BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: Finding Crypto: Inventorying Cryptographic Operation
 s\n   When: Sunday\, Aug 14\, 11:30 - 11:59 PDT\n   Where: Flamingo - Suns
 et-Vista Ballroom (Crypto Privacy Village) - [1]Map\n\n   SpeakerBio:Kevin
  Lai\n   Kevin is a Security Engineer at Datadog in the cozy San Francisco
 \n   office. After spending a decade doing full stack web development\, he
 's\n   moved into security for a different set of fun challenges. Out of t
 he\n   office you'll find him making digital art\, designing games\, criti
 quing\n   food\, and writing oddball articles.\n\n   Description:\n   Desp
 ite the importance\, most organizations don't have a good\n   understandin
 g of cryptographic operations in use across their various\n   code bases. 
 IBM's Cost of a Data Breach Report 2021 notes that\n   organizations that 
 use strong encryption had a $1.25 million average\n   lower cost of a brea
 ch than those with weak or no encryption.\n\n   Due to aging ciphers and i
 ncreasing computational power\, dated cipher\n   suites are the future of 
 insecure cryptographic practices. In order to\n   effectively counter this
  threat\, every organization needs to be aware\n   of what ciphers are use
 d\, where\, and how.\n\n   One solution to this problem is adding static a
 nalysis checks as part\n   of your core continuous integration (CI) testin
 g. In this talk\, we'll\n   see two open source static analysis solutions 
 with default rules\n   around detection of cryptographic weakness: Semgrep
  and CodeQL.\n\n   In this talk\, I’ll demonstrate how to implement rule
 s with Semgrep\n   and CodeQL\, then modify cryptographic rules to suit yo
 ur needs. As a\n   demonstration\, we’ll look at this through the lens o
 f achieving US\n   Federal Information Processing Standard (FIPS) 140-2 co
 mpliance which\n   is mandated by federal customers.\n\n   If you're looki
 ng for ways to audit\, create controls\, or validate\n   tooling around de
 termining cryptographic usage\, this talk will give\n   you solid practice
 s to get started.\n\n   '\n\n   1. https://defcon.outel.org/consolidated_p
 age.html#FlamingoThirdFloor\n\n\n
DTEND:20220814T185900Z
DTSTART:20220814T183000Z
LOCATION:CPV - Flamingo - Sunset-Vista Ballroom  (Crypto Privacy Village)
SUMMARY:Finding Crypto: Inventorying Cryptographic Operations
END:VEVENT
END:VCALENDAR