Houston, we have a problem: we need more application security people. There is a real lack of folks that can test a web or mobile application for security vulnerabilities, write about them well, and then teach the developers how to fix them. It's a problem we have to solve. Verizon says that 86% of the breaches in 2017 had an application security component. So what are we gonna do? Bill, along with a cast of several, has been working on just this problem. He's consulted some of the experts on the topic in the community, and taken on some students of all experience levels, just to mess with their minds and see what works. And what's more - he'll tell you all about it. Spoiler: it worked out OK.

Bill Sempf is a software security architect. His breadth of experience includes business and technical analysis, software design, development, testing, server management and maintenance, and security. In his 20 years of professional experience he has participated in the creation of well over 200 applications for large and small companies, tested the security of all natures of applications and APIs, and made mainframes talk to cell phones. He is the author of C# 5 All in One for Dummies and Windows 8 Programming with HTML5 For Dummies; a coauthor of Effective Visual Studio.NET and many other books, a frequent contributor to industry magazines; and has recently been an invited speaker for the ACM and IEEE, BlackHat, CodeMash, DerbyCon, and BSides. Bill also serves on the board of the Columbus branch of the Open Web Application Security Project, is a Microsoft MVP, and is the Administrative Director of Locksport International.

Back to BSides Columbus Ohio 2019 video list