LASCON 2022 has ended

Create Your Own Event

LASCON 2022

#1

The DevSecOps Playbook: A step-by-step guide to implementing DevSecOps for any organization

#2

How To Hack An API In 15 Minutes

#3

Defense-in-Depth Engineering

#4

Hacking and Defending APIs - Red and Blue make Purple.

#5

API Security Through External Attack Surface Management

#6

Can you keep a secret? - An Overview of the OWASP Secrets Management Cheat Sheet

#7

Invited - Infosec is Sick

#8

Automating App Security Tests in Development, with Docker

#9

Hacking JavaScript Desktop apps with XSS and RCE

#10

Spies, Saboteurs & Scoundrels: How Russia, China & Nefarious Actors Are Hacking IoT, OT & Network Devices

#11

No, We Won't Be Threat Modeling

#12

Elite Security Champions Build Strong Security Culture

#13

Social Engineering Your Metrics: Using Data Science to Provide Value in Reporting

#14

Invited - Securing Managed Kubernetes Clusters

#15

Invited - Hacking Blockchain & Hacking Blockchain

#16

Close Encounters of the Vulnerable Kind: A DevSecOps Odyssey

#17

Expo Hall Open

#18

Invited - Chris Roberts + Charles Valentine

#19

Invited - DevSecOps Warning Signs and What to Do About Them

#20

A visual journey to demystifying OAuth2 and OIDC - why do they exist and how to properly use them to secure your applications

#21

Who watches the watchers? - Including your ITSM, ITOM, APM, and CMDB in your audits

#22

'Who allowed you to do that?' Detecting and Controlling Rogue Third-Party Scripts

#23

Snack Break

#24

Fuzzers, analyzers, and other Gophers insecticides

#25

Invited - The Case for Runtime Protection

#26

DSOMM from Theory to Enforcement

#27

Happy Hour sponsored by Sonatype

#28

Ride the Bull!

#29

Speed Debates

#30

Registration Opens

#31

Keynote - Jim Manico - The Abridged History of Application Security

#32

Using your API Specs to attack your APIs

#33

Knowing What Risks Matter — And Don’t — In Your Open Source

#34

How to scan at scale with OWASP ZAP

#35

Invited - The Security Practitioner’s Guide to Going from “No” to “Whoa”

#36

Lessons Learned Building a Software Supply Chain Security Team

#37

The Cinderella of Security - Combining forces with compliance for better security outcomes

#38

Invited - 10lbs of tacos in a 5lb bag: Lessons Learned from Security Operations in a Dynamic and Resource Constrained Environment

#39

Design-Level Supply Chain Attacks In The Real World

#40

FAIR STRIDE - Building business relevant AppSec threat models

#41

Invited - Irrational by Effective - Applying Parenthood Lessons to Cybersecurity

#42

Invited - Securing the Edge

#43

Invited - Drivers for Software Supply Chain Security Programs

#44

Tips and Tactics for Creating Your Own CTF Event

#45

No Code No Risk? What Happens When We Leave No Code up for Grabs

#46

Build more secure apps by harnessing the power of OWASP SKF & ASVS on Kubernetes

#47

Working through your trust issues

#48

Badge Game Review and Awards!

#49

Snack Break

#50

Expo Hall Open