IAST and RASP – Innovative Code Security Workshop

Deutsch
Dieser Vortrag wird auf Deutsch gehalten. / This lecture will be held in German.


Dieser Workshop beginnt um 13:30 Uhr und wird in Englisch abgehalten. Teilnehmer können bereits um 12:30 Uhr am Mittagessen teilnehmen.
Durch die Unterstützung des Sponsors Contrast Security kostet der Workshop lediglich 49 Euro zzgl. Mwst.


The Code Security Workshop will provide you with all knowledge to remove Vulnerabilities like Bugs in your Code – using Techniques like Interactive Application Security Testing (IAST) and Runtime Application Self Protection (RASP).

Basic Development and Container Know How

  • Learn using Interactive Application Security Testing (IAST) to build secure code
  • Learn preventing attacks on Vulnerabilities which you forgot to fix with Runtime Application Self Protection (RASP)
  • Execute your own OWASP Benchmarks

  • Introduction Workshop Team (10 minutes)
  • Application Security and Supply chain security (10 minutes)
  • Dynamic and Static Application Security Testing, Software composition analysis, Web Application Firewall (10 minutes)
  • Technology Overview of Interactive Application Security Testing (IAST), Runtime Application Self Protection (RASP).
  • Setup Lab Dev Environment (java, .net core, node) (20 minutes)
  • Execute a OWASP Benchmark (1 hour) (Michael and Laurent)
  • Run several other applications (WebGoat, juiceshop, any web application of your choice)
  • Exercising application
  • Analyze vulnerabilities
  • Remediation: Exploit detected vulnerabilities
  • Integration in Continuous integration pipeline.
  • Deep Dive into SCA and SBOM – Questions and Answers

Please bring with you a Laptop and optional an own Application which you want to check on Vulnerability Issues.
Michael Krüger Michael Krüger is Security Expert at Contrast Security and helps Company's with the creation of secure Code. Michael has more than 10 years of experience in consulting and supporting Customers to make changes and create better results in their Application Security and Kubernetes Environments.
Laurent Levi Laurent Levi is Security Expert at Contrast Security and helps Company's with the creation of secure Code. Laurent has more than 10 years of experience in consulting and supporting Customers to make changes and create better results in their Application Security and Kubernetes Environments.