OWASP San Diego – Things That Go Wrong With Web Application Encryption

SAN DIEGO - April 17, 2013 - PRLog -- The Open Web Application Security Project (OWASP) Chapter in San Diego is convening to discuss the latest developments in the OWASP organization, and new ideas in leading-edge secure web development.  While the CRIME, BEAST, and padding oracle attacks have received a lot of recent attention, there are plenty of things that can go wrong with web application cryptography before even getting to those exploits. Gabriel Lawrence will guide us into a look at how documentation fails developers and how their use of cryptography within their applications is commonly broken. Whether you’re a seasoned security professional or an executive with high focus on mitigating IT risk, this event will take you beyond the OWASP Top 10 by providing valuable insight into common mistakes that can put your organization at risk.  Enjoy refreshments from our friends at HP as you network with some of the best security researchers, auditors, and developers in the San Diego area. Intuit is graciously hosting this event at their San Diego office and we look forward to seeing you there!

Date:      Thursday May 9th, 2013
Time:      6:00pm - 8:00pm
Location:
Intuit (Building 3, Cook Room)
7535 Torrey Santa Fe Rd.
San Diego, CA  92129
      
Please RSVP: rsvp@owasp-sd.org or 858-754-9701

Speaker Bio:
Gabriel Lawrence has been a system administrator, application developer, entrepreneur, information security professional. He currently manages the Application Security group in Information Security and Risk Management at Qualcomm where he spends his days breaking web applications for fun and profit.

About OWASP:
The Open Web Application Security Project (OWASP.ORG) is a non-profit community devoted to improving focus on application security. OWASP continues to grow and deliver exceptional resources to security conscious individuals who are required to make informed decisions about true application security risks. A plethora of funded open-source products, new coding principals that have been adopted by PCI standards, and a unique list of involved security professionals make OWASP an invaluable forum to attend.