
Adversarial Intelligence: Redefining AppSec through the eyes of an attacker
This presentation explores Adversarial Intelligence - an approach that views application security from an attacker’s perspective. Drawing from vulnerability research experience at the NSO Group and building Pegasus, the speaker will highlight how overlooked low and medium vulnerabilities can be combined to execute successful attacks. By examining attack chains and application runtime behavior, attendees will see how gaps often missed by traditional methods are exposed. Attendees will learn about effective tools and techniques for detecting and mitigating these threats, especially in cloud-native and distributed systems. Designed for security practitioners and academics, this session provides a deeper understanding of defending against sophisticated attackers by adopting their mindset.


Details
We have our normal room back! No more attendance cap, so RSVP and come.
NOTE: The following will be in effect and mandatory for this meeting venue.
- RSVPs will close at 11:59 PM PT on Monday, March 24th, so kindly submit your RSVP by then. Walk-ins will not be permitted.
- Google Security mandates that RSVPs include your full name (in Meetup settings) and that you bring your ID, which will be checked at the entrance to match your RSVP.
- If your first and last name do not appear in our admin view, we will contact you.
- Alternatively, feel free to reach out directly or email us at orange-county-leaders@owasp.org to provide that information or any questions you may have regarding the event.
Parking
Park in the public garage structure next to the building. We will be providing paid tickets for exiting the garage.
Live Stream
Stream us live on Twitch: http://twitch.tv/owaspoc
Please change your RSVP to "No" if you can't make it and/or will join via livestream instead.
Speaker
Roy Talyosef
Roy Talyosef is a founding engineer at Kodem, a company specializing in application security solutions. Prior to joining Kodem, he was part of the Vulnerability Research team at NSO Group, where he contributed to the development of the Pegasus spyware. With extensive experience in identifying and exploiting software vulnerabilities, Talyosef focuses on enhancing security measures in cloud-native and distributed systems.