OWASP Ottawa September 2018 Meetup

• What we'll do
5:00 Networking and Pizza

6:00 PM: Technical Talks

Title: Adventures in Automation - DefectDojo and OWASP

Abstract:

Everyone wants to automate security! No more theoreticals. We’ll discuss how to automate, the pluses and minuses, results, and greatest challenges from hands-on experience. Meaningful automation is not out of anyone’s reach regardless of budget or headcount! We’ll utilize the OWASP AppSec Pipeline Project, DefectDojo, and other open-source tools to build meaningful and flexible automation. (Note: DefectDojo has just leveled up from "Lab" to "Flagship" Status in OWASP)

Bio:
Greg Anderson is a member of the OWASP Board of Directors, creator of DefectDojo, former OWASP chapter leader, and Managing Partner at 10Security.

Greg started his career as a penetration tester with a focus on unconventional attack vectors and how to maximize their impact. He has performed assessments for the United States Department of Defense and presented at DEFCON, AppSec USA, and AppSec EU. Greg’s recent work has focused on advanced automation to maximize limited security resources.

Feel free to chat him up about anything and everything.
______

Title: DevSecOps: security and compliance at the speed of continuous delivery

Abstract:

See how an Ottawa company has built a SOC2 Type 2 audited software delivery system with less pain, and more value.

Build security, and compliance into the way software is delivered and operated to

• Make secure development easier
• Provide real customer value
• Avoid security theatre
• Reduce security and audit bottlenecks

Bio:
Dag Rowe is a BA in security and compliance. Passionate about improving systems of work, he is actively involved in the local software community. Dag helps to organize the Agile Ottawa Meetup group, and the Gatineau-Ottawa Agile Tour conference.