Recordings will be available here.

Viewers from Germany should use this alternate stream as YouTube is currently blocked for live events.

Katharine Brylski is currently a master student in Computer Science at the University of Paderborn (Germany). She graduated with a bachelor degree in computer science at the University of Paderborn in cooperation with Siemens, where she got first practical experiences in programming web applications. While studying at the University of Paderborn she got in touch with application and information security. Being highly interested in the field of IT security she decided to use her bachelor thesis to deepen her knowledge in this area. Within this work, she analyzed the security of a web application of her university by using a systematically developed penetration testing concept for detecting vulnerabilities which she created on her own. Her analysis focused on the 10 most critical security risks for web applications (according to the “OWASP Top 10″) and on the evaluation of the identified weaknesses. Furthermore Mrs. Brylski is working as a student assistant in the field of IT security at Wincor Nixdorf since 2012. She is not only responsible for the vulnerability scanning of server and client environment but also for the risk assessment as well as for providing solutions for the removal of those vulnerabilities.

As part of OWASP AppSec Europe 2014 Conference, being hosted at Anglia Ruskin University, East Road, Cambridge, we are arranging a special community based lecture by Dr Richard Stallman , President of the Free Software Foundation, who will be talking about

Freedom Issues for Web Sites

Web sites continually raise several issues of concern that affect individual users’ freedom.  As part of their design, such web sites often make users run non free software (perhaps in JavaScript) whilst others collect data about people or help both commercial and clandestine entities to do so.  Some websites may help do the user’s own computing and thus deny users control over it.  Dr Richard Stallman will speak about these problems and how to avoid them.

Speaker and training schedules are now complete, and the conference schedule is now live on the Conference Schedule page, as well as on the AppSec Europe schedule page on sched.org.

Use the sched.org site, or one of their mobile applications to manage your schedule on the day, and don’t forget to register for your conference and training tickets today!

The University Challenge will be held also this year at the Appsec EU Conference. A Maximum of 8 teams consisting of 4 to 8 students will get the opportunity to compete and demonstrate their knowledge on software security.

So if you have a team in your Uni and want to show that you have what it takes to win, look at this document to see how you can sign up.

The OWASP AppSec EU 2014 planning team have decided to take the lead and run the Women in AppSec Program in the European region this summer. The objective of the Women in AppSec Program is to encourage women, from all levels in application/ information security to expand their skills in application security.

See here for more information.

See here to apply

The OWASP Project Summit aims to give our project leaders the opportunity to have attendees sit down and work on project related activities during AppSec EU. It is an excellent opportunity to engage with active OWASP Project Leaders if you are a conference attendee, and it gives project leaders the chance to move forward on their project milestones while meeting new potential volunteers that can assist with future milestones.

Click here for more information.

We like to announce our third keynote speaker: Dr. Steven J. Murdoch.

Dr. Steven J. Murdoch is a Royal Society University Research Fellow in the Security Group of the University of Cambridge Computer Laboratory, working on developing metrics for security and privacy. His research interests include covert channels, banking security, anonymous communications, and censorship resistance.

We like to announce our second keynote speaker: Jacob West.

Jacob West is chief technology officer for Enterprise Security Products (ESP) at HP. In his role, West influences the security roadmap for the ESP portfolio and leads HP Security Research (HPSR), which drives innovation with research publications, threat briefings, and actionable security intelligence delivered through HP security products.

Look at our keynote speaker page for more information.

UPDATE!!: The call for Papers / Call for Presentations / Call for Training has been extended. 

The deadline for the call for papers/presentations/training has been extended to 31st of March.

Important Dates:

CFP/CFT Open: Feb 1st
CFP/CFT Closes: March 21st March 31st
Acceptance Notification: April 25th
Conference Schedule Publication: May 16th

We invite all practitioners of application security and those who work or interact with all facets of application security to submit speaker and trainer proposals.

For more information, read the appropriate document:

• Call for Presentations
• Call for Training
• Call for Papers

All submissions should be sent via EasyChair. Please select the appropriate track once you have registered.