December 30, 2015 | www.owasp.org | Contact Us | Brought to you by the OWASP Foundation
|
|
|
OWASP 2015 - A Year of Milestone AchievementsSometimes an open source, community driven, volunteer resourced group like OWASP feels like a bunch of individuals, all working separately without a great deal of coordination. BUT, then the magic of the OWASP curiosity, innovation and 'team-work' kick in, and great things happen. Did you know that OWASP Achieved the following milestones in 2015?
There are so many more achievements in 2015 and all can be found in back issues of our OWASP NewsFlash & Connector newsletters. On behalf of the entire Operations team, we look forward to making 2016 an exciting and productive year for OWASP. Best Regards, Paul Ritchie OWASP in the NEWS!Hacker Earns 50k Miles by Exposing Vulnerability in United Airlines Website - HackRead.com OWASP Proactive Tips for Coding Securely - DZone.com. Toolswatch '2015 Best Security Tool' survey: Please vote for your favorite OWASP security tools! - Toolswatch.com OWASP PodcastsOWASP Projects and activities are often the subject of webcasts and podcasts. Sit back and relax as you watch and listen to these recent episodes. Mark Miller - OWASP 24/7 Podcast Series |
|
|
|
|
Project UpdatesClaudia Aviles-Casanovas, our Projects Coordinator, has shared her latest Project Task Force Update. The task force is still seeking volunteers to review the OWASP SeraphimDroid Project: https://docs.google.com/a/owasp.org/presentation/d/10zCyCtcJbU9Gf4TdQ4GKJG7vvfbhb_Lhk1rt6PW7S3M/edit?usp=sharing Maura Van Der Linden has been contracted by Simon Bennetts to help with the new intro document to get users who are new to pen testing started in ZAP. Thank you to Gabriel Gumbs for the donation: https://www.owasp.org/index.php/OWASP_Application_Security_Program_Quick_Start_Guide_Project For anyone who wants to help with our Free Training initiative, Gabriel personally welcomes more contributions. Visit: https://www.owasp.org/index.php/Education/Free_Training Call for TranslatorsAndrew van der Stock has issued a call for translations for the ASVS project! https://github.com/OWASP/ASVS As such, we've committed v3.0.1 into GitHub and uploaded it to Crowd In: https://crowdin.com/project/owasp-asvs/ You don't HAVE to use Crowd In, but it would be nice to indicate to other native speakers of your language that you are willing to work together. This is a 70 page document, and in all honesty, will take a dedicated person a week or more to translate, so please please please work together rather than apart. You have full access to the original document and the original images. In the next month or so, Andrew would like to close out all the issues logged in GitHub, so he will give active translators a heads up of any changes to the master document, so again, a good reason to use Crowd In so we know who you are. If there are any incomprehensible English idiom or phrases in there, please don't hesitate to ask for clarification, because if it's hard to translate, it's almost certainly wrong in English as well. You can reach Andrew at vanderaj@owasp.org | |
|
|
|
Global AppSec Events |
|
OWASP AppSecEU - CALL for PAPERS Don't miss the opportunity to present your Paper! The next OWASP AppSecEU (http://2016.appsec.eu/) will take place at the Marriott Park Hotel in Rome, Italy. The Open Web Application Security Project is an open-source project for application security. Don't miss the opportunity to share and discuss your ideas and knowledge with other experts and practitioners. Present your paper now!! Spread the knowledge of this big opportunity within your chapter and push towards Universities, Research Centers, Industries, asking to present papers in order to make this conference a unique one!! Topics of interest include, but are not limited to:
To submit a proposal use EasyChair. The program committee will review your submission based on a descriptive abstract of your intended presentation. Feel free to attach a preliminary version of your presentation if available, or any other supporting materials. Keep in mind: the better your description is, the better our review will be. Please review your proposal thoroughly as accepted abstract and bio submitted will be published 1:1 on our site. If your presentation is accepted for inclusion in the conference program, you are free to submit a white paper describing your work, which will be added to the website. Important dates:
Call for Training: Call for Presentation: Sponsorship Document: Regarding sponsorship, please let us know if you are interested in one of the options because we have already received several requests and we would like to sign all the contracts as soon as possible (within 31 Dec. 2015). Other Global AppSec Events We are still accepting sponsorships for AppSec Cali 2016 to be held in Santa Monica, California on January 25-27, 2016. Visit the website for details. AppSecUSA 2016 will be held on 11-14 October 2016 in Washington DC. Mark your calendars! | |
Regional and Local Events
AppSec Cali 2016, Jan. 25, 2016 - Jan. 27, 2016, Santa Monica, CA Partner and Promotional Events
CodeMash January 5 - 8, 2016 Sandusky, Ohio, USA |
|
Ads are not endorsements and reflect the messages of the advertiser only. They represent co-marketing arrangements |
|
|
|
New Chapters
Chapters Restarts
Transitions
New Student Chapter
New Academic Supporters
Notable Chapter ActivityHere is a summary of chapter activity in 2015. Thanks to all our new and veteran leaders for making this an outstanding year:
2015 AppSec Summer School in Croatia Vlatko Kosturjak sent us photos from OWASP Croatia's OWASP Application Security Summer School held in September at Fakultet Organiazacije Informatike (FOI). The program included speakers from industry and academia, who are experts in the field of web application security. The program presented students with practical, industrial problems focusing on attacks against web applications and protect against those attacks. The Summer School is an intensive program that includes 8h lectures and training sessions over 4 days, plus an additional, independent student project. The event was free for all students of FOI, and provided a certificate of completion.
We at the OWASP Global Foundation are looking forward to hearing about more such events in future. Share your chapter's successes! Submit your stories here |
|
|
|
|
New Contributing Corporate Members
Thanks to all of our Premier and Contributing Corporate Members for your support in 2015! |
|
|
|
|
OWASP Social Media Site |
|
|
|
