a seasoned security specialist or simply looking to expand your understanding of the evolving threat landscape, you'll leave with fresh perspectives, actionable knowledge, and the chance to connect with members of Manchester's thriving cybersecurity community. We look forward to welcoming you for an evening of learning, discussion, and networking.
-------------------------
Due to a corporate policy from the venue sponsor, to get into the venue & up to the event, you will need to register with your full name when signing up to the event AND show photo ID when checking in to the event on the night.
As we're still dealing with a large number of no-shows, if you don't attend without releasing your ticket, we may remove you from future events.
-------------------------
Agenda:
6:00 - Open doors & networking & drinks
6:15 - Introduction from OWASP
6:25 - Dan Harris - AJ Bell Introduction & Innovation
6:50 - Rory Sheldon - Using Firecracker microVMs and Foundation Models to Accelerate Malicious npm Package Analysis
7:15 - Refreshments (Food & Drinks & Networking)
8:00 - Alasdair Gorniak - Getting Your First 0-day
9:00 - Vacate venue -> to the pub for more socialising

LOCATION
-------------------------
AJ Bell
4 Exchange Quay,
The Quays,
Salford M5 3EE
-------------------------
SPEAKERS

Dan Harris
Chief Information Security Officer - AJ Bell - Nearly 20 years in security, the last decade leading functions inside major financial services firms. Dan started as a pen tester when he realised, he was better at breaking software than building it. Now he chairs senior risk committees but still loves a good exploit.

Rory Sheldon
Staff Product Security Engineer at Snyk
Using Firecracker microVMs and Foundation Models to Accelerate Malicious npm Package Analysis
Static signatures and manual review can’t keep pace with the volume of malicious npm packages. This talk explores using Firecracker microVMs for safe, fast, disposable execution environments combined with foundation models to speed up analysis. We’ll cover the architectural decisions, what the models are actually good at, and the gaps that still need solving.