---
---
What should we work on?
The OSS philosophy is one of participant-driven focus. So it is up to you to shape your conference to target your greatest needs. There is a whole world of ideas, let's start sharing them, prioritising them and turning them into working sessions with clear objectives.
Working Session ideas
Agile AppSec
Agile Practices for Security Teams
Define Agile Security Practices
Integrating Security into a Portfolio Kanban
Integrating Security into a Sales Channel
Integrating Security into an Spotify Model
Security Champions
Security Guild vs Security Champions
Using Security Risks to Measure Agile Practices
InfoSec Warranties and Guarantees
Mobilising Business Lines for Security
SAMM Metrics for Enterprise
The future of privacy
Women in Cyber
CISO
Application Security Guide for CISO
AppSec Article 5 Collective Defence Agreement
AppSec for CISOs
CISO Round Table
CISO Survey
Cyber Insurance
GDRP DPO and AppSec
Growing the AppSec Industry
DevSecOps
AppSec SoC Monitoring Visualisation
BDD for Cloud Security
Docker Security
ELK Security Dashboards
Integrating Security Tools in SDL
JIRA Risk Workflow
Netflix Security Automation
Node Security Round Table
Real Time SAST Engine Architecture
Review Docker Security Workshop
Securing GitHub Integrations
Securing Legacy Applications
Securing the CI Pipeline
Security Guidance and Feedback in IDE
SRE Security Activities
Threat Vulnerability Management
WAF best practices
Writing Security Tests
Education
AppSec BSc Masters Curriculum Design
Creating AppSec Talent
Creating AppSec Teams
CTFs
Cyber Security Economics
Hackathon Beyond OWASP Top Ten
Recruiting AppSec Talent
Security Book Club
Software Defined Everything (SDx)
Teaching Attacker Perspective to Developers
IOT
GSMA IoT Security Guidelines
Internet of Things Project
Security Architecture Recommendations for IoT
TLS for Local IoT
Juice Shop
Juice Shop Brainstorming
Juice Shop Coding Day
Juice Shop Coding Night
Juice Shop Release
Mobile Sec
MSTG
MSTG 01
MSTG 02
MSTG 03
MSTG 04
MSTG 05
Research
BeyondCorp for internal Web Applications
Future of .Net Containers
GraphQL Security Review
LANGSEC Language theoretic Security
Protobuf for Data Validation Between Services
Security Labels
Using ML and AI to detect attacks
Playbook Sec
AppSec Review and Pentest Playbook
Bug Bounty Playbook
Create Jira Workflows for Security Playbooks
DoS Playbook
Due Diligence Playbook
Incident Response Playbook
Media Handling Playbook
Playbooks Common Format
Playbooks vs Handbooks
Ransomware Playbook
Security Monitoring Playbooks
Security Playbooks Diagrams
Other Ideas
AppSec Job Fair
Cross Company Hackathons
Crowdsourcing Security Knowledge
Hackathon Daily Sessions
Internal Bug Bounties Programmes
Lessons learned from public bug bounties programmes
OWASP Bug Bounty
OWASP Top Ten
Responsible disclosure
GDPR
Java
Node
SAST
SOC
TLS