OWASP Ottawa Application Security Conference

Speaker schedule

8:45 a.m.
Garth Boyd: Welcome

9:00 a.m. - 9:55 a.m.
Farshad Abasi: Your Threat Model Is Lying to You: Why Modeling the Design Isn’t Enough in 2026

10:00 a.m. - 10:25 a.m.
Sabrina Lavi: People-Powered Security: Scaling AppSec Through Champions, Community, and Culture

10:30 a.m. - 11:25 a.m.
Alexander Rudolph: Canadian Digital Sovereignty in a Zero-Trust World: Unpacking Socio-Economic Dimensions of Digital Sovereignty

11:30 a.m. - 11:55 a.m.
Kayode Olabisi: Your LLM App Passed the Checklist. Now What?

12:00 p.m. - 1:00 p.m.
Lunch

1:00 p.m. - 1:55 p.m.
Ben Gardiner: Tractor ECU RE: When a "Noise Triggered" Recall is also a Security Patch

2:00 p.m. - 2:25 p.m.
Magno Logan: Nobody's Mining Crypto Anymore: What Attackers Actually Want From Your CI

2:30 p.m. - 2:55 p.m.
Kishan Nagendra: Agentic AI Design Patterns and Their Security Implications

3:00 p.m. - 3:55 p.m.
Faustin Bouchard: Stop Policing Words. Govern Authorization.

4:00 p.m. - 4:25 p.m.
Pavel Shukhman: Who Wrote This Code? A Forensic Whodunit in the Agentic Era

4:30 p.m. - 4:55 p.m.
Logan MacLaren/Fennix: 50 Shades of Red - Red Teaming & Pentesting in Practice

5:00 p.m. - 5:10 p.m.
Garth Boyd: Closing

About OWASP

The world's largest nonprofit foundation dedicated to improving software security through open-source collaboration, education, and innovation.

The Ottawa chapter offers a place to meet local developers and information security professionals, share ideas, and learn. OWASP Ottawa events are completely free.