curphey appsecusa - community the killer application
DESCRIPTION
OWASP AppSec USA keynote speechTRANSCRIPT
![Page 1: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/1.jpg)
Text
Saturday, September 24, 11
![Page 2: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/2.jpg)
Saturday, September 24, 11
![Page 3: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/3.jpg)
Saturday, September 24, 11
![Page 4: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/4.jpg)
Saturday, September 24, 11
![Page 5: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/5.jpg)
Saturday, September 24, 11
![Page 6: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/6.jpg)
Saturday, September 24, 11
![Page 7: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/7.jpg)
Saturday, September 24, 11
![Page 8: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/8.jpg)
Saturday, September 24, 11
![Page 9: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/9.jpg)
=
Saturday, September 24, 11
![Page 10: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/10.jpg)
Started OWASP
Internet Security Systems
Charles Schwab Watchfire Foundstone Microsoft
France UK SeattleBostonSan FranciscoAtlanta
Family
Work
Living
Saturday, September 24, 11
![Page 11: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/11.jpg)
04/11/2008 - President Obama, first black president
2011 - Arab Spring
9/11/2001 - Twin Towers
24/10/2002 - Snipers in DC
3/02/2003 - Space Shuttle Disintegrates
10/03/2003 - Bombing Starts in Iraq
26/12/2004 - Indonesia Tsunami
29/08/2005 - Hurricane Katrina
29/09/2008 - Dow falls 788 points
Saturday, September 24, 11
![Page 12: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/12.jpg)
15/01/2001 - Wikipedia Launched
23/10/2001 - iPod unveiled
23/04/2005 - First video uploaded to YouTube
09/01/2007 - iPhone unvieled
2001 - 0.5 billion with internet access 2011 ~2 billion with internet access
26/3/2006 - Twitter created
2/2004 - FaceBook created
02/10/2008 - Chrome Browser released
07/2004 - Ruby on Rails released
08/2/2005 - Term Ajax coined by Jesse James Garret
2003 - First Web 2.0 conference
3/2009 - FourSquare launched at SXSW
Saturday, September 24, 11
![Page 13: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/13.jpg)
2004 - SDL mandatory at Microsoft
2011 - Lulzsec
Saturday, September 24, 11
![Page 14: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/14.jpg)
How will OWASP be even better in 2021 ?(The Hit List | The Watch List | The Wish List)
Saturday, September 24, 11
![Page 15: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/15.jpg)
The Hit List
Saturday, September 24, 11
![Page 16: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/16.jpg)
Open Source (FOSS) as a Model for Trusted Participation
Saturday, September 24, 11
![Page 17: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/17.jpg)
1. No Golden Rules 2. Rules Don’t Seem to Help
Saturday, September 24, 11
![Page 18: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/18.jpg)
Communities are Like GardensSaturday, September 24, 11
![Page 19: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/19.jpg)
Community Tools Matter
Saturday, September 24, 11
![Page 20: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/20.jpg)
Data Information
Presentation Knowledge
There Are Recipes for Project SuccessSaturday, September 24, 11
![Page 21: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/21.jpg)
It’s Not What You Say You Are Going To Do, But What You Actually Do That’s Important
Saturday, September 24, 11
![Page 22: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/22.jpg)
YOU DON’T NEED AN ORGANIZATION TO BE ORGANIZED
Saturday, September 24, 11
![Page 23: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/23.jpg)
Connecting People In Person Together is Critical
OWASP Spain Chapter Meeting - May 2009, Madrid
Saturday, September 24, 11
![Page 24: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/24.jpg)
Saturday, September 24, 11
![Page 25: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/25.jpg)
Like-Minded People ConnectSaturday, September 24, 11
![Page 26: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/26.jpg)
OWASP Charity RunSaturday, September 24, 11
![Page 27: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/27.jpg)
Saturday, September 24, 11
![Page 28: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/28.jpg)
80% of the effects come from 20% of the causes“Pareto Principle”
Saturday, September 24, 11
![Page 29: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/29.jpg)
The Cream Always Rises to the Top
Saturday, September 24, 11
![Page 30: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/30.jpg)
Saturday, September 24, 11
![Page 31: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/31.jpg)
Communities are OrganicSaturday, September 24, 11
![Page 32: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/32.jpg)
It Doesn’t Matter How Fast You Are Running If You Are Moving In The Wrong Direction
Saturday, September 24, 11
![Page 33: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/33.jpg)
Personal Recognition of Some Exceptional People
Saturday, September 24, 11
![Page 34: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/34.jpg)
The Watch List
Saturday, September 24, 11
![Page 35: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/35.jpg)
Saturday, September 24, 11
![Page 36: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/36.jpg)
NoSQL
Continuous Integration & Delivery
Behaviour Driven Development
Node.js HTML5 + CSS3 + JavaScript
oAuth 2.0
Test Driven Development
Big Data & Map Reduce
Agile
Clojure
What Are the Hipsters Building With ?
CoffeScript
FB Connect
JSON
Rails
Django
JQuery
Saturday, September 24, 11
![Page 37: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/37.jpg)
Com
plex
ity
Certainty
PredictableSimple
ComplexChaotic
Agile Sweet Spot
Software Security Sweet Spot
“The Ralph Stacey Diagram”
Embracing Agile
Saturday, September 24, 11
![Page 38: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/38.jpg)
As seen by Security People
As seen by Developers
As seen by Operations
Security People Developers Operations
Saturday, September 24, 11
![Page 39: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/39.jpg)
Everyones Unique
Everyones Unique
Saturday, September 24, 11
![Page 40: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/40.jpg)
Being Unique Is Generally Not A Good Thing
Saturday, September 24, 11
![Page 41: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/41.jpg)
When You Are The Odd One Out It’s Tough to Influence
Saturday, September 24, 11
![Page 42: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/42.jpg)
So OWASP Must Be As Easy As Ordering a Sandwich
1. Choose Your Bread2. Choose Your Fillings3. Your Choose Toppings4. Eat Your Sandwich
1. Choose Your Frameworks2. Choose Your Languages3. Choose Your Scenarios4. Get Your Knowledge & Tools
Security < Performance < Features
For Most Developers
Saturday, September 24, 11
![Page 43: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/43.jpg)
Builders Breakers Defenders
DevelopersArchitects
QA / Testers+ Security Testers
Operations
It’s Time to Move on From A Vulnerability Centric Project View
Saturday, September 24, 11
![Page 44: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/44.jpg)
The Wish List
Saturday, September 24, 11
![Page 45: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/45.jpg)
1. It has a CFO - Chief Finance Officer (better funding & partnerships)2. It has a CTO - Chief Technology Officer (product & engineering management)3. It has a CKO - Chief Knowledge Officer4. It has a Head Teacher (CEO title didn’t work!)5. It has a CPO - Chief People Officer (make life great for volunteers)
6. It has a ‘hack house’ (free lodging + food in a nice place for volunteers & interns)
My Wish List for OWASP 2011 to 2021All About People
Saturday, September 24, 11
![Page 46: Curphey AppSecUSA - Community The Killer Application](https://reader035.vdocument.in/reader035/viewer/2022081602/54ba88eb4a7959f9198b4577/html5/thumbnails/46.jpg)
Mini-summit / kick-off tonight(Probably in a bar somewhere)All welcome (really good Java developers welcome even more than all) ;-)@curphey on Twitter this afternoon #owasp
OWASP Security Tools for Developers Project
Saturday, September 24, 11