December Bay Area OWASP

Enjoy an evening of insightful security talks, lively community networking, and engaging conversations... all accompanied by delicious food and drinks courtesy of Intuit.

• 5:00 PM : Doors open, Networking, food and drinks
• 5.30 PM :- Chapter introductions
• 5.45-6.30 PM :- Redefining Data Security Architecture in the Age of AI
• 6.30-7.15 PM :- From input-handling flaws to crashables: Security lessons from LLM-based coding tools7
• .15-8.00 PM :- TBD

‍Talk#1: Redefining Data Security Architecture in the Age of AI‍Description: As artificial intelligence reshapes how organizations process and leverage data, the responsibility to secure that data grows exponentially. This session explores how Intuit is redefining data protection architecture in the age of AI through automation, advanced cryptography, and self-service developer experiences. Attendees will learn how Intuit’s Data Security Capability integrates Sensitive Data Management (SDM), Advanced Cryptography, and Non-Human Identity (NHI) Management to deliver a holistic, scalable, and intelligent approach to securing sensitive information across the enterprise.“Data security isn’t just about protection — it’s about enabling innovation securely in the AI era.”Speakers: Ashwin Venkatasubbaraya - Group Manager at Intuit, Data SecurityDmitry Izumskiy - Principal Software Engineer at Intuit, Platform and Development AccelerationPraveen Keshavamurthy - Principal Software Engineer at Intuit, Data Security

‍Talk #2 From input-handling flaws to crashables: Security lessons from LLM-based coding tools

‍ABSTRACT: Claude Code illustrates how LLM-based coding tools expand the attack surface. Design choices around approvals, parsing, and error handling can turn into security flaws. We present specific findings Kodem uncovered in Claude Code. Both issues highlight how LLM-based coding tools introduce new misconfiguration and input-handling risks. This talk dissects the issues, their broader implications for AI developer tools, and practical mitigations‍

Speaker #2 Roy Talyosef, Software engineer at KodemTalk #3: TBD