BEGIN:VCALENDAR PRODID;X-RICAL-TZSOURCE=TZINFO:-//Calagator//EN CALSCALE:GREGORIAN X-WR-CALNAME:Calagator METHOD:PUBLISH VERSION:2.0 BEGIN:VTIMEZONE TZID;X-RICAL-TZSOURCE=TZINFO:America/Los_Angeles BEGIN:STANDARD DTSTART:20171105T020000 RDATE:20171105T020000 RDATE:20181104T020000 RDATE:20191103T020000 RDATE:20201101T020000 TZOFFSETFROM:-0700 TZOFFSETTO:-0800 TZNAME:PST END:STANDARD BEGIN:DAYLIGHT DTSTART:20180311T020000 RDATE:20180311T020000 RDATE:20190310T020000 RDATE:20200308T020000 RDATE:20210314T020000 TZOFFSETFROM:-0800 TZOFFSETTO:-0700 TZNAME:PDT END:DAYLIGHT END:VTIMEZONE BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20180111T201702Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20180123T200000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20180123T180000 DTSTAMP;VALUE=DATE-TIME:20180111T201702Z LAST-MODIFIED;VALUE=DATE-TIME:20180111T205832Z UID:http://calagator.org/events/1250473110 DESCRIPTION:Abstract: \;\nMost web application security testing effor ts are concentrated around penetration testing which is an art based on a hacker’s psyche\, thought process\, and determination to exploit vulne rabilities. But\, does it yield a high level of confidence and sense of security in a developer’s mind? The answer is a “maybe” especially when the bad guy is obsessed with figuring out new exploits to hack your appl ication. The web application developers have to think about intrinsic se curity - that is\, building security throughout the SDLC. We build appli cations based upon well-formed customer requirements. Why should we not\ , then\, build our applications based upon the fundamental principles of security and then harden security from the hacker’s perspective? \;\ n \;\nBio: \;\nPrincipal consultant at Gupta Consulting LLC.\, Bhu shan Gupta is passionate about development methods and tools that yield more secure web applications especially in the agile software developmen t environment. As a researcher he has keen interest in understanding and applying fundamental principles and known methodologies to develop depe ndable and secure software solutions. His interests extend to Social Eng ineering and Attack Surface Analysis. Bhushan worked at Hewlett-Packard for 13 years in various roles including software quality lead\, engineer \, software process architect\, and software productivity manager. He th en developed a strong interest in web application security while working as a quality engineer for Nike Inc. Bhushan has been studying various f acets of web application security and promoting how to apply common sens e approach to build secure solutions. He is a certified Six Sigma Black Belt (HP and ASQ) and an adjunct faculty member at the Oregon Institute of Technology in Software Engineering. To learn more about Bhushan’s con tributions to SDLC\, visit www.bgupta.com \;\n\n\nTags: owasp\, AppSe c\, security\n\nImported from: http://calagator.org/events/1250473110 URL:https://www.owasp.org/index.php/Portland SUMMARY:OWASP: AppSec Testing Beyond Pen Test LOCATION:Jama Software (New Office): 135 SW Taylor Suite 200\, Portland O regon 97204 United States SEQUENCE:4 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20180207T155759Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20180226T200000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20180226T180000 DTSTAMP;VALUE=DATE-TIME:20180207T155759Z LAST-MODIFIED;VALUE=DATE-TIME:20180207T155759Z UID:http://calagator.org/events/1250473245 DESCRIPTION:Jon Bottarini will be presenting on bug bounties (from both a hacker and a program perspective)\, common mistakes in the software dev elopment lifecycle that make it easier to find bugs\, and what developer s can do to understand their full attack surface. \;\n \;\nBio: 3\;\n \;\nJon Bottarini is a Technical Program Manager at HackerOne\, where he is responsible for managing the bug bounty programs for the US Department of Defense and other companies looking to leverage talent fr om hacker-powered security. In his free time he is also a hacker and bug bounty hunter who has reported vulnerabilities to worldwide brands and organizations such as New Relic\, Apple\, Google\, the US Department of Defense\, and many more. \;\n \;\nTwitter: https://www.twitter.co m/jon_bottarini \;\nLinkedIn: http://www.linkedin.com/in/jonbottari ni \n\nTags: AppSec\, owasp\, security\n\nImported from: http://calagato r.org/events/1250473245 URL:https://www.owasp.org/index.php/Portland SUMMARY:OWASP February Chapter Meeting : Jon Bottarini on Bug Bounties LOCATION:Jive Software: 915 SW Stark St.\, Suite 400\, Portland Oregon 97 205 United States SEQUENCE:1 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20180928T064518Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20181003T194000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20181003T080000 DTSTAMP;VALUE=DATE-TIME:20180928T064518Z LAST-MODIFIED;VALUE=DATE-TIME:20180928T064518Z UID:http://calagator.org/events/1250474352 DESCRIPTION:For the third year in a row\, the Portland OWASP chapter is p roud to host our information security training day! This is be an excell ent opportunity for those interested to receive top quality information security and application security training for prices far lower than nor mally offered. It's also a great chance to network with the local infose c community and meet those who share your interests. \;\n \;\nOWAS P Portland 2018 Training Day will be October 3\, 2018. \;\n \;\nCo urses \;\nCourses will be held in two tracks: four in the morning ses sion\, and four in the afternoon session. Each participant can register for one morning course\, or one afternoon course\, or one of each. \; \n \;\nThe Portland OWASP chapter is hosting its 3rd annual training day. This will be an excellent opportunity for students to receive quali ty information security and application security training for next to no thing. It will also be a great chance to network with the local infosec community. For more information\, see the main event page. \;\n \; \nCourses are held in four tracks: four in the morning session\, and fou r in the afternoon session. Each student can register for one morning co urse\, or one afternoon course\, or one of each! \;\n \;\nNOTE: If you see that a course is sold out\, then it is unlikely we will have an y additional seats in that course. You can email ian DOT melven AT owasp .org OR benny DOT zhao AT owasp.org OR bhushan DOT Gupta AT owasp.org to request being added to the waiting list. Please be sure to specify whic h class(es) you want to be added to the wait list for. \;\n \;\nOW ASP Portland 2018 Training Day will be October 3\, 2018. This year we'll be located at: \;\n \;\nWorld Trade Center Portland \;\n121 SW Salmon St. \;\nPortland\, OR 97204. \;\nLater in the evening\, a social mixer will also be held at Rock Bottom Restaurant &\; Brewery \, just a short walk away: \;\n \;\n206 SW Morrison St \;\nPort land\, OR 97204 \;\n \;\nTime Activity \;\n8:00 AM - 8:30 AM Mo rning Registration and Continental Breakfast \;\n8:30 AM - 12:00 PM I ntro to Hacking Web 3.0 \;\n(Mick Ayzenberg) \;\n \;\nIntrodu ction to Computer Forensics \;\n(Kris Rosenberg) \;\n \;\nInt ro to Practical Internal Vulnerability Scanning \;\n(Patterson Cake) \;\n \;\nIncident Handling in Cloud Environment - a primer \ ;\n(Derek Hill) \;\n \;\n12:00 PM - 1:30 PM Lunch on your own - Me et a new friend and grab a bite! \;\n \;\n1:00 PM - 1:30 PM Aftern oon Registration (for those attending only in the afternoon) \;\n \;\n1:30 PM - 5:00 PM Advanced Application Security Testing \;\n(Tim othy Morgan) \;\n \;\nAppSec Testing Beyond Pen Test \;\n(Bhu shan Gupta) \;\n \;\nApplied Physical Attacks on Embedded Systems \, Introductory Version \;\n(Joe FitzPatrick) \;\n \;\nAdvanc ed Custom Network Protocol Fuzzing \;\n(Joshua Pereyda) \;\n \ ;\n5:00 PM - 7:30 PM Evening Mixer @ Rock Bottom Restaurant and Brewery& #13\;\n \;\nWant to get news and information on our 2018 Training Day ? Subscribe to the Portland OWASP mailing list or follow @PortlandOWASP on Twitter!\n\nTags: owasp\, security\, opensource\, hacking\, AppSec\, training\n\nImported from: http://calagator.org/events/1250474352 URL:https://www.eventbrite.com/e/portland-owasp-training-day-2018-tickets -48203102778 SUMMARY:OWASP Portland 2018 Training Day LOCATION:World Trade Center: 121 SW Salmon\, Portland Oregon 97204 US SEQUENCE:1 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20181022T171033Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20181108T200000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20181108T180000 DTSTAMP;VALUE=DATE-TIME:20181022T171033Z LAST-MODIFIED;VALUE=DATE-TIME:20181022T171033Z UID:http://calagator.org/events/1250474481 DESCRIPTION:The Portland Chapter of the Open Web Application Security Pro ject (OWASP) will be hosting an introduction to OWASP Juice Shop [https: //github.com/bkimminich/juice-shop]. OWASP Juice Shop is an intentional ly insecure web application for security trainings written entirely in J avaScript which encompasses the entire OWASP Top Ten [https://www.owasp. org/index.php/Category:OWASP_Top_Ten_Project] and other severe security flaws. The session will provide a top level overview of the Juice Shop p layground and how to get started with it\, as well as an opportunity for attendees to team up to teach and learn from each other in a fun Captur e The Flag competition. \;\n \;\nDavid Quisenberry (@dmqpdx16) w ill be facilitating the session. He's a developer with Daylight Studio and explorer of application security issues. \n\nTags: AppSec\, owasp \, security\, ctf\, juiceshop\n\nImported from: http://calagator.org/eve nts/1250474481 URL:https://www.owasp.org/index.php/Portland SUMMARY:OWASP Portland Chapter Meeting - OWASP Juice Shop! LOCATION:New Relic: 111 SW 5th Avenue\, Suite 2700\, Portland Oregon 9720 4 United States SEQUENCE:1 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20181114T234639Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20181206T200000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20181206T180000 DTSTAMP;VALUE=DATE-TIME:20181114T234639Z LAST-MODIFIED;VALUE=DATE-TIME:20181114T234639Z UID:http://calagator.org/events/1250474567 DESCRIPTION:Interested in web application security? OWASP is for you. T he Open Web Application Security Project aims to improve the security of software. Portland has a vibrant chapter and this is our regular chapt er meeting. \;\n \;\nUnfortunately\, our speaker this month has come down with laryngitis so we're going to be showing a few of the talk s from this year's AppSecUSA conference with pizza. To vote on which tal k you would be interested in viewing go to this [tweet](https://twitter. com/PortlandOWASP/status/1069652247963791361) \;\n \;\n \;\n\n\ nTags: AppSec\, owasp\, security\n\nImported from: http://calagator.org/ events/1250474567 URL:https://www.owasp.org/index.php/Portland SUMMARY:OWASP Portland Chapter Meeting LOCATION:Jama Software (New Office): 135 SW Taylor Suite 200\, Portland O regon 97204 United States SEQUENCE:2 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20181217T165704Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20190109T200000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20190109T180000 DTSTAMP;VALUE=DATE-TIME:20181217T165704Z LAST-MODIFIED;VALUE=DATE-TIME:20181217T165704Z UID:http://calagator.org/events/1250474706 DESCRIPTION:Docker has become a very popular tool for deploying server ap plications. It aims to solve many problems with dependency management an d drift between development and production environments\, and make it ea sy for developers to deploy their software quickly. \;\n \;\nThis talk is about how to use all of this wonderful convenience for evil. It will cover Docker containers and how they work (and how to infect them w ith malware)\, some services commonly used in Docker infrastructure and how to find and exploit them\, and some Docker-specific post-exploitatio n strategies. It will also cover best practices for mitigating and detec ting attacks on your Docker infrastructure and how to create a healthy s ecurity culture among your Docker engineers. \;\n \;\nJosh is a Li nux security practitioner and developer based in Portland\, Oregon. He w orks as a security engineer at New Relic\, where he builds security visi bility tools\, breaks SaaS software\, and helps developers build secure infrastructure.\n\nTags: AppSec\, owasp\, security\, docker\n\nImported from: http://calagator.org/events/1250474706 URL:https://www.meetup.com/OWASP-Portland-Chapter/events/257033486/ SUMMARY:OWASP Portland Chapter Meeting - Docker Security LOCATION:New Relic: 111 SW 5th Avenue\, Suite 2700\, Portland Oregon 9720 4 United States SEQUENCE:1 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20190104T235621Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20190226T200000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20190226T180000 DTSTAMP;VALUE=DATE-TIME:20190104T235621Z LAST-MODIFIED;VALUE=DATE-TIME:20190104T235621Z UID:http://calagator.org/events/1250474768 DESCRIPTION:Companies are starting to build security programs with no pri or experience as awareness about cyber threats increases. Often this is at a later stage when the company has a fully staffed engineering team a nd accumulated security debt. This talk is about how to build a security program from nothing using stakeholder analysis and risk assessments to help prioritize remediation efforts and avoid getting overwhelmed. A he althy and effective security program relies on building relationships th roughout the company\, enlisting security champions\, and leveraging too ling and automation as effectively as possible. Kendra Ash will be shari ng some of the lessons learned on our journey building a security progra m from scratch over the last several months. \;\n \;\nKendra Ash ( @securelykash) is an information security engineer at Vacasa\, actively building a security team and program by leveraging guidance from her net work and industry standards.\n\nTags: AppSec\, owasp\, security\n\nImpor ted from: http://calagator.org/events/1250474768 URL:https://www.meetup.com/OWASP-Portland-Chapter/events/257716836/ SUMMARY:Portland OWASP Chapter Meeting - Building a Security Program From Nothing with Kendra Ash LOCATION:Vacasa: 850 Northwest 13th Avenue\, Portland OR 97209 US SEQUENCE:2 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20190128T170930Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20190312T200000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20190312T180000 DTSTAMP;VALUE=DATE-TIME:20190128T170930Z LAST-MODIFIED;VALUE=DATE-TIME:20190128T170930Z UID:http://calagator.org/events/1250474926 DESCRIPTION:Breaching the Cyber Security Job Industry \;\n \;\nDesp ite the growing popularity of the cyber security industry\, many job hun ters still find it challenging to break into the field. With numerous en try-level cyber security jobs requiring one\, two\, or sometimes even th ree years of security-related experience\, how are inexperienced applica nts supposed to get their foot in the door? \;\n \;\nThis talk wil l discuss some of the challenges that potential employees face while loo king for careers in the cyber security industry. It will explore potenti al career paths for new high school and college graduates\, mid-career e mployees with a technical background\, as well as mid-career employees w ith no technical background. The discussion will also focus on ways to h elp position yourself for success in the industry\, touching on security internships\, university diplomas\, industry certificates\, Portland-ba sed security meetings\, and self-study resources. \;\n \;\nRyan Kr ause is a penetration tester based in the Portland\, Oregon area. He has worked in various areas of the security field for the past 11 years for companies such as HP\, eEye Digital Security/BeyondTrust\, and Comcast with a primary focus on application security and development. He is curr ently a consultant at NetSPI where he performs web and network penetrati on tests and assists clients with reducing their overall security exposu re.\n\nTags: AppSec\, owasp\, security\, Careers\, Pen Testing\n\nImport ed from: http://calagator.org/events/1250474926 URL:https://www.meetup.com/OWASP-Portland-Chapter/events/258470135/ SUMMARY:Portland OWASP - Breaching the Cyber Security Job Industry with R yan Krause LOCATION:Simple 120 SE Clay St Floor 2\, Portland\, OR 97214: 120 SE Clay St Floor 2\, Portland OR 97214 United States SEQUENCE:1 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20190301T175540Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20190410T200000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20190410T180000 DTSTAMP;VALUE=DATE-TIME:20190301T175540Z LAST-MODIFIED;VALUE=DATE-TIME:20190301T175540Z UID:http://calagator.org/events/1250475171 DESCRIPTION:OWASP Top 10 for JavaScript Developers \;\n \;\nThe OWA SP Top 10 is a powerful awareness document for web application security. It represents a broad consensus about the most critical security risks to web applications. \;\n \;\nWith the release of the OWASP TOP 10 2017 we saw new issues rise as contenders of most common issues in the web landscape. Much of the OWASP documentation displays issues\, and rem ediation advice/code relating to Java\, C++\, and C#\; however not much relating to JavaScript. JavaScript has drastically changed over the last few years with the release of Angular\, React\, and Vue\, alongside the popular use of NodeJS and its libraries/frameworks. This talk will intr oduce you to the OWASP Top 10 explaining JavaScript client and server-si de vulnerabilities. \;\n \;\nLewis Ardern is a Senior Security Con sultant at Synopsys. His primary areas of expertise are in web security and security engineering. Lewis enjoys creating and delivering security training to various types of organizations and institutes in topics such as web and JavaScript security. He is also the founder of the Leeds Eth ical Hacking Society and has helped develop projects such as bXSS (https ://github.com/LewisArdern/bXSS) and SecGen (https://github.com/cliffe/se cgen).\n\nTags: AppSec\, owasp\, security\, javascript\, react\, angular \, Vue\, ember\, node\n\nImported from: http://calagator.org/events/1250 475171 URL:https://www.meetup.com/OWASP-Portland-Chapter/events/259395373/ SUMMARY:Portland OWASP - OWASP Top Ten For Javascript Developers with Lew is Ardern LOCATION:New Relic: 111 SW 5th Avenue\, Suite 2700\, Portland Oregon 9720 4 United States SEQUENCE:1 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20190413T155552Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20190514T200000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20190514T180000 DTSTAMP;VALUE=DATE-TIME:20190413T155552Z LAST-MODIFIED;VALUE=DATE-TIME:20190413T155552Z UID:http://calagator.org/events/1250475428 DESCRIPTION:Following up Ryan Krause's talk on breaking into the cybersec urity industry\, May's chapter meeting hosted by Zapproved will offer at tendees an opportunity to hear from hiring managers and InfoSec/AppSec l eaders on what they look for in hiring for their roles and thoughts on c areer progression. Attendees will have ample opportunity to ask question s and engage our panel. \;\n \;\n##Panel: \;\n###Zefren Edior - Umpqua Bank \;\n \;\nZefren currently works at Umpqua Bank\, and he is the Information Security Assurance Lead. He has 10 plus years of e xperience in IT operations\, information security\, risk management\, co mpliance and audit. He mentors and advises students\, who have worked at public accounting firms\, big tech companies\, and startups. He is pass ionate about technology\, cybersecurity\, and helping people align their knowledge\, skills\, and abilities to achieve personal and professional growth. \;\n \;\n###Patterson Cake - Haven Information Security / PeaceHealth \;\n \;\nPatterson has been in information technology for over 20 years\, focusing on security for the past several years in offensive\, defensive and leadership roles. He is the founder of Haven I nformation Security\, an instructor for SANS\, and the Principal Cyberse curity Engineer for PeaceHealth. \;\n \;\n###Josha Bronson - Brons ec \;\n \;\nJosha is a founder at bronsec\, working with clients b ig and small on all aspects of security. Former security team founder at yammer. \;\n \;\n###Sam Harwin - Salesforce \;\n \;\nSam le ads a technical team of security engineers that assess a wide variety of Enterprise facing infrastructure for the organization. They focus on pe rforming technical security testing\, risk assessments\, and providing b usiness risk guidance on a wide variety of infrastructure technologies s uch as operating systems (Mac\, Linux\, Windows\, iOS\, Android)\, devic es (mobile\, embedded technologies\, IOT)\, networks (wired\, wireless\, cloud)\, and applications (endpoint\, mobile\, public cloud). \;\n&# 13\;\n###Philip Jenkins - Zapproved \;\n \;\nPhilip is director of compliance and IT at Zapproved. He has over 20 years’ experience in IT security\, network management\, system engineering\, and IT processes. H is past experience includes Director of Security at Jama Software and CI SO at Strands Finance. Philip holds his CISSP and CISM certifications an d is a recognized leader in information security. He is active in (ISC)2 \, ISACA\, OWASP\, InfraGard\, and ISSA.\n\nTags: AppSec\, owasp\, secur ity\, Careers\n\nImported from: http://calagator.org/events/1250475428 URL:https://www.meetup.com/OWASP-Portland-Chapter/events/260486258/ SUMMARY:Portland OWASP - InfoSec and AppSec: Recruiting\, Interviewing\, Hiring Q&A LOCATION:Zapproved: 1414 NW Northrup Street #700\, Portland OR 97209 USA SEQUENCE:2 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20190603T162138Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20190619T200000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20190619T180000 DTSTAMP;VALUE=DATE-TIME:20190603T162138Z LAST-MODIFIED;VALUE=DATE-TIME:20190603T162138Z UID:http://calagator.org/events/1250475700 DESCRIPTION:Web Application Security spreads over the application functio nality\, the platform it is running on\, the development and deployment environment\, third-party applications used\, and last but not least\, t he open source code it utilizes. The requirements breadth is mind-boggli ng. You ignore any of these aspects and you become vulnerable. \;\n&# 13\;\nThis talk will discuss a structured approach to establish essentia l security requirements based on the CIA triad. The discussion will then expand over how these requirements manifest in the industry standards such as PCI\, Government agencies\, and globally. It will also delve int o third party and open source code scenarios. The audience will take ho me a checklist of different aspects of security requirements to consider when building a Web application. \;\n \;\nBio: Bhushan Gupta\, G upta Consulting\, LLC. \;\n \;\nProven champion for quality and we ll-versed with software quality engineering\, and an AppSec researcher\, Bhushan is the principal consultant at Gupta Consulting\, LLC. A Certif ied Six Sigma Black Belt (ASQ)\, he possesses deep and broad experience in solving complex problems\, change management\, and coaching and mento ring. As a member of Open Web Application Security Project (OWASP)\, he is dedicated to driving the AppSec to higher levels via integration of s ecurity into Agile software development life cycle. His research areas a re: elicitation of security requirements\, comprehensive testing approac hes beyond penetration testing\, application of test tools and use of AI (Machine Learning) in secure web application development. \;\n \; \nBhushan has a MS in Computer Science (1985) from New Mexico Tech and h as worked at Hewlett-Packard and Nike Inc. in various roles. He was a fa culty member at the Oregon Institute of Technology\, Software Engineerin g department\, from 1985 to 1995 and is currently an Adjunct Faculty mem ber.\n\nTags: AppSec\, owasp\, security\n\nImported from: http://calagat or.org/events/1250475700 URL:https://www.meetup.com/OWASP-Portland-Chapter/events/261650911/ SUMMARY:Portland OWASP - Security Requirement Elicitation with Bhushan Gu pta LOCATION:CloudBolt Software: 531 SE 14th Ave Suite 106\, Portland OR 9721 4 US SEQUENCE:1 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20190624T215959Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20190710T200000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20190710T180000 DTSTAMP;VALUE=DATE-TIME:20190624T215959Z LAST-MODIFIED;VALUE=DATE-TIME:20190624T215959Z UID:http://calagator.org/events/1250475801 DESCRIPTION:What are the best current practices for building modern\, com pletely standards-based (OIDC) web applications? Which flow should you u se? How should you renew expired access tokens? How do you work with mul tiple resource servers? How do you achieve single-sign on? How can you m ake logging into your app as seamless as possible? We will demonstrate h ow simple it is to do all of this using open source libraries maintained by ForgeRock. Together we will deep dive into what these libraries are doing for you behind the scenes: PKCE\, service workers\, IndexedDB stor age\, hidden iframes\, and more. In the end you will have all the tools at your disposal to easily build your next modern web app with OIDC. \;\n \;\nJake Feasel \;\nDeveloper Experience Lead\; Forgerock \;\n \;\nJake has been working in the web platform for 20 years\, all the while primarily interested in the use of standards and open source technologies. Jake is currently a senior engineer at ForgeRock\, where h e has been for the last seven years. He is most recently responsible for improving the ways in which developers interact with the ForgeRock Iden tity Platform.\n\nTags: AppSec\, owasp\, security\, javascript\, oauth2\ , OIDC\n\nImported from: http://calagator.org/events/1250475801 URL:https://www.meetup.com/OWASP-Portland-Chapter/events/262593317/ SUMMARY:Portland OWASP - The Easy (and Secure!) Way to Build JavaScript W eb Apps with OAuth 2 & OIDC with Jake Feasel LOCATION:New Relic: 111 SW 5th Avenue\, Suite 2700\, Portland Oregon 9720 4 United States SEQUENCE:1 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20190712T160231Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20190813T200000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20190813T180000 DTSTAMP;VALUE=DATE-TIME:20190712T160231Z LAST-MODIFIED;VALUE=DATE-TIME:20190712T160231Z UID:http://calagator.org/events/1250475875 DESCRIPTION:Using Graph Theory to Understand Security \;\n \;\nInfo rmation security is hard. It must be\, because we keep getting hacked. O ne aspect that makes it so difficult is the level of complexity that exi sts in even a modestly-sized digital infrastructure. Humans can consider only so many security relationships\, trust boundaries\, and attack sce narios at once. This complexity makes it hard to decide where to focus o ur defensive resources and we're regularly led astray by the latest shin y tool or security advisory. Remarkably\, our adversaries actually have a similar challenge: once a digital intruder gains a foothold in an envi ronment that is completely new to them\, how do they know what next step s they should take to efficiently achieve their goal? The environments t hey attack are not only complex\, they are also unexplored landscapes th at must be mapped out. \;\n \;\nThis is where graph theory can len d a hand. Several open source tools\, such as BloodHound and Infection M onkey\, provide intruders (whether that be your friendly neighborhood pe ntester or your adversaries) with easy ways to map out infrastructures a nd identify the quickest path to your crown jewels. While this is certai nly alarming\, we can also use these tools ourselves to find out what ou r infrastructures look like in the eyes of an attacker. \;\n \;\nI n this talk\, Tim will provide a brief introduction to graph theory\, sh ow some demos of the free tools that use it\, and discuss how he is usin g these techniques to build automated threat models "\;at scale" \; to make defenders' lives easier. \;\n \;\nSpeaker: Timothy Morg an \;\n \;\nAfter earning his computer science degrees (B.S.\, Har vey Mudd College and M.S.\, Northeastern University) and spending a shor t time as a software developer\, Tim began his career in application sec urity and vulnerability research. In his work as a consultant over the p ast 14 years\, Tim has led projects as varied as application pentests\, incident response\, digital forensics\, secure software development trai ning\, phishing exercises\, and breach simulations. Tim has also present ed his independent research on Windows registry forensics\, XML external entities attacks\, web application timing attacks\, and practical appli cation cryptanalysis at conferences such as DFRWS\, OWASP's AppSec USA\, BSidesPDX\, and BlackHat USA. \;\n \;\nFor the past three years T im has been building an innovative new risk-based vulnerability manageme nt product (DeepSurface) that helps his customers gain a much deeper und erstanding of the complex relationships present in their digital infrast ructures. Visit kanchil.com to learn more about Tim's latest R&\;D ef fort.\n\nTags: AppSec\, owasp\, infosec\, graphs\n\nImported from: http: //calagator.org/events/1250475875 URL:https://www.meetup.com/OWASP-Portland-Chapter/events/263095211/ SUMMARY:Portland OWASP: Using Graph Theory to Understand Security with Ti m Morgan LOCATION:Simple: 1615 SE 3rd Ave\, Suite 200\, Portland OR 97214 US SEQUENCE:1 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20190802T002859Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20191009T200000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20191009T180000 DTSTAMP;VALUE=DATE-TIME:20190802T002859Z LAST-MODIFIED;VALUE=DATE-TIME:20190802T002859Z UID:http://calagator.org/events/1250475943 DESCRIPTION:Attacks always get better\, so your threat modeling needs to evolve. Learn what's new and important in threat modeling in 2019. Compu ters that are things are subject to different threats\, and systems face new threats from voice cloning and computational propaganda and the gro wing importance of threats “at the human layer.” Take home actionable wa ys to ensure your security engineering is up to date. \;\n \;\nSpe aker: Adam Shostack \;\nAdam is a leading expert on threat modeling\, and a consultant\, entrepreneur\, technologist\, author and game design er. He's a member of the BlackHat Review Board\, and helped create the C VE and many other things. He currently helps many organizations improve their security via [Shostack &\; Associates](https://associates.shost ack.org/)\, and advises startups including as a Mach37 Star Mentor. Whil e at Microsoft\, he drove the Autorun fix into Windows Update\, was the lead designer of the SDL Threat Modeling Tool v3 and created the "\; Elevation of Privilege"\; game. Adam is the author of [Threat Modeli ng: Designing for Security](https://www.amazon.com/Threat-Modeling-Desig ning-Adam-Shostack/dp/1118809998/ref=as_li_ss_tl?ie=UTF8&\;qid=150410 7491&\;sr=8-1&\;keywords=threat+modeling&\;linkCode=ll1&\;ta g=adamshostack-20&\;linkId=cc4d1967c923c9c8b254ee2d20dc564f)\, and th e co-author of [The New School of Information Security](https://www.amaz on.com/New-School-Information-Security-ebook/dp/B004UAALZ0/ref=as_li_ss_ tl?ie=UTF8&\;linkCode=ll1&\;tag=adamshostack-20&\;linkId=8ef6da bf941ae63313313cef60cef269).\n\nTags: AppSec\, owasp\, security\, threat modeling\n\nImported from: http://calagator.org/events/1250475943 URL:https://www.meetup.com/OWASP-Portland-Chapter/events/263660173/ SUMMARY:Portland OWASP - Threat Modeling in 2019 with Adam Shostack LOCATION:New Relic: 111 SW 5th Avenue\, Suite 2700\, Portland Oregon 9720 4 United States SEQUENCE:1 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20191007T224101Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20191112T200000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20191112T180000 DTSTAMP;VALUE=DATE-TIME:20191007T224101Z LAST-MODIFIED;VALUE=DATE-TIME:20191007T224101Z UID:http://calagator.org/events/1250476311 DESCRIPTION:Tips on formulating complete sentences without acronyms\, lea rning to pretend you aren't the smartest person in the room\, choosing t he right animations for your PowerPoint presentations\, and more! Let's be honest\, you probably didn't get into info-sec because of your love f or public speaking\, your mastery of written and verbal communication\, or your highly-tuned social skills! Regardless\, these things are key to your success or failure in info-sec. Dare to join me for a frank if som ewhat tongue-in-cheek conversation regarding strategies for simplifying complex conversations\, recognizing and overcoming common communication obstacles\, translating leet-speak to business language and creating eff ective visual presentations. \;\n \;\nSpeaker: \;\nPatterson Ca ke \;\n \;\nPatterson has been in information technology for over 20 years\, focusing on security for the past several years in offensive\ , defensive and leadership roles. He is the founder of Haven Information Security\, an instructor for SANS\, and the Principal Cybersecurity Eng ineer for PeaceHealth.\n\nTags: owasp\, infosec\, AppSec\n\nImported fro m: http://calagator.org/events/1250476311 URL:https://www.meetup.com/OWASP-Portland-Chapter/events/265489799/ SUMMARY:Portland OWASP Chapter Meeting: Overcoming Your Greatest InfoSec Adversary: You! LOCATION:Zapproved: 1414 NW Northrup Street #700\, Portland OR 97209 USA SEQUENCE:1 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20191120T171105Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20191210T200000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20191210T180000 DTSTAMP;VALUE=DATE-TIME:20191120T171105Z LAST-MODIFIED;VALUE=DATE-TIME:20191120T184631Z UID:http://calagator.org/events/1250476444 DESCRIPTION:This talk focuses on building a security curriculum and teach ing it\, whether individually\, at the workplace or in academia. Start w ith the following question: Am I the right person to do it? A novice can be downright dangerous\, while an expert who can't teach as useful as a waterproof teabag. Security education is the first line of defense\, bu t who trains the trainers? Are students getting their money's worth? Wha t differentiates your training from others? Join the speaker to share li fe lessons\, funny anecdotes\, and useful advice on lecturing\, "\;c urriculuming"\;\, and critiquing. Learn what it means to containeriz e a syllabus\, deploy labs in a continuous integration-like environment using open source tools and why markdown is a better tool than PowerPoin t for creating new content. Consider security textbooks as obsolete\, &q uot\;office hours"\; mandatory\, and the impact of the Family Educat ional Rights and Privacy Act (FERPA). There will be a test at the end of the talk. \;\n \;\nSpeaker: John L. Whiteman \;\n \;\nJohn is a product security expert and instructor at Intel in Oregon. He's als o a part-time adjunct instructor teaching cybersecurity at the Universit y of Portland. In a past life\, John was a shipboard and classroom instr uctor in the United States Navy\, training hundreds of sailors in the da rk arts of passive sonar and torpedo countermeasure systems (in case the former didn't pan out). He also did a stint as a news director for a sm all radio station in Colorado. John has an M.S. in Computer Science from Georgia Tech and a B.A. in Asian Studies from the University of Marylan d UC. He holds CISSP\, CCSP and CEH security certifications. John blogs and loves to podcast for the OWASP chapter in Portland.\n\nTags: AppSec\ , infosec\, owasp\n\nImported from: http://calagator.org/events/12504764 44 URL:https://www.meetup.com/OWASP-Portland-Chapter/events/266600231/ SUMMARY:Portland OWASP Chapter Meeting: So You Want to Teach Security? Bu lly for You! LOCATION:Autodesk Inc: 221 SE Ankeny St\, Portland OR 97214 us SEQUENCE:3 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20200104T191659Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20200107T203000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20200107T193000 DTSTAMP;VALUE=DATE-TIME:20200104T191659Z LAST-MODIFIED;VALUE=DATE-TIME:20200104T191659Z UID:http://calagator.org/events/1250476635 DESCRIPTION:Happy New Year! Welcome to our second ever OWASP PDX study ni ght. Our January topic will be "\;Burp Suite Basics"\; presented by Sophia Anderson. Sophia is a security consultant for NetSPI performi ng web application penetration tests for Fortune 500 clients to discover vulnerabilities. Sorry no pizza unless you want to bring :). \;\n 3\;\nStudy Nights are smaller\, bitesize\, digestible\, skill building m ini lectures or workshops for those interested in learning new skills\, tools\, tricks\, or new CTF challenges. It’s also meant for members to p ractice communication skills and teamwork in a supportive environment.&# 13\;\n \;\nStudy Nights meet the first Tuesday of each month at the ^ H hackerspace in North Portland. Doors will be at 7pm\, event will start at 7:30pm and wrap up by 8:30. Please bring your computer with Burp Sui te installed and preferred note taking mechanisms. \;\n \;\nSeatin g is limited \;\n \;\nRSVP: https://www.meetup.com/OWASP-Portland- Chapter/events/267644393/ \;\n \;\n\n\nTags: owasp\, infosec\, App Sec\n\nImported from: http://calagator.org/events/1250476635 URL:https://www.meetup.com/OWASP-Portland-Chapter/events/267644393/ SUMMARY:Portland OWASP Study Night: Burp Suite Basics with Sophia Anderso n LOCATION:Ctrl-H / PDX Hackerspace: 7608 N Interstate Ave\, Portland OR 97 217 us SEQUENCE:1 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20200106T172802Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20200113T210000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20200113T180000 DTSTAMP;VALUE=DATE-TIME:20200106T172802Z LAST-MODIFIED;VALUE=DATE-TIME:20200106T172802Z UID:http://calagator.org/events/1250476637 DESCRIPTION:Burp Suite is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process\, from initial mapping and analysi s of an application’s attack surface\, through to finding and exploiting security vulnerabilities. Burp gives you full control\, letting you com bine advanced manual techniques with state-of-the-art automation\, to ma ke your work faster\, more effective\, and more fun. \;\n \;\nThe speaker covers the basics of the tool along with real-world experiences and techniques that can help you as a pen tester. \;\n \;\nSpeaker : Ryan Krause \;\n \;\nRyan is a penetration tester based in the P ortland\, Oregon area. He has worked in various areas of the security fi eld for the past 11 years for companies such as HP\, eEye Digital Securi ty/BeyondTrust\, and Comcast with a primary focus on application securit y and development. He is currently a consultant at NetSPI where he perfo rms web and network penetration tests and assists clients with reducing their overall security exposure.\n\nTags: AppSec\, infosec\, owasp\n\nIm ported from: http://calagator.org/events/1250476637 URL:https://www.meetup.com/OWASP-Portland-Chapter/events/267693352/ SUMMARY:Portland OWASP Chapter Meeting - Introduction to Burp Suite with Ryan Krause LOCATION:Vacasa: 926 NW 13th Street\, Portland OR 97209 USA SEQUENCE:1 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20191218T040210Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20200211T210000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20200211T173000 DTSTAMP;VALUE=DATE-TIME:20191218T040210Z LAST-MODIFIED;VALUE=DATE-TIME:20260513T005812Z UID:http://calagator.org/events/1250476530 DESCRIPTION:Want to test your skills in identifying web app vulnerabiliti es? Join OWASP Portland and Security Innovation as members compete in C MD+CTRL\, a web application cyber range where players exploit their way through hundreds of vulnerabilities that lurk in business applications t oday. Success means learning quickly that attack and defense is all abo ut thinking on your feet. \;\n \;\nFor each vulnerability you unco ver\, you are awarded points. Climb the interactive leaderboard for a ch ance to win fantastic prizes! CMD+CTRL is ideal for development teams to train and develop skills\, but anyone involved in keeping your organiza tion’s data secure can play - from developers and managers and even CISO s. \;\n \;\nAll you need is your laptop and your inner evil-doer.& #13\;\n \;\nRegister early to reserve your spot and get a sneak peek at our cheat sheets and FAQs!\n\nTags: owasp\, infosec\, AppSec\n\nImpor ted from: http://calagator.org/events/1250476530 URL:https://www.meetup.com/OWASP-Portland-Chapter/events/267265705 SUMMARY:Portland OWASP Chapter Meeting: CMD+CTRL Web Application Cyber Ra nge LOCATION:Zapproved: 1414 NW Northrup Street #700\, Portland OR 97209 USA SEQUENCE:3 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20200127T051715Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20200218T203000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20200218T193000 DTSTAMP;VALUE=DATE-TIME:20200127T051715Z LAST-MODIFIED;VALUE=DATE-TIME:20200127T052152Z UID:http://calagator.org/events/1250476748 DESCRIPTION:Threat modeling is a vital skill for security hats of all col ors\, as well as for product designers\, managers and developers. Ray is a Life Coach and Conspiracy Theorist. He does AppSec in his non-spare t ime for money. Zak is an Application Security Engineer with many years o f development experience. \;\n \;\nBring your own dinner/snacks. N o provided pizza. \;\n \;\nStudy Nights are smaller\, bitesize\, d igestible\, skill building mini lectures or workshops for those interest ed in learning new skills\, tools\, tricks\, or new CTF challenges. It’s also meant for members to practice communication skills and teamwork in a supportive environment. \;\n \;\nStudy Nights meet the first Tu esday of each month at the ^H hackerspace in North Portland. Doors will be at 7pm\, event will start at 7:30pm and wrap up by 8:30. Please bring your computer with Burp Suite installed and preferred note taking mecha nisms. \;\n \;\nSeating is limited \;\n \;\nRSVP: https://ww w.meetup.com/OWASP-Portland-Chapter/events/268231564/ \;\n\n\nTags: owasp\, infosec\, AppSec\n\nImported from: http://calagator.org/events/1 250476748 SUMMARY:Portland OWASP Study Night: Intro to Threat Modeling with Ray and Zak LOCATION:CTRL-H: 7608 N Interstate Ave.\, Portland Oregon 97217 US SEQUENCE:4 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20200227T042601Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20200303T203000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20200303T193000 DTSTAMP;VALUE=DATE-TIME:20200227T042601Z LAST-MODIFIED;VALUE=DATE-TIME:20200227T042601Z UID:http://calagator.org/events/1250476897 DESCRIPTION:In this class\, we’ll be exploring how to find the vulnerabil ities in OWASP Juice Shop with Burp Suite (and maybe some other security tools if we get some time). You’ll learn to set up the environment to p lay with in your own time. As well as learning to practically apply the different features of Burp Suite and when it is and isn’t the most optim al tool. This will help you to reproduce security vulnerabilities or hel p find them for bug bounty programs. \;\n \;\nBio: Jordan is an Ap plication Security Engineer at New Relic and a graduate from the Univers ity of Pittsburgh with a degree in computer science. She’s Champion rank ed in Rocket League and does yoga in her free time. \;\n \;\nSeati ng is limited \;\n \;\nRSVP: https://www.meetup.com/OWASP-Portland -Chapter/events/269026936/ \;\n \;\nOWASP Juice Shop: https://owas p.org/www-project-juice-shop/ \;\n \;\nBurp Suite CE: https://port swigger.net/burp/releases/professional-community-2020-1?requestededition =community\n\nTags: owasp\, infosec\, AppSec\n\nImported from: http://ca lagator.org/events/1250476897 SUMMARY:Exploring OWASP Juice Shop (with Burp Suite) LOCATION:CTRL-H: 7608 N Interstate Ave.\, Portland Oregon 97217 US SEQUENCE:1 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20200222T082355Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20200318T200000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20200318T180000 DTSTAMP;VALUE=DATE-TIME:20200222T082355Z LAST-MODIFIED;VALUE=DATE-TIME:20200222T082355Z UID:http://calagator.org/events/1250476838 DESCRIPTION:Join us for a night of networking and discussion about securi ty. Kendra will kick it off with a short talk about how to make friends with your developers through automation. Then we will split up into grou ps and allow people to discuss cloud security\, application security\, d evops and jobs. \;\n \;\nBio: Kendra Ash (@securelykash) is a secu rity engineer at Vacasa\, actively building out an application security program by leveraging guidance from her network and incorporating indust ry standards. She is also actively involved with the Portland OWASP chap ter. \;\n \;\nRSVP: https://www.meetup.com/OWASP-Portland-Chapter/ events/268903220/ \;\n\n\nTags: owasp\, infosec\, AppSec\n\nImported from: http://calagator.org/events/1250476838 SUMMARY:Portland OWASP - Kendra Ash - Security Mixer! LOCATION:New Relic: 111 SW 5th Avenue\, Suite 2700\, Portland Oregon 9720 4 United States SEQUENCE:1 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20200416T034203Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20200421T083000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20200421T073000 DTSTAMP;VALUE=DATE-TIME:20200416T034203Z LAST-MODIFIED;VALUE=DATE-TIME:20200416T034203Z UID:http://calagator.org/events/1250476981 DESCRIPTION:In this class\, we'll briefly go over the 10 things that I wo uld like to show anyone using wireshark. There are no prerequisites for this presentation. If you would like to follow along please install the most recent 3.x version of Wireshark. Example packet captures will be pr ovided. \;\n \;\nKevan Vanhoff is a Network Security Engineer livi ng in Portland\, Oregon. \;\n \;\nRSVP: https://www.meetup.com/OWA SP-Portland-Chapter/events/270075900/\n\nTags: owasp\, infosec\, AppSec\ n\nImported from: http://calagator.org/events/1250476981 SUMMARY:Portland OWASP Training Night (Virtual) - Learn 10 Things About W ireshark LOCATION:Online: placeholder for on-line events\, SEQUENCE:1 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20200607T214834Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20200609T203000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20200609T193000 DTSTAMP;VALUE=DATE-TIME:20200607T214834Z LAST-MODIFIED;VALUE=DATE-TIME:20200607T214834Z UID:http://calagator.org/events/1250477057 DESCRIPTION:RSVP: https://www.meetup.com/OWASP-Portland-Chapter/events/27 1144214/ \;\n \;\nAbstract: \;\nWe’ll discuss a program analysi s tool we’re developing called Semgrep. It's a multilingual semantic too l for writing security and correctness queries on source code (for Pytho n\, Java\, Go\, C\, and JS) with a simple “grep-like” interface. The ori ginal author\, Yoann Padioleau\, worked on Semgrep’s predecessor\, Cocci nelle\, for Linux kernel refactoring\, and later developed Semgrep while at Facebook. He’s now full time with us at r2c. \;\n \;\nSemgrep is a free open-source program analysis toolkit that finds bugs using cus tom analysis we’ve written and OSS code checks. Semgrep is ideal for sec urity researchers\, product security engineers\, and developers who want to find complex code patterns without extensive knowledge of ASTs or ad vanced program analysis concepts. \;\n \;\nSpeaker bio: \;\nCli nt Gibler (@clintgibler) is the Head of Security Research for r2c\, a sm all startup working on giving security tools directly to developers. Pre viously\, Clint was a Research Director at NCC Group\, a global security consulting firm\, where he helped companies implement security automati on and DevSecOps best practices as well as performed penetration tests f or companies ranging from large enterprises to new startups.Clint has pr eviously spoken at conferences including BlackHat USA\, AppSec USA/EU/Ca li\, BSidesSF\, and DevSecCon Seattle/London/Tel Aviv/Singapore. Clint h olds a Ph.D. in Computer Science from the University of California\, Dav is.Want to keep up with security research? Check out *tl\;dr sec*\, Clin t’s newsletter that contains summaries of artisanally curated\, top talk s and useful security links and resources from around the web. \;\n&# 13\;\n \;\nRSVP: https://www.meetup.com/OWASP-Portland-Chapter/events /271144214/\n\nTags: owasp\, infosec\, AppSec\n\nImported from: http://c alagator.org/events/1250477057 SUMMARY:Portland\, Oregon OWASP Study Night (Virtual) - Detect Complex Co de Patterns Using Semantic Grep LOCATION:Virtual Meeting: false SEQUENCE:1 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20200713T190641Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20200716T203000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20200716T193000 DTSTAMP;VALUE=DATE-TIME:20200713T190641Z LAST-MODIFIED;VALUE=DATE-TIME:20200713T190641Z UID:http://calagator.org/events/1250477120 DESCRIPTION:Topic - Secure Code Warrior Tournament Study Session. We'll c over how to register for our upcoming tournament\, cover the game rules\ , navigate through the menus and do a few practice challenges. Let's be new to this together! This meeting will also be recorded and posted to t he PDX OWASP YouTube channel. \;\n \;\nHost: Samuel Lemly \;\n& #13\;\nRSVP: https://www.meetup.com/OWASP-Portland-Chapter/events/271905 106/ \;\n\n\nTags: owasp\, infosec\, AppSec\, ctf\, secure coding\n\n Imported from: http://calagator.org/events/1250477120 SUMMARY:Portland OWASP Study Night - Secure Code Warrior Tournament Study Session LOCATION:Virtual: false SEQUENCE:1 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20200701T021743Z DTEND;VALUE=DATE:20200725 DTSTART;VALUE=DATE:20200721 DTSTAMP;VALUE=DATE-TIME:20200701T021743Z LAST-MODIFIED;VALUE=DATE-TIME:20200701T021743Z UID:http://calagator.org/events/1250477099 DESCRIPTION:This event runs from Tuesday\, July 21\, 2020 at 8am through Friday\, July 24\, 2020 at 8pm.\n\nDescription:\nSecure Code Warrior is going to be hosting a July virtual tournament for our OWASP Portland\, O regon chapter. It's free! \;\n \;\nImprove your secure coding skil ls by joining the OWASP Portland Secure Coding tournament on July 21st 8 :00AM PDT through July 24th 8:00PM PDT. The tournament allows you to com pete against the other participants in a series of vulnerable code chall enges that ask you to identify a problem\, locate insecure code\, and fi x a vulnerability. \;\n \;\nAll challenges are based on the OWASP Top 10\, and players can choose to compete in a range of software langua ges including Java EE\, Java Spring\, C# MVC\, C# WebForms\, Go\, Ruby o n Rails\, Python Django &\; Flask\, Scala Play\, Node.JS\, React\, an d both iOS and Android development languages. \;\n \;\nThroughout the tournament\, players earn points and watch as they climb to the top of the leaderboard. Prizes will be awarded to the top finishers! First p lace will receive a hoodie\, and lots of bragging rights! \;\n \;\ nTournament times: July 21- July 24th 8:00 AM 9:00 PM \;\n \;\nPra ctice times: July 14th - July 21st 8:00 AM \;\n \;\nRSVP: https:// www.meetup.com/OWASP-Portland-Chapter/events/271638472/ \;\n\n\nTags: owasp\, infosec\, AppSec\, ctf\, secure coding\n\nImported from: http:/ /calagator.org/events/1250477099 SUMMARY:OWASP Portland\, Oregon - Secure Coding Tournament (Virtual) LOCATION:Virtual: false SEQUENCE:1 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20200827T160654Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20200916T130000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20200916T120000 DTSTAMP;VALUE=DATE-TIME:20200827T160654Z LAST-MODIFIED;VALUE=DATE-TIME:20200827T160654Z UID:http://calagator.org/events/1250477249 DESCRIPTION:Summary of the Talk: \;\nAutomate The CloudSec Things - Ho w to automate your response to security incidents within the public clou d space using your current security stack and AWS Lambda. \;\n \;\ nSpeaker's Bio: \;\nAshish Patel is a security engineer on the Box In frastructure Security team. He usually lives in the realm of cloud secur ity and automating security related tasks that scale across multiple clo uds &\; attack surfaces. \;\n \;\nRSVP: https://www.meetup.com/ OWASP-Portland-Chapter/events/272846648/\n\nTags: owasp\, infosec\, AppS ec\, cloudsec\n\nImported from: http://calagator.org/events/1250477249 SUMMARY:PDX OWASP - Cloud Security Lunch and Learn with Ashish Patel LOCATION:Virtual: false SEQUENCE:1 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20201116T041931Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20201118T010000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20201118T000000 DTSTAMP;VALUE=DATE-TIME:20201116T041931Z LAST-MODIFIED;VALUE=DATE-TIME:20201116T041931Z UID:http://calagator.org/events/1250477433 DESCRIPTION:Overview: \;\nUse OWASP ZAP to detect web application vuln erabilities in a CI/CD pipeline\; for this\, how we automate ZAP with ex isting automation scripts. \;\n \;\nSpeaker: \;\nRoop Kaur\, an engineer at Zapproved \;\n \;\nRSVP: \;\nhttps://www.meetup.c om/OWASP-Portland-Chapter/events/274622842/ \;\n\n\nTags: owasp\, inf osec\, AppSec\n\nImported from: http://calagator.org/events/1250477433 SUMMARY:PDX OWASP - Automate OWASP ZAP Lunch and Learn with Roop Kaur LOCATION:Online via Zoom: false SEQUENCE:1 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20210410T040518Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20210519T130000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20210519T120000 DTSTAMP;VALUE=DATE-TIME:20210410T040518Z LAST-MODIFIED;VALUE=DATE-TIME:20210410T040518Z UID:http://calagator.org/events/1250477666 DESCRIPTION:RSVP: https://www.meetup.com/OWASP-Portland-Chapter/events/27 7480846/ \;\n \;\nExcerpt: \;\n \;\nTraditionally\, breaches that make the news are about stealing data and that data being resold f or financial gains. Think Target\, Ashley Madison\, Marriott and so many more. Recently a spotlight was put on supply chain security via the Sol arWinds breach and how that affected many companies. The adversaries wer e able to inject malicious code into applications that have a lot or rig hts and are widely deployed in many organizations\, small and large alik e. \;\n \;\nWe will discuss the framework\, your SDLC (SDL\, SSDLC \, etc.) – Secure Development Lifecycle – to lay out how you are going t o develop and secure your applications. Customers care about this. Once you have your SDLC\, you need to define your processes\, select your too ls\, integrate them into your SDLC and finally automate those tools. Thi s is not a short process and often multiple iterations are necessary to get to a good place. The goal of this presentation is to make you aware of a variety of tools that are out there\, the various steps along the w ay of your SDLC you need to take and how to complete each of these steps . \;\n \;\nBIO: \;\n \;\nDerek Hill has over 25 years of exp erience in Information Security and Information Technology. He is curren tly the Director of AppSec engineering at ForgeRock\, an Identity and Ac cess management company\, based in Vancouver\, WA. He is responsible for implementing and improving the company’s product security on a continua l basis. He works closely with software engineers and security engineers in multiple countries to ensure the ForgeRock products are developed se curely and tested in all phases of the development lifecycle. In additio n to his full time job\, Derek is also a SANS community instructor teach ing Security Leadership and CISSP prep courses. \;\n \;\nPrior to his current position\, Derek held Information Security\, IT management a nd technical roles at both large and small companies. In each role\, he consistently focused on managing high-performing teams\, delivering effi cient solutions and providing excellent services to a variety of stakeho lders\, maximizing uptime and security. Derek also has significant exper ience in cloud technologies\, responsible for moving\, securing and main taining them in various cloud environments through their lifecycle.\n\nT ags: owasp\, infosec\, AppSec\, cloudsec\n\nImported from: http://calaga tor.org/events/1250477666 SUMMARY:Application Security -- The Framework\, Processes and Tools to Se cure Your Apps LOCATION:Virtual: false SEQUENCE:1 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20210612T192902Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20210619T170000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20210619T100000 DTSTAMP;VALUE=DATE-TIME:20210612T192902Z LAST-MODIFIED;VALUE=DATE-TIME:20210612T192902Z UID:http://calagator.org/events/1250477765 DESCRIPTION:PNWSEC\, aka\, Pacific Northwest Application Security Confere nce is a free application security conference that will be held Saturday \, June 19th. It is a virtual\, online event sponsored by the OWASP chap ters of Portland\, Vancouver\, and Victoria. \;\n \;\nKymberlee Pr ice and Jim Manico to keynote! All of the speakers and workshops can be found on the website: https://pnwcon.com/ \;\n \;\nStretching the Truth: Attacking the Elastic Agent \;\nBy Zander Work \;\n \;\n Starting Left with Cloud Security \;\nBy Stefania Chaplin \;\n \;\nFuzzing Python Native Extensions \;\nBy Lucas Amorim \;\n \ ;\nCVE-2020-17049: Kerberos Bronze Bit Attack \;\nBy Jake Karnes \ ;\n \;\nZero-Trust - The Paradigm Shift Required in a Post-pandemic W orld \;\nBy Timothy Morgan \;\n \;\nAd-Tech for Security People \;\nBy Will Whittaker \;\n \;\nSecure Coding of Industrial Con trol Systems \;\nBy Vivek Ponnada \;\n \;\nSix Ways Known-vulne rabilities Sneak Into Docker Containers \;\nBy Julius Musseau \;\n \;\nEffects Malware Hunting in Cloud Environment \;\nBy Filipi Pi res \;\n \;\nHoneytokens: Detecting attacks to your web apps using decoys and deception \;\nBy Dana Epp \;\n \;\nDon’t B-MAD: Mak ing Threat Modeling Less Painful \;\nBy Adam Shostack \;\n \;\n Women in Appsec: Advice to Differentiate Your Skills \;\nBy Aarti Gad hia \;\n \;\nCultivating Cyber Warriors \;\nBy Patterson Cake&# 13\;\n \;\nInsiders Guide to Mobile AppSec with OWASP MASVS \;\nBy Brian Reed \;\n \;\nFollow us on Twitter at @pnwseccon to see whe n the workshops are going to be released.\n\nTags: AppSec\, conference\, owasp\, cyber security\n\nImported from: http://calagator.org/events/12 50477765 URL:https://pnwcon.com/ SUMMARY:AppSec Pacific Northwest SEQUENCE:1 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20210531T215200Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20210629T130000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20210629T120000 DTSTAMP;VALUE=DATE-TIME:20210531T215200Z LAST-MODIFIED;VALUE=DATE-TIME:20210531T215200Z UID:http://calagator.org/events/1250477750 DESCRIPTION:Sarba is currently the Product Security Consultant at Umpqua Bank where she is collaborating and acting as a security advisor to the Product teams when new digital technologies and/or business needs are id entified. She is also the Membership Chair for the Women In Cybersecurit y(WiCyS) Oregon Affiliate\, the Chapter Lead for Infosec Girls - Oregon and the Founding member of WomenH2H\, a global community for women leade rs and changemakers. She is also a passionate volunteer and advocate fo r women’s empowerment\, education equity while being a writer and mentor at heart\, dedicated to helping individuals and organizations become mo re compassionate\, curious and cybersmart. \;\n \;\nRSVP: https:// www.meetup.com/OWASP-Portland-Chapter/events/278536668/\n\nTags: owasp\, infosec\, AppSec\n\nImported from: http://calagator.org/events/12504777 50 SUMMARY:OWASP PDX: My Journey to Becoming a CISSP : Study Tips and Life- lessons with Sarba Roy LOCATION:Virtual: false SEQUENCE:2 END:VEVENT BEGIN:VEVENT CREATED;VALUE=DATE-TIME:20210909T061654Z DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20210923T130000 DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20210923T120000 DTSTAMP;VALUE=DATE-TIME:20210909T061654Z LAST-MODIFIED;VALUE=DATE-TIME:20210909T061654Z UID:http://calagator.org/events/1250477913 DESCRIPTION:Let's talk InfoSec! \;\n \;\nRSVP: https://www.meetup.c om/OWASP-Portland-Chapter/events/280657220/ \;\n \;\nBios: \;\n \;\nCassie Clark: \;\nPassionate about bringing humans into secur ity. She develops awareness programs focused on behavior change\, user e nablement\, and culture. As Security Awareness Lead Engineer at Brex\, s he built and leads security awareness for employees and customers. Prior to Brex\, she built the security awareness function at Cruise and focus ed on security engagement at Salesforce. She holds a Master’s degree in Women’s Studies and can often be seen holding a cup of coffee. \;\n&# 13\;\nTraci Esteve: \;\nAs Director of Technology Governance and Risk for The Standard in Portland\, Oregon\, Traci Esteve is committed to pr otecting the confidentiality\, integrity\, and availability of informati on and processing resources. She began her career as a developer and inf rastructure engineer. This led to her rise to a premier technical archit ect at Accenture and to expanding the practice in Asia and Europe. Her j ourney includes staying home to raise her two sons and serving as an adv isor to organizations to increase profitability\, maximize customer valu e\, and effectively meet regulatory requirements. She has a BS in Applie d Science\, MBA certification from Miami University\, and a certificatio n in Cybersecurity Risk Management from Harvard University. Traci enjoys cooking with her family\, drawing\, hiking\, and encouraging high-schoo l students to believe in themselves.\n\nTags: owasp\, infosec\, AppSec\n \nImported from: http://calagator.org/events/1250477913 SUMMARY:OWASP PDX - InfoSec Panel Discussion LOCATION:Virtual: false SEQUENCE:1 END:VEVENT END:VCALENDAR