Einführung

by OWASP German Chapter

09:05 – 09:50  in  Saal Baden

Keynote

by Rob van der Veer

09:55 – 10:20  in  Saal Baden

Agentic AI Gateway Enforcement of the OWASP Top 10

by Davi Ottenheimer

10:20 – 10:45  in  Saal Baden

Hackbots under control: Methodology for Autonomous Pentesters

by Hussein Bahmad, Tanguy Snoeck

11:20 – 12:05  in  Saal Baden

Indirect Prompt Injection in the Wild: An Empirical Study of Prevalence, Techniques, and Objectives

by Soheil Khodayari, Giancarlo Pellegrino

12:05 – 12:55  in  Saal Baden

What LLMs Can Do in Pentesting and Code Security

by Julius Henke

14:40 – 15:10  in  Saal Baden

OWASP AISVS: Bringing Order to AI Security Chaos

by Rico Komenda

15:10 – 15:40  in  Saal Baden

How to Hack "Read-Only" SQL MCP Servers Online (Fast)

by Maximilian Hildebrand

16:10 – 16:55  in  Saal Baden

Public Money, Public Containers

by Sebastian Kawelke, Janou Feikens

16:55 – 17:20  in  Saal Baden

Sicher in einen neuen Hafen -- Die Geschichte einer Migration in eine europäische Cloud

by Adrian Metzner

17:25 – 17:45  in  Saal Baden

Celebrating the 25th Anniversary of OWASP and the 22nd of German Chapter

by Boris Hemkemeier, Dirk Wetter

Chapter Lead: Thanks & meet you next year

by OWASP German Chapter

09:55 – 10:20  in  Saal Fidelitas

Understanding the Map of Threat Modeling Through the Lens of the TM-BOM

by Vikramaditya Narayan

10:20 – 10:45  in  Saal Fidelitas

OWASP Cornucopia - Gamifying AI Threat Modeling and Security Requirement Analysis

by Johan Sydseter

11:20 – 12:05  in  Saal Fidelitas

Vier grüne Häkchen, trotzdem gehackt: Threat Modeling für KI-Agenten

by Christian Schneider

12:05 – 12:55  in  Saal Fidelitas

CRA effizient und nachhaltig umsetzen

by Dagmar Moser, Max Moser

13:55 – 14:40  in  Saal Fidelitas

Zeit für OAuth 2.1 - Security Best Practices als neuer Standard

by Martina Kraus

14:40 – 15:10  in  Saal Fidelitas

How To Fuzz for Logic Bugs? Building Effective Oracles - A Case Study on Site Isolation Bypass Bugs

by Jan Niklas Drescher, David Klein, Martin Johns

15:10 – 15:40  in  Saal Fidelitas

New OWASP Kubernetes Top 10 in Action and Explained

by Benjamin Koltermann

16:10 – 16:45  in  Saal Fidelitas

Race Against The Workflows: Stealing GitHub Tokens from Docker Images

by Gaetan Ferry, Guillaume Valadon

16:45 – 17:20  in  Saal Fidelitas

Silent but Deadly: Reconstructing Undisclosed Security Vulnerabilities in Public Package Registries

by Thomas Barber