1.0 owaspkyivsummer2019 2019-08-03 2019-08-03 1 00:05 https://cfp.owaspukraine.org/owaspkyivsummer2019/schedule/ 2019-08-03T10:00:00+03:00 10:00 01:20 EVO owaspkyivsummer2019-50-scan-discovery-exploit-repeat https://cfp.owaspukraine.org/owaspkyivsummer2019/talk/BJ8WZX/ false Workshop en The security of the computer systems goes through a crucial moment, this talk will help you understand the challenges that Cyber Security demands. Israel will show you how to prevent and best practices. In addition, it will inform you of the opportunities that this industry offers. We will understand the importance of the Vulnerabilities, especially the 0Day. Based on important sources such as DarkNet, ZeroNet, Telegram, Advanced Persistent Threat APT, Osint & Owasp. We will learn how to identify the scenario we face, prevent disasters, mitigate threats and control our Infrastructure, emphasizing the Encryption and Protection of data. This allows us to identify what opportunities await us, once we have mastery over these areas. Israel Guzman 2019-08-03T11:30:00+03:00 11:30 00:40 EVO owaspkyivsummer2019-47-top-mobile-applications-vulnerabilities https://cfp.owaspukraine.org/owaspkyivsummer2019/talk/WFAZD3/ false Talk en Every year mobile applications become more and more, but very few people pay attention to the security of this application, when during development. Since the business is aimed only at tearing off a bigger piece of users who will use this application, and they are paying attention to the privacy of their customers in the last place. In my report, I will talk about the top vulnerabilities of mobile applications, which then come out to lose reputation for companies. Every year mobile applications become more and more, but very few people pay attention to the security of this application, when during development. Since the business is aimed only at tearing off a bigger piece of users who will use this application, and they are paying attention to the privacy of their customers in the last place. In my report, I will talk about the top vulnerabilities of mobile applications, which then come out to lose reputation for companies. /media/owaspkyivsummer2019/images/WFAZD3/%D0%92%D1%8B%D0%B4%D0%B5%D0%BB%D0%B5%D0%BD%D0%B8%D0%B5_026.jpg Svyat Login 2019-08-03T12:30:00+03:00 12:30 00:40 EVO owaspkyivsummer2019-56-web-application-security-quiz https://cfp.owaspukraine.org/owaspkyivsummer2019/talk/XF7SSZ/ false Talk en A Web Application Security quiz for everyone in the audience. All you need to play is a smartphone. All you need to win is the appsec knowledge. Serhii Korolenko 2019-08-03T14:00:00+03:00 14:00 00:40 EVO owaspkyivsummer2019-53-saturday-day-live-with-csp https://cfp.owaspukraine.org/owaspkyivsummer2019/talk/TPYFBA/ false Talk en Content Security Policy. What? Why? How? Small talk about Content Security Policy (CSP). During this talk, we will try to answer the questions: What it is? Why do we need this? Is it possible to bypass it? How to mitigate the risks? Also, I will share some useful tools for creating and checking CSP. And there will be a brief analysis of the use of CSP in the real world. Artur Hil 2019-08-03T15:00:00+03:00 15:00 00:40 EVO owaspkyivsummer2019-57-how-to-find-security-vulnerabilities-in-python-applications- https://cfp.owaspukraine.org/owaspkyivsummer2019/talk/BRQDCD/ false Talk en The talk is about Python security Python code isn't automatically secure. Learn how to use Bandit for security-focused linting and talk about other options for static analysis. Take a look at why scanning for CVEs is hard, and how to use python tools to make it easier. Explore some language myths and best practices. Andrey Shalaenko 2019-08-03T16:00:00+03:00 16:00 00:40 EVO owaspkyivsummer2019-55--manual-qa------security-xss https://cfp.owaspukraine.org/owaspkyivsummer2019/talk/HYYBVF/ false Talk en We will see basic security check based on OWASP top 10 that can test manual QA without specific knowledge Evgeny Tolchinsky 2019-08-03T17:00:00+03:00 17:00 00:40 EVO owaspkyivsummer2019-58-ruby-security-tips https://cfp.owaspukraine.org/owaspkyivsummer2019/talk/GPRUED/ false Talk en In this talk, Roman is going to provide a few tips on how to prevent potential security problems in Ruby and/or Ruby on Rails apps based on the OWASP Top-10. Roman Rott