October 28, 2015 || www.owasp.org | Contact Us | Brought to you by the OWASP Foundation
|
|
|||||||||||||||||||||||||||||||||||||||||||
2015 Global Board Election Results
|
|||||||||||||||||||||||||||||||||||||||||||
OWASP in the NEWS!OWASP Projects and activities are often the subject of webcasts and podcasts. Sit back and relax as you watch and listen to these recent episodes. Simon Bennetts - OWASP ZAP Q&A session ZAP, Xenotix XSS Exploit Framework, O-Saft and OWTF - 2015 BOSSIE Awards OWASP Top 10 - "Don't Let Your SMB Get Caught With Its Pants Down," Huffington Post Mark Miller - OWASP 24/7 Podcast Series |
|||||||||||||||||||||||||||||||||||||||||||
WASPY Award WinnersThe results of the OWASP WASPY Awards have been announced and posted to our website. Thanks to all who made a nomination and congratulations to the winners. |
|||||||||||||||||||||||||||||||||||||||||||
OWASP Translations: ASVSOWASP ASVS — Translation Project has been added to Crowdin. Crowd In is a community translation platform. If you speak another language other than English, we would really appreciate it if you could join Crowd In, and become a member of the ASVS project page and commit some time to developing a translation into your local language.Help us translate OWASP ASVS and bring it to the world! https://crowdin.com/project/owasp-asvs. |
|||||||||||||||||||||||||||||||||||||||||||
Women in AppSec: Diversity Leads to SuccessStudy after study has shown that diverse teams are more successful. Forbes reports that diversity is key driver of internal innovation and business growth. McKinsey & Company study showed that diverse organizations are more likely to have financial returns above their respective national industry medians. The OWASP Women in AppSec (WIA) diversity initiative aims to increase the participation and visibility of women in the applications security field. WIA is seeking volunteers to help with projects in 2016 now! Fill out the WIA planning survey at https://www.surveymonkey.com/r/SRNLD7H and get involved today. Increasing diversity is an effort that relies on all of us to be successful, so all genders are welcome and encouraged to participate. |
|||||||||||||||||||||||||||||||||||||||||||
NEW Tool: TrelloTrello is a collaboration tool that organizes your projects into boards. In one glance, Trello tells you what's being worked on, who's working on what, and where something is in a process. The OWASP Foundation has obtained a free premium Trello account for our community. If you are interested in having your own board for your project or chapter, please ping Fabio Cerullo at fcerullo@owasp.org. Some of the projects and chapters using the Trello board are Campinas/Sao Paulo, Delhi, CSRFGuard, ZAP as well as the global Board and the AppSecUSA Chapter Leader Workshop. Visit these boards for ideas on how to use them for collaboration in your group: |
|||||||||||||||||||||||||||||||||||||||||||
|
|
|
Project Summit at AppSecUSASeveral OWASP Projects participated in the AppSecUSA Project Summit. A lot of good feedback, Github updates and new documentation served to level up all participating projects. Visit the project pages for updates or contact the leaders to find out how you can get involved: OWASP Security Shepherd Project OWASP Code Review OWASP Cheatsheet Series & Proactive Controls OWASP Python Security OWASP Security Knowledge Framework OWASP WAFEC OWASP O2 Platform OWASP PodCasts created by Mark Miller offer a great forum for getting an update on projects. Listen to interviews with project leaders at https://soundcloud.com/owasp-podcast. Latest ReleasesOWASP Security Shepherd Project OWASP Application Security Verification Standard OWASP Mobile Security Project OWASP Seraphimdroid v.2
Nikola Milosevec ZAP Scripting Competition ResultsZAP Scripting Competition results are now available at https://www.owasp.org/index.php/2015-08-ZAP-ScriptingCompetition. For more information about OWASP Projects, please visit the Project Wiki Page OWASP Code Review Guide SurveyThe OWASP Code Review Guide team surveyed attendees at AppSec USA to find out how attendees rated the effectiveness of various security tools/reviews at finding issues, such as business logic problems, or each of the OWASP Top 10. Our intention was to evaluate if Secure Code Review (the topic of our guide) is seen as an effective security process in an organizations SDLC. The Survey results will be included in the next version of the guide. New Initiative: OWASP ResearchOWASP Research is an initiative to start developing OWASP projects in the field of innovative research,specifically new ways to protect web applications by applying out of the box concepts and technological developments. Contact Johanna Curiel for details or visit http://www.owasp.org/index.php/Global Initiatives#Research. | |
|
|
||
Global AppSec Events |
||
|
Mark your Calendar! AppSECEU 2016 is coming to Rome, Italy on 27 June to 1 July 2016! The Call for Trainings is Now Available! Deadline for proposals: 31 December, 2015. |
||
Regional and Local EventsAppSec Rio de la Plata 2015, December 1, 2015 - December 3, 2015, Montevideo, Uruguay Conference Videos AppSecUSA Videos from 21 of our sessions and keynotes are now available on YouTube. Look for more uploads to come featuring keynotes, special panels and talks. Stay tuned for videos from last week's LASCON (Lonestar Application Security Conference) event in Austin, TX, USA. Partner and Promotional EventsOSCON Amsterdam, October 26 - October 28, 2015 Amsterdam, The Netherlands |
||
Ads are not endorsements and reflect the messages of the advertiser only. They represent co-marketing arrangements |
|
|
|
|
We had a lot of activity in our chapters since our April 21 Connector: 18 New Chapters (red), 13 Leadership Transitions (pink), two New Student Chapters (blue) and six new Academic Supporters (light blue). Click on the map to see our newest chapters. New ChaptersAtlantic Canada Chapter TransitionsThe following chapters have indicated leadership changes, including restarts, added leaders and resignations. See the map for full detail. New Student ChaptersIIT Kanpur Student Chapter, Kanpur, India New Academic SupportersAnglia Ruskin University, Cambridge, UK Chapter ActivitiesOn October 12 2015, OWASP Panay chapter leader Francis Victoriano presented OWASP Top 10 at Aklan State University and at Filamer Christian University, a future academic supporter, on October 21. Almost 300 students attended the latter event, and they are planning to invite OWASP Panay next year. On October 7, OWASP Kerala hosted sessions at PRS College with an amazing turn out of more than 150 students from various semesters of Computer Science and Electronics Department - organized in multiple sessions throughout the day with back to back non stop sessions. It was a great event and was so exciting to interact with the students. The engineering schools in Kerala, India under the Kerala State University system have signed on as OWASP Academic Supporters. We at the OWASP Global Foundation are looking forward to hearing about more such events in future. Share your chapter's successes! Submit your stories here |
|
|
|
|
OWASP Social Media Site |
|
|
|