Handouts - SecAppDev 2016

Georges Ataya and Alain Cieslik

• Certification of Application Security

Maarten Decat

• Access Control
• Authorization middleware for Software as a Service (PhD Text)
• NIST on ABAC

Jim DelGrosso

• Architectural Analysis
• Threat Modeling

Lieven Desmet

• Client-side web security technology
• Real-Time communications with WebRTC

Philippe De Ryck

• The Web's Security Model
• Securing Single Page Applications

Bart De Win

• Secure Development LifeCycles (SDLC)
• SDLC workshop

Danny Hughes

• IoT Security in the Real World

Marc Juarez

• Privacy Enhancing Techniques

Eric Lafortune

• Code obfuscation techniques

Frank Piessens

• Low level exploits and countermeasures
• Recent advances in System Software Security

Bart Preneel

• Cryptographic algorithms
• Entity authentication
• Network security protocols
• Public Key Infrastructures fundamentals
• Cryptography best practices
• Cryptography in a post-Snowden era

Arne Swinnen

• The Tales of a Bug Bounty Hunter

Tom Van Cutsem

• Writing robust client-side code using Modern JavaScript

Ken van Wyk

• Security testing fundamentals
• Break 'em and build 'em web apps
• Hardening mobile apps
• Break 'em and build 'em iOS apps

Dan Wallach

• Android Security
• Authenticated data structures: building blocks for secure loggers and cryptocurrencies
• Engineering a secure system by example