OWASP is an open community dedicated to enabling organizations to conceive, develop, acquire, operate, and maintain applications that can be trusted. All of the OWASP tools, documents, forums, and chapters are free and open to anyone interested in improving application security.

OWASP is completely vendor neutral and does not endorse or certify any company, service, or product. All presentations, training, and talks performed for OWASP are required to meet this standard.


INTRODUCTION

Application Security leaders, software engineers, and researchers from all over the world gather at Global AppSec conferences to drive visibility and evolution in the safety and security of the world’s software, as well as to network, collaborate, and share the newest innovations in the field. The training will take place on February 13-14, 2023, at the Convention Centre of Dublin.
Considering the ongoing international emergency regarding the COVID-19 Coronavirus, we are aware that an in-person conference may not be feasible. While we are moving forward with the planning of an in-person conference, there is a possibility we may need to make the conference virtual. We ask that you design content that could be effectively presented in either format. We will provide technical guidelines and assistance to speakers who may not be familiar with delivering virtual content should the decision be made to hold the conference virtually.

CALL FOR TRAINERS (CfT) & SUBMISSION  

The Program Team is formally issuing a call for Trainers, opening September 15, 2022.

As with previous Global AppSec events, we would like to run a number of different training courses of varying lengths over several days surrounding the conference.

Trainers can apply to give 1 or 2-day classes. Trainers are allowed to make multiple applications, one application per class. The training audience will include developers interested in security as well as security professionals.

We are looking for training courses at all levels, from someone new to the application security field to advanced topics for experienced professionals. However, all training submissions should focus on practical skills which are immediately applicable to an attendee’s job and have a significant hands-on element with tasks and exercises for attendees to attempt during the training. Our main priority for selecting trainings for this event is new content that has not been offered before at an OWASP training event.

REVIEW PROCESS

IMPORTANT DATES:

CfT Opens September 15, 2022

CfT Closes October 9, 2022

Notification of submitters Week of November 1, 2022

Program announced the week of Week of November 7, 2022

REVIEW CONSIDERATIONS

The Program Team will review your submission based on a descriptive abstract and detailed outline of your class.  Including additional classroom materials will be helpful in our evaluation.

Please review your proposal thoroughly, as all accepted abstracts and bios will be published on our site as submitted.

Examples of topics include, but are not limited to the following.  We encourage innovation!

  • Secure development: frameworks, best practices, secure coding, methods, processes, SDLC
  • Integrating Security into DevOps or SRE
  • Vulnerability analysis: code review, pentest, static analysis
  • Threat modeling
  • Mobile security
  • Cloud and serverless security
  • Kubernetes and Container security
  • OWASP tools or projects in practice
  • New technologies, paradigms, tools
  • Operations and software security
  • Other topics but with an emphasis on Application Security: Business Risks, Outsourcing/Offshoring, Awareness Programs, Project Management


Training should :

Be Aimed at a Specific Audience - OWASP has a diverse audience that consists of novice to advanced level practitioners in different fields. Your content should be developed to clearly connect with a specific audience.

Not be a Marketing Pitch - Submissions that double as marketing or include sales pitches within the training will not be accepted.

Have a Clearly Written Abstract - Your Abstract is the only long-form marketing for your specific talk to our audience. It should be written so attendees can clearly understand what you will be discussing and what they will get out of your class.

Have a Detailed Outline - Detailed description of how you are structuring the course. Walk the reviewer through the training.

Be Clearly Applicable - Classes that prioritize content that attendees will be able to immediately implement preferred.

Include Hands-on training - Hands-on labs which allow attendees to connect meaningfully with content are preferred.

Demonstrate the Expertise of Trainer(s) - The submission should highlight the experience of the trainer(s) in the subject of training and in delivering professional training.

Terms

All trainers will be required to submit a trainer agreement.

The following conditions apply to those who want to provide conference training.

Trainer provides:

  • Class syllabus/training materials.
  • Covers travel for the instructor(s) and all course materials for students.
  • Promotion of training on all available media eg. Twitter, Linkedin
  • The trainer may brand training materials to increase their exposure.


OWASP provides:

  •  Venue
  • Catering (with limitations based on COVID19 and reasonable alternative options for attendees)
  • Registration Logistics 
  • Basic wireless internet access (if you need additional technical arrangements, it is important to let us know)
  • One night hotel per day of training

Trainer profit-share:

  1. Virtual Trainers As a trainer of a Virtual AppSec Days event, I am eligible to share 40% of net revenue up to $7,500 USD and 50% of net revenues above $7,500 USD. I must provide appropriate taxing authority documentation as needed for final payment, such as a W-9 in the United States. I will be granted a complimentary pass to the Virtual AppSec Days event. I will not be reimbursed for any expenses incurred to deliver sessions for the Company’s Conference. For other virtual events, I am eligible according to the terms in the Call for Trainers.
  2. In-person Trainers For Global AppSec events, I am eligible to share 40% of net revenue up to $10,000 USD and 50% of net revenues above $10,000 USD. I may ask to be included in the OWASP Foundation’s discounted hotel block booking, subject to availability and at my own cost. I will be granted a complimentary pass to the Global AppSec. I must provide appropriate taxing authority documentation as needed for final payment, such as a W-9 in the United States. I understand that I will not be reimbursed for any travel expenses such as airfare, accommodation, any other daily expenses incurred while attending the Company’s Event for which I am a Presenter. For other events, I am eligible according to the terms in the Call for Trainers.
  3. Should in-person or hybrid training take place, OWASP will revise training agreements for selected trainers and address compensation based on the needs of the program.

    All personal data collected during the submission process will be only for contacting submitters regarding their submission and will not be used for marketing or commercial purposes. All data collected will be deleted once the selection process is complete.


INTRODUCTION
Application Security leaders, software engineers, and researchers from all over the world gather at Global AppSec conferences to drive visibility and evolution in the safety and security of the world’s software and network, collaborate, and share the newest innovations in the field. The conference will take place on February 15-16, 2023, at the Convention Centre Dublin. The event will also offer hands-on training with vetted and leading trainers from February 13-14, 2023.

Considering the ongoing international emergency regarding the COVID-19 Coronavirus, we are aware that an in-person conference may not be feasible. While we are moving forward with the planning of an in-person conference, there is a possibility we may need to make the conference virtual. We ask that you design content that could be effectively presented in either format. We will provide technical guidelines and assistance to speakers who may not be familiar with delivering virtual content should the decision be made to hold the conference virtually.

CALL FOR PRESENTATIONS (CFP) & SUBMISSION
The Global AppSec Program Team is formally issuing a call for presentations, opening September 15, 2022, and closing October 9, 2022, at 11:59 PDT


This year’s tracks follow the traditional OWASP Builder & Developer, Breaker, and Defender principles - with an additional track in  DevSecOps. Speakers should focus on the following guidelines for each of the tracks below. Sessions will be all virtual but presented live and 50 minutes, with a 10-minute Q&A session, immediately following.
BUILDER  - Show us how to build more secure apps and use those apps in our systems.
BREAKER - Show us how to break secure apps
DEFENDER - Show us world-class application defense, including the tools and techniques enabling detection and response to attacks
DevSecOps - Show us how to automate your CI/CD pipeline security.
We’ve provided a few suggested topics below, but feel free to innovate!

  • Web application security
  • Mobile, Cloud, and Serverless security
  • Blockchain & Internet of Things for security use
  • Penetration testing & Application-level attacks
  • Threat modeling, Application, and solution architecture
  • Security for DevOps engineers
  • Privacy controls
  • Planning and implementing an application security program
  • Creating an AppSec team & culture
  • Techniques to communicate risk and AppSec value to management - sharing what works and what doesn’t!

REVIEW PROCESS
CfP IMPORTANT DATES:
CfT Opens September 15, 2022 

CfT Closes October 9, 2022 

Notification of submitters Week of November 1, 2022 

Program announced the week of Week of November 7, 2022

Keep in mind: the better your description is, the better our review will be.  Please review your proposal thoroughly, as your accepted abstract and bio will be published publicly as submitted on our site.

REVIEW CONSIDERATIONS
The Program Team will review your submission based on a descriptive abstract of your intended presentation.

Your presentation should:
Be Aimed at a Specific Audience - OWASP has a diverse audience of novice to advanced level practitioners. Your content should be developed to connect with a specific audience clearly.
Have a Clearly Written Abstract - Your Abstract is the only long-form marketing for your specific talk to our audience. It should be written so attendees can clearly understand what you will be discussing and what they will get out of your talk.
Have a Detailed Outline - Your detailed outline is your chance to frame your talk. Write this as thoroughly as possible, so the committee understands what you bring to the table.
Be Applicable - Talks that prioritize content that attendees will be able to implement immediately are preferred.
Not be a Marketing Pitch - Submissions which double as marketing talks or include sales pitches within the training will not be successful or accepted.  All talks are vendor agnostic, we do not approve of product demos.

This is a blind submission.  It does not matter where you come from, what your gender is, or what formal education you have.  We care about bringing our audience the most professional, interesting, and innovative content.  The Review Committee is a diverse group.  We will review the submissions and choose the talks based on content only.

We are looking for new talks, not ones you’ve given in previous conferences.  If you wish to present a topic you’ve talked about in the past, please share with us what you have changed.

TRAVEL ASSISTANCE
Global AppSec is a community event designated to support the Foundation, we have a limited budget.  If travel costs are a challenge, we will try to help cover part of your travel and accommodation costs so that you do not incur large expenses to come speak at our conference. This will not affect your acceptance at all. We will not expect you to confirm attendance before we confirm how much assistance we can offer.

TERMS
Following acceptance, we’ll provide guidance on presentation templates.  All presentation slides will be published on the conference website after the conference.  OWASP values vendor neutrality.  Please make sure that any pictures and other materials in your slides do not violate any copyrights. You are solely liable for copyright violations. You may choose any CC license for your slides, including CC0. OWASP does suggest open licenses.

Additional  Notes:

  • OWASP is an inclusive organization for practitioners from all cultural, gender, language, educational, ability, religious, and career backgrounds. We actively encourage speakers of all genders, sexual orientations, ages, religions, and ethnicity.
  • Fields denoted by an asterisk are mandatory. Failure to complete your submission can result in your submission being excluded from the review process.
  • Multiple submissions will be reviewed.  However, one talk will be selected.  We’re looking to expand a speaking opportunity across our diverse community.
  • While we do not offer an honorarium, a free registration is included, and we hope to create an epic speaker experience this year!

All personal data collected during the submission process will be only for contacting submitters regarding their submission and will not be used for any marketing or commercials purposes. All data collected will be deleted once the selection process is complete.

OWASP Foundation