BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: Beyond Spidering: Behavior Driven DAST for Real Appl
 ication\n   Workflows\n   Tags: DEF CON Demo Labs | Intermediate | AppSec 
 | DevOps | Offense/Red\n   Team | SecOps | DEF CON Demo Labs\n   When: Fri
 day\, Aug 7\, 13:00 - 13:45 PDT\n   Where: LVCCW Level 1 Hall 3 901 (Demo 
 Labs Track 5) - [1]Map\n\n   Description:\n\n   Modern web apps do not giv
 e up their best attack surface to a spider.\n   The interesting routes\, s
 tate changes\, authenticated functions\, and\n   business logic usually si
 t behind real user behavior. This Demo Lab\n   shows how to stop treating 
 DAST like blind crawling and start driving\n   it with realistic browser f
 lows.\n\n   The project began as a software quality proof of concept and e
 volved\n   through collaboration between an engineering team and a red tea
 m into\n   a real operational workflow. By routing Selenium based test sce
 narios\n   through OWASP ZAP\, we turn existing web automation into Behavi
 our\n   Driven DAST: a practical way to capture richer traffic\, exercise\
 n   meaningful application actions\, and uncover security findings that\n 
   isolated scanning often misses.\n\n   Current research shows more than 3
 00% increase in observed attack\n   surface and around 25% improvement in 
 vulnerability detection compared\n   with spider-driven analysis alone. Th
 e session will walk through the\n   workflow live\, show the comparative r
 esults\, and introduce a new\n   Python library built from this research.\
 n\n   SpeakerBio:  Sara "testingSoul" Martinez\n\n   Hi\, I am Sara! I sta
 rted my career in 2014 as a Software Validation\n   Engineer for Communica
 tion products. During five years I improved my\n   testing skills by worki
 ng on projects in Telecommunication\,\n   Geolocation\, Big Data and Power
  Electronics. In 2019\, I started to\n   focus all this quality knowledge 
 on testing Cybersecurity Software\n   products\, and then magic just happe
 ned. I discovered a whole new world\n   that fascinated me. Since then\, I
  have been working to improve all my\n   Software and Quality skills inclu
 ding Cybersecurity at every step I\n   take.\n\n   Links:\n       GitHub -
  [2]https://github.com/testingsoul/behave-zap\n   '\n\n   1. #LVCCW_Level1
 _Hall3\n   2. https://github.com/testingsoul/behave-zap\n\n\n
DTEND:20260807T204500Z
DTSTART:20260807T200000Z
LOCATION:Demo Labs - LVCCW Level 1 Hall 3 901 (Demo Labs Track 5)
SUMMARY:Beyond Spidering: Behavior Driven DAST for Real Application Workflo
 ws
END:VEVENT
END:VCALENDAR