OWASP Los Angeles

TOPIC: Hands-on Application Security Workshop with Runtime Security IAST Technology and Secure Code Training
Join us for an action-packed hands-on workshop event led by Jeff Williams, Founder and CTO of Contrast Security.
Earn 2 hours of CPE credit!*

ABSTRACT:
Together, we will...

• Unify around a precise definition of a vulnerability, as well as understand the challenges current application testing methodologies have in detecting vulnerabilities, and how to change the way we interact with them
• Get hands-on-keyboard experience leveraging Contrast training to find a vulnerability in code, learn how to fix said vulnerability, and proactively go and remediate the vulnerability

Who should attend?

• AppSec professionals
• Security engineers
• Software engineers
• DevOps/DevSecOps professionals
• Anyone wanting to learn more about identifying and fixing code vulnerabilities, discover the most efficient ways to execute on a DevSecOps program, and become proactively more knowledgeable around secure coding techniques.

PLEASE NOTE - for the lab portion of this event, you must bring a laptop (phones or other personal devices will NOT work for the lab).
*This workshop qualifies for 2 hours of hands-on training for Continuing Professional Credits (CPE). For CISSP holders this would be in the Application Security Discipline and you will receive a certificate of completion after the workshop.

OWASP LA will be hosting a table at the LayerOne 2025 security conference coming up in May! Be sure to stop by and say hi! See you there.

The LayerOne 2025 Information Security Conference will take place on May 24-25, 2025 at the Pasadena Hilton Hotel!

TOPIC: Adversarial Intelligence: Redefining Application
Join us for great networking, dinner and drinks, and see a presentation by Roy Talyosef, Founding Engineer, Kodem Security

ABSTRACT:
This presentation explores Adversarial Intelligence - an approach that views application security from an attacker’s perspective. Drawing from vulnerability research experience at the NSO Group and building Pegasus, the speaker will highlight how overlooked low and medium vulnerabilities can be combined to execute successful attacks. By examining attack chains and application runtime behavior, attendees will see how gaps often missed by traditional methods are exposed. Attendees will learn about effective tools and techniques for detecting and mitigating these threats, especially in cloud-native and distributed systems. Designed for security practitioners and academics, this session provides a deeper understanding of defending against sophisticated attackers by adopting their mindset.