Name: Unicorns and Software Security
Start: 2018-10-10T17:30:00-04:00
End: 2018-10-10T21:00:00-04:00

This session will bring together experts from the SDLC to discuss, debate and agree on how to make a better widget.

Agenda
- Networking
- Threat Modeling
- OWASP Top 10 2017

Research: Are-You-Trading-Stocks Securely
https://ioactive.com/wp-content/uploads/2018/08/Are-You-Trading-Stocks-Securely-Exposing-Security-Flaws-in-Trading-Technologies.pdf

Speaker #1
===============
Tony UcedaVélez is the founder and CEO of VerSprite - a global security consulting firm based in Atlanta, GA. He is also the author of Wiley's Risk Centric Threat Modeling, a book endorsed by the late Cyber Security Coordinator for the White House, Howard Schmidt. The book has been used in universities and enterprises world wide as a means to apply a risk centric approach to application threat modeling. Tony has spoken at numerous OWASP, ISACA, ASIS, ISC2, ISSA, BSides conferences across four continents on the topics of cloud security, risk management, threat modeling, secure-SDLC implementation. He also has provided global training to both development groups and company executives who need to understand the impact of security programs to products and business services. Tony's 25 years of IT/IS experience began with hands-on operations in the areas of system administration, network engineering, software development. Tony serves as interim CISO for various startups and global, mid-size organization and is responsible for the overall build out of these security programs.

Cooking w/ PASTA

*A Practical Walk Thru of Risk Centric Threat Modeling*

Protect what matters and learn how to incorporate a broad range of security practices within a risk centric approach to threat modeling. DAST, SAST, pen testing, threat intelligence harvesting, security hardening, architecture reviews and more have a place within a risk centric threat modeling approach. We’ll walk through steps of the PASTA methodology as applied to a e-commerce web application in order to exemplify the approach, its benefits, and how to best apply within your security programs and during your respective S-SDLC approach.

====================

Speaker #2
Archie Agarwal, CISSP Founder, CEO, and Chief Technical Architect

With more than 20 years of real-world experience in threat and risk analysis, Archie has been instrumental in successfully implementing secure software development processes at a number of Fortune 1000 companies to minimize their exposure to cyber threats and mitigate risks. Prior to founding ThreatModeler, he was the Director of Education Services at WhiteHat Security.

ThreatModeler Session Abstract:

Agenda:

Introduction to Threat Modeling
Exercise - Threat Modeling AppSec and Cloud Architectures
Working Session with ThreatModeler
Threat Modeling Driven DevSecOps

Goals:

Learn how to drive security by design
Understand roles and responsibilities in a Threat Modeling process
Get Hands-on experience operationalizing threat modeling

Attendees:

InfoSec + Red Teamers
AWS Cloud Architects/DevOps
Application Architects
Cloud Testers/Application Testers
Compliance, Privacy, Data Governance

If your company would like to be a sponsor for this meeting please contact us at (212) 220-3963

Cyber Security Meet-Up | HACKNYC

Technology

Law & Technology

Cloud Computing

Hacking

Cloud Security

Computer Security

Software Security

Web Application Security

CIO / CTO

CISO

Cybersecurity

Technology Startups

Business Strategy

Open Source

Computer Programming

Hackers and Makers

Unicorns and Software Security

This content is available only to members

Share this event

Unicorns and Software Security

Details