DeveloperWeek 2025: Full Schedule

arrow_back View All Dates

1:00pm PST

[Virtual] OWASP Security Summit: AI and the Gaming Industry: Risks, Rewards, and the Future

Wednesday February 19, 2025 1:00pm - 1:25pm PST

Virtual Dev Security World

Tanya "SheHacksPurple" Janca, SheHacksPurple, Secure Coding Trainer
OWASP Certified

Speakers

Tanya "SheHacksPurple" Janca

Secure Coding Trainer, SheHacksPurple

Tanya Janca, aka SheHacksPurple, is the best-selling author of 'Alice and Bob Learn Secure Coding', 'Alice and Bob Learn Application Security’ and ‘Cards Against AppSec'. Over her 28-year IT career she has won countless awards (including OWASP Lifetime Distinguished Member and... Read More →

Wednesday February 19, 2025 1:00pm - 1:25pm PST
Virtual Dev Security World

Dev Security World

Tracks & Topics Platform Engineering
Session Type OPEN Session
Conferences Dev Security World, OWASP Certified, Virtual, OPEN Session, Frontend World
In-Person/Virtual Virtual

2:00pm PST

[Virtual] OWASP Security Summit: Building a Network Telemetry Platform to minimize Security Threats

Wednesday February 19, 2025 2:00pm - 2:25pm PST

Virtual Dev Security World

Siri Varma Vegiraju, Microsoft, Senior Software Engineer

Maintaining robust network security in the cloud environment is more crucial than ever. This talk explores the design and implementation of a proactive network telemetry platform that strengthens infrastructure security. The platform collects and analyzes telemetry data from virtual machines to identify and scrutinize traffic patterns deviating from industry-standard baselines. By generating actionable insights and promptly notifying relevant teams of potential issues, it enables swift problem resolution. This proactive approach significantly reduces the attack surface, minimizes exposure to network attacks, and enhances overall cloud security.

Speakers

Siri Varma Vegiraju

Senior Software Engineer, Microsoft

Siri Varma Vegiraju is a seasoned professional in healthcare, cloud computing, and security. Currently, he focuses on securing Azure Cloud workloads, leveraging his extensive experience in distributed systems and real-time streaming solutions. Prior to his current role, Siri contributed... Read More →

Wednesday February 19, 2025 2:00pm - 2:25pm PST
Virtual Dev Security World

Dev Security World

Tracks & Topics APIs & Microservices
Session Type OPEN Session
Conferences Dev Security World, Virtual, OWASP Certified
In-Person/Virtual Virtual

2:30pm PST

[Virtual] OWASP Security Summit: API Security 101: How to Not Be Featured in a Top Ten Breaches List

Wednesday February 19, 2025 2:30pm - 2:55pm PST

Virtual Dev Security World

Dan Barahona, APISec, Co-Founder

This talk will dive into the fundamentals and best practices for API Security. By understanding the 3 Pillars of API Security, encompassing governance, testing and monitoring, attendees will gain a comprehensive understanding of the essential elements required to safeguard APIs. The session will conclude with practical insights, offering best practices and valuable do's and don'ts for implementing and maintaining secure APIs.

Why are APIs under attack?
-83% of internet traffic are APIs
-APIs are under-secured

How do APIs get attacked?
Attackers look for APIs that are over-permissioned, return to much information, access unauthorized functions, and expose logic flaws. Attackers are able to bypass a web or mobile app and hit the API directly.

OWASP top 10!!
#1-#4 are the biggest issues

More compliance regulations are including testing APIs.
-PCI
-HIPPA
-GDPR
-FedRAMP

Speakers

Dan Barahona

Co-Founder, APIsec University

Dan is a 20+ year cybersecurity veteran, having held exec positions at companies including Qualys, ArcSight, Anomali and APIsec. He founded APIsec University in 2022 to offer free, non-vendor training on API security. The site has grown to over 50,000 students in its first 6 months... Read More →

Wednesday February 19, 2025 2:30pm - 2:55pm PST
Virtual Dev Security World

Dev Security World

Tracks & Topics APIs & Microservices
Session Type OPEN Session
Conferences Dev Security World, Virtual, OPEN Session, OWASP Certified
In-Person/Virtual Virtual

3:00pm PST

[Virtual] OWASP Security Summit: 30 Tips for Secure JavaScript

Wednesday February 19, 2025 3:00pm - 3:25pm PST

Virtual Dev Security World

Tanya "SheHacksPurple" Janca, SheHacksPurple, Secure Coding Trainer
OWASP Certified

In this talk, we will cover 30 tips for writing more secure JavaScript, emphasizing what to do, what NOT to do, and utilizing open-source tooling to enhance security. JavaScript is not only the most popular web programming language, but it also faces security threats like XSS and code injection, meaning we need to ensure our JavaScript is tough, rugged, and secure. We’ll touch only upon items that are specific to JavaScript, as opposed to agnostic topics that apply to all languages, such as encryption or authentication. By the end, you’ll gain insights into selecting the best framework, adopting secure coding practices, and leveraging tools for web application security, catering to both seasoned developers and beginners seeking practical guidance.

Speakers

Tanya "SheHacksPurple" Janca

Secure Coding Trainer, SheHacksPurple

Wednesday February 19, 2025 3:00pm - 3:25pm PST
Virtual Dev Security World

Dev Security World

Session Type OPEN Session
Conferences Dev Security World, OWASP Certified, Virtual, OPEN Session, Frontend World
In-Person/Virtual Virtual