OWASP (Membership) and new OWASP Projects Sebastien Deleersnyder CISSP Feb, 2006 sdl@ascure. com OWASP Copyright © 2004 - The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License. The OWASP Foundation http: //www. owasp. org
Agenda <Introduction <OWASP <Belgium Chapter <New OWASP Projects OWASP 2
Agenda <Introduction <OWASP <Belgium Chapter <New OWASP Projects OWASP 3
Introduction < Sponsors this evening: 4 K. U. Leuven sponsors venue 4 Bee. Ware sponsors Pizza & Drinks < Call for additional sponsors 4 Chapter meeting places & catering 4 Support for local projects < OWASP cannot recommend the use of products, services, or recommend specific companies OWASP 4
Introduction Program for this evening: <18 h 20 - 18 h 40: Sebastien Deleersnyder OWASP (Membership) & new OWASP Projects <18 h 40 - 19 h 30: Philippe Bogaerts Web. Scarab demonstration <19 h 30 - 20 h 45: Web Application Firewalls: Panel Discussion OWASP 5
Agenda <Introduction <OWASP <Belgium Chapter <New OWASP Projects OWASP 6
OWASP <Open Web Application Security Project <OWASP is dedicated to finding and fighting the causes of insecure software <Non-profit, volunteer driven organization 4 All members are volunteers 4 All work is donated by sponsors OWASP 7
OWASP? < Provide free resources to the community 4 Publications, Articles, Standards, e. g. § OWASP Top 10 § OWASP Guide § Testing Guide 4 Testing and Training Software, e. g. § Web. Goat § Web. Scarab §. NET Projects 4 Local Chapters, Mailing Lists & Conferences < Dual license model: 4 Open Source Licenses 4 Commercial License for Members OWASP 8
OWASP Membership <Using OWASP material? <Join us and become member! <Enable OWASP to continue to provide unbiased: 4 Tools 4 Documentation 4 Conferences 4 Mailing Lists 4… www. owasp. org/about/membership. html OWASP 9
Agenda <Introduction <OWASP <Belgium Chapter <New OWASP Projects OWASP 10
Belgium Chapter - What do we have to offer? <Quarterly Meetings <Mailing List <Presentations & Groups <Open forum for discussion <Meet fellow Info. Sec professionals <Create (Web)App. Sec awareness in Belgium <Local projects? OWASP 11
Belgium Chapter – House Rules < Free & open to everyone < Language 4 English preferred 4 Native language: no problem! < No vendor pitches or $ales presentations < Respect for different opinions < No flaming (including M$ bashing) < 1 CISSP CPE for each hour of OWASP chapter meeting < Sign Sheet & I’ll e-mail scan: you claim CPE credits OWASP 12
OWASP Local Chapter Meetings 2006 < Next Meetings: 4 Monday May 8 th 2006 - Brussels 4 Thursday Sep 14 th 2006 - Antwerp 4 Tuesday Nov 21 2006 - Brussels < Program: 4 Short OWASP intro 4 Presentation on introduction topic 4 Panel, workshop, round-table, … on more advanced topic < Topics: 4 Call for input! OWASP 13
Agenda <Introduction <OWASP <Belgium Chapter <New OWASP Projects OWASP 14
New OWASP Projects < OWASP Site Generator 4 http: //owasp. net/forums/428/Show. Post. aspx 4 http: //owasp. net/blogs/dinis_cruz/archive/2006/01/25/431. aspx < WASS, or Web Application Security Standards project 4 http: //www. owasp. org/standards/wass. html < SEASA, Scoping and Evaluating Application Security Assessments 4 See Metrics Mailing List: http: //lists. sourceforge. net/lists/listinfo/owasp-metrics 4 Terminology input needed < Metrics Project Reactivation? < Top 10 2006? < Testing Project? OWASP 15
OWASP Conference <Europe OWASP conference in Belgium! 4 KUL 4 May 29: training course Web Application Security / Web Services Security 4 May 30 -31: Conference – 2 tracks 4 Speaker, paper & sponsoring input appreciated! OWASP 16
That’s it… <Any Questions? http: //www. owasp. org/local/belgium. html sdl@ascure. com Thank you! OWASP 17
Subscribe to BE Chapter mailing list <Keep up to date! <Post your (Web)App. Sec questions <Contribute to discussions! OWASP 18
Скачать презентацию OWASP Membership and new OWASP Projects Sebastien Deleersnyder
538a5cb5b19d9abdef4e6e0a5d2aed76.ppt