OWASP Project Summit 2013
2013-11-18..2013-11-21
New York, United States
who it's for
security engineers, php developers, application developers, mobile security researchers, project maintainers, devops engineers, qa engineers
topics
ESAPI symmetric encryption fixes; padding oracle mitigation; key derivation function context; HMAC-256 default PRF; mobile top 10 classifications; DroidGoat and IoT tooling; PHP RBAC hierarchical roles; PSR-compliant PHP authorization; parameterized database queries; media streaming with Google Hangouts
| title | author | length |
|---|---|---|
| ESAPI Crypto Changes | Kevin Wall | 09m |
ESAPI symmetric encryption has a concrete fix and followups: a PoC allowed setting MAC length to zero and enabled a padding‑oracle path so CVE-2013-5960 is… | ||
| Mobile Security Session | Jason Haddix | 17m |
OWASP Mobile Security Project reports refreshed Mobile Top 10 categories, new wiki pages and tooling including Droid Goat and imos IoT updates, and a dataset… | ||
| RBAC Project | Abbas Naderi | 12m |
A NIST-compliant RBAC library for PHP claims fast functional access checks while keeping role and permission management flexible, and it actually implements… | ||
| PHP Security Project | Rahul Chaudhary | 01h 29m |
Project claims a working collection of 12–13 libraries plus a framework built from Google Summer of Code work and ~10–12 contributors, with code on github and… | ||
| Media Project Introduction | Jonathan Marcil | 17m |
A project builds a central video hub and already runs a YouTube channel consolidating chapter talks; it uses Google Hangouts to stream live into YouTube… | ||
| Quick Sky Lounge | Martin Von Knobloch | 01m |
A short venue peek shows the Sky Lounge used for AppSecUSA 2013 and confirms it serves as the location for Projects Summit 2013 on Monday 18th and Tuesday 19th… | ||
| nothing matches | ||