OWASP Toronto Chapter August Event

Format:
Hybrid (in-person and online) event
In-person location:
Security Compass
325 Front Street West, Unit 103
Toronto, ON
M5V 2Y1
Note: In-person attendance is limited to 70 people, in a first-come, first-serve basis.
Doors will open at 6:00 PM, with the event will start at 6:30 PM (ET).
For those who cannot attend in person, please join us virtually via the livestream!
**************************************************************************************
Dual Talk Event: Build, Attack, Secure: A Spotlight on Securing AI Agents | Security at the Frontiers of AI Innovation

Presentation #1: Build, Attack, Secure: A Spotlight on Securing AI Agents
AI promises massive benefits, but it introduces significant risk when left uncontrolled or unmitigated. This session presents a simple AI assistant/agent and turns it into a target. Using a test harness, a live series of attacks mapped to the OWASP Top 10 for LLM Applications, including prompt injection, insecure output handling, and excessive agency. The agent will break in real time, and we'll walk through how to enforce control points across the AI stack, including the orchestration, harness, and data layers.

Speaker: Amaar Malik
Amaar is a seasoned cybersecurity professional with a strong track record of leading clients through technology transformation programs. He helps clients design, implement, and operate cybersecurity, digital identity, cloud security, and AI solutions that drive tangible business outcomes. Amaar is passionate about AI, staying ahead of emerging threats and trends by expanding his expertise in GenAI, securing AI, and AI-powered security.

**************************************************************************************

Presentation #2: Security at the Frontiers of AI Innovation
Artificial intelligence is reshaping software development at an unprecedented pace. Frontier models are no longer just generating text—they’re writing production code, interacting with enterprise systems, reasoning across multiple steps, invoking tools, and operating as autonomous agents. While these capabilities promise enormous gains in productivity, they also introduce new attack surfaces and accelerate the creation of familiar vulnerabilities.

This session explores how the evolution of AI is changing the application security landscape. We’ll examine where traditional AppSec principles still apply, where entirely new security models are emerging, and how security teams can prepare for a future where software is increasingly built, operated, and defended by AI. Rather than focusing on any specific vendor or product, this talk provides practical guidance for understanding and managing risk at the intersection of frontier AI systems, modern software development, and enterprise security.

Speaker: Ramy Rahman
Ramy Rahman is a Senior Principal Solutions Engineer at ArmorCode with more than 17 years of experience helping enterprise organizations build and mature cloud and application security programs. Throughout his career, he has advised Fortune 500 companies on application security, cloud-native security, risk prioritization, governance, and security operations, with expertise spanning ASPM, CNAPP, CSPM, CWPP, AI governance, and DevSecOps.
Prior to joining ArmorCode, Ramy held senior technical leadership roles at Trace3, Cyderes, Optiv, and RedSeal, where he partnered with customers, product teams, and executive stakeholders to evaluate emerging technologies, define security strategies, and operationalize modern security programs. His perspective combines deep technical expertise with extensive field experience, enabling him to provide practical insights into the evolving application security landscape and the challenges organizations face in reducing cyber risk at scale.