OWASP AppSec Research 2010 Pictures

The OWASP AppSec Research 2010 Conference in Stockholm, Sweden ended today. I took a quite a few pictures and I thought I would post a couple of them. Please enjoy!

Aula Magna (Conference Venue)

Track 1

Day 1 Keynote with Chris Evans, Google

Day 2 Keynote with Steve Lipner, Microsoft

Gala Dinner at Stockholm City Hall

Conference Closing Remarks and Thanks

I'm Presenting at OWASP AppSec Research 2010 Conference

The OWASP AppSec Research 2010 conference is being held on June 23rd and 24th 2010 in Stockholm, Sweden.  I will be speaking on the 24th at 11:10 AM on "Microsoft's Security Development Lifecycle for Agile Development".  Here is a link to the schedule for June 24th:
http://www.owasp.org/index.php/OWASP_AppSec_Research_2010_-_Stockholm,_Sweden#tab=June_24

I hope to see lots of people there!

.NET User Group Presentation - Microsoft SDL-Agile

I had a great time giving my Microsoft SDL-Agile v2 presentation last night at the Kansas City .NET User Group Meeting.  Several people asked for the slides, so I made them available as a PDF document here: Microsoft SDL-Agile Presentation - Nick Coblentz V2 2010-03-23.pdf

Many also wanted links to the tools I mentioned during the presentation.  Here is a list of those tools:

• SDL Process Guidance 4.1a (includes SDL-Agile towards the bottom of the document
• CAT.NET v2, Web Protection Library (Includes Anti-XSS Library and Security Runtime Engine), and the Web Application Configuration Analyzer 
• web.config security analyzer
• Microsoft FxCop 1.36
• Microsoft Code Analysis Tool .NET (CAT.NET) v1 CTP - 32 bit (Old version of CAT.NET)
• Microsoft Code Analysis Tool .NET (CAT.NET) v1 CTP - 64 bit (Old version of CAT.NET)
• BinScope Binary Analyzer
• MiniFuzz File Fuzzer
• MSF-Agile plus Security Development Lifecycle Process Template for VSTS 2008
• Microsoft SDL Process Template For Visual Studio Team System
• Microsoft SDL Threat Modeling Tool

Finally, here are links to the code used to demonstrate the Web Protection Library:

• Default.aspx
• Default.aspx.cs
• Default.aspx.designer.cs
• Web.config

Please feel free to email me with any questions or comments about the presentation.