https://wiki.owasp.org/api.php?action=feedcontributions&feedformat=atom&user=Bbertacini 2026-05-27T09:21:15Z User contributions MediaWiki 1.27.2 https://wiki.owasp.org/index.php?title=San_Jose&diff=21397 2007-09-03T06:49:23Z

<p>Bbertacini: /* Next Meeting - Thursday, September 6, 2007 */</p> <hr /> <div>{{Chapter Template|chaptername=San Jose|extra=The chapter leader is [mailto:brian.bertacini@owasp.org Brian Bertacini]|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-sanjose|emailarchives=http://lists.owasp.org/pipermail/owasp-sanjose}}<br /> <br /> == Next Meeting - Thursday, September 6, 2007 ==<br /> Open to the public, attendance is free&lt;br/&gt;<br /> <br /> '''Agenda and Presentations:'''&lt;br/&gt;<br /> 5:00pm – 5:30pm Check-in and Reception (food and beverages)&lt;br/&gt;<br /> 5:30pm – 6:45pm Malicious Code Injection Workshop&lt;br/&gt;<br /> 6:45pm – 6:55pm Break&lt;br/&gt;<br /> 6:55pm – 8:10pm Panel Discussion – Privacy, Security and Breaches, Oh My!&lt;br/&gt;<br /> 8:10pm – 8:30pm Networking Session&lt;br/&gt;<br /> <br /> <br /> '''Venue:'''&lt;br/&gt;<br /> eBay - Town Square B&lt;br/&gt;<br /> 2161 North First Street&lt;br/&gt;<br /> San Jose, CA 95131&lt;br/&gt;<br /> <br /> ''Map and Directions:''&lt;br/&gt;<br /> [http://maps.yahoo.com/broadband#mvt=m&amp;q1=2211+N+1st+Street%2C+San+Jose%2C+CA&amp;trf=0&amp;lon=-121.921484&amp;lat=37.377166&amp;mag=3 Map]&lt;br/&gt;<br /> <br /> <br /> '''Malicious Code Injection Workshop'''&lt;br/&gt;<br /> <br /> SQL Injection, Cross-site Scripting (XSS) and other injection attacks techniques have become pervasive on the web. This hands-on workshop takes an in-depth look at common methods used to exploit web applications. Attendees will learn step-by-step techniques used by attackers allowing them to better understand how web applications are exploited. Each attack method is followed up with a discussion about effective countermeasures to defend against such attacks. &lt;br/&gt;<br /> <br /> This interactive workshop includes a victim web application that contains built-in vulnerabilities. Attendees can bring their own laptop computers and participate in hands-on lab sessions. The objective of this workshop is to learn secure development practices used to harden the security of applications. Attendee participation is encouraged and door prizes will be awarded at random. &lt;br/&gt;<br /> <br /> ''Note:'' To participate in the exercise bring an 802.11b/g equipped laptop with IE or Firefox installed. No hostile code will be put on your laptop by the instructors, but do have a firewall running to protect yourself. No wired connection to the class network will be provided.&lt;br/&gt;<br /> <br /> '''Workshop Instructors:'''&lt;br/&gt;<br /> Siva Ram, CISA - Senior Consultant, AppSec Consulting&lt;br/&gt;<br /> Tom Stracener - Cenzic&lt;br/&gt;<br /> Arian Evans - WhiteHat Security&lt;br/&gt;<br /> <br /> <br /> '''Panel Discussion: “Privacy, Security and Breaches, Oh My!” '''&lt;br/&gt;<br /> <br /> This panel discussion will review the current state of information privacy and the security of web applications. Security breaches are occurring at an alarming rate and consumers are loosing faith. What, if anything can be done to restore confidence in e-commerce?&lt;br/&gt;<br /> <br /> What can we learn from events at Card Systems are more recently Monster.com? What can be done to ensure your company is not the next victim of a class action and/or hackers and data thieves? Join an all-star panel of Information Privacy and Data Security professionals to better understand what’s at stake and how to stay out of the headlines. &lt;br/&gt;<br /> <br /> <br /> '''Moderator:''' Alex Stamos, iSEC Partners&lt;br/&gt;<br /> <br /> <br /> '''Panelists:'''&lt;br/&gt;<br /> <br /> Doran Rotman, KPMG (co-author, Generally Accepted Privacy Principles&lt;br/&gt;<br /> David Pollino, Washington Mutual Bank&lt;br/&gt;<br /> Robert Fly, Salesforce.com&lt;br/&gt;<br /> Larry Pingree, Safeway (co-founder, Digital Forensics Association)&lt;br/&gt;<br /> Kurt Opsahl, EFF &lt;br/&gt;<br /> <br /> <br /> Please RSVP at http://owaspday.eventbrite.com or send an email to brian.bertacini at owasp.org. Feel free to invite like minded IT Security Professionals and help grow OWASP.&lt;br/&gt;</div>

Bbertacini https://wiki.owasp.org/index.php?title=San_Jose&diff=19861 2007-07-13T19:42:09Z

<p>Bbertacini: /* Next Meeting - Wednesday, July 25, 2007 */</p> <hr /> <div>{{Chapter Template|chaptername=San Jose|extra=The chapter leader is [mailto:brian.bertacini@owasp.org Brian Bertacini]|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-sanjose|emailarchives=http://lists.owasp.org/pipermail/owasp-sanjose}}<br /> <br /> == Next Meeting - Wednesday, July 25, 2007 ==<br /> Open to the public, attendance is free<br /> <br /> '''Agenda and Presentations:'''&lt;br/&gt;<br /> 6:00pm - 6:30pm ... Check-in and reception (food &amp; bev)&lt;br/&gt;<br /> 6:30pm - 7:15pm ... Attacking XML Security - Brad Hill&lt;br/&gt;<br /> 7:15pm - 8:00pm ... Development of a Security Metric System to Rate Enterprise Software - Fredrick Lee&lt;br/&gt;<br /> 8:00pm - 8:30pm ... Networking Session&lt;br/&gt;<br /> <br /> '''Venue:'''&lt;br/&gt;<br /> Ariba&lt;br/&gt;<br /> 807 11th Avenue&lt;br/&gt;<br /> Sunnyvale, Ca 94089&lt;br/&gt;<br /> [http://www.ariba.com/company/hq_map.cfm Map and Directions]&lt;br/&gt;<br /> <br /> <br /> '''Attacking XML Security'''&lt;br/&gt;<br /> '''''Presented by: Brad Hill, iSEC Partners'''''&lt;br/&gt;<br /> <br /> '''Abstract:''' <br /> Brad will present his ongoing research into attacking the XML Digital Signature and Encryption standards that underpin the security of Web Services, mobile code, SAML, federated identity systems and more. The talk will begin with a high-level, critical take on the emerging conventional wisdom about message-oriented security and continue with a detailed discussion of design and implementation weaknesses in the standards. Technical material will include a root cause analysis of the recent iSEC advisory on cross-platform, remote code execution vulnerabilities discovered in multiple XML Digital Signature products. &lt;br/&gt;<br /> <br /> '''Bio:''' Based out of Seattle, Brad Hill is a Senior Security Consultant at iSEC Partners, a full-service security consulting firm that provides penetration testing, secure systems development, security education and software design verification. Brad brings a ten year background as a software developer and architect in the technology and financial services sectors to his work at iSEC, where he does design review, application assessment and development lifecycle improvement for some of the world’s leading software companies. <br /> &lt;br/&gt;<br /> &lt;br/&gt;<br /> &lt;br/&gt;<br /> '''Development of a Security Metric System to Rate Enterprise Software'''&lt;br/&gt;<br /> '''''Presented by: Fredrick Lee, Fortify Software'''''&lt;br/&gt;<br /> <br /> '''Abstract:''' <br /> As part of Fortify Software’s Java Open Review (JOR) project, both security defects and quality issues discovered in open source software are collected. The projects being analyzed are diverse in their development methodologies, development stages, and application styles. The projects range from small utility packages (e.g. Apache Commons), to mid-size intranet applications (e.g. JSPWiki), to large-scale, commercial grade enterprise projects (e.g. JBoss). In essence, participants in the Java Open Review project reflect the typical enterprise organization’s code base: a large collection of several small utility/internal applications and a handful of enterprise “flagship” products.<br /> <br /> As part of the project, we have been challenged to answer the question: Which<br /> application is more “secure.” To answer this question, Fortify has sought to develop a set of metrics that combine lessons learned from our experience working on various enterprise code bases and our work on the JOR project. The metrics are designed to incorporate diverse criteria, including the size of the application, the types of vulnerabilities identified, and time required to fix the vulnerabilities. The metrics provide a mechanism to rate software components for security concerns and enable enterprises to:<br /> <br /> - Evaluate which open source projects offer an acceptable level of security &lt;br/&gt;<br /> - Compare competing open source software solutions based on their security &lt;br/&gt;<br /> - Measure internal development efforts against open source open source counterparts<br /> <br /> Ultimately, with sufficient industry adoption, the metrics can also enable enterprises to compare their internal efforts against other enterprises within the same vertical. As part of the talk we will present our experience to date working with companies to develop an effective mechanism for evaluating the security of enterprise software.<br /> <br /> '''Bio:''' Fredrick Lee is a member of Fortify Software’s Security Research Group, where he manages the Java Open Review Project. Scanning the code of over 100 applications so far, Fredrick is helping assess and improve the security of open source software. Fredrick also helps the Security Research Group develop the secure coding rules that are use to run Fortify’s suite of products. <br /> <br /> Prior to joining Fortify Software, Fredrick was a Senior Information Security Engineer at Bank of America, where he helped roll out a secure development framework, performed security assessments, and developed enterprise security solutions. <br /> <br /> Fredrick graduated from the University of Oklahoma, with a BS in Computer Engineering. <br /> <br /> &lt;br/&gt;<br /> <br /> '''Upcoming Security Workshops'''&lt;br/&gt;<br /> '''''Presented by: Brian Bertacini, Volunteer Chapter Organizer'''''&lt;br/&gt;<br /> <br /> '''Abstract:''' Introduce local volunteer expert trainers that are planning web application and infrastructure security workshops.<br /> <br /> Please RSVP to via email [mailto:brian.bertacini@owasp.org Brian Bertacini], call 408-979-0571 or visit [http://owasp.mollyguard.com OWASP.Mollyguard.com]<br /> <br /> Special thanks to [http://www.ariba.com Ariba] for hosting this event and to [http://www.appsecconsulting.com AppSec Consulting] and [http://www.isecpartners.com iSEC Partners] for sponsoring.</div>

Bbertacini https://wiki.owasp.org/index.php?title=OWASP_Community&diff=19860 2007-07-13T19:07:11Z

<p>Bbertacini: /* Events */</p> <hr /> <div>This page is for people to post OWASP related events, such as chapter meetings, OWASP conferences, get-togethers, and OWASP sponsored events.<br /> <br /> Events from previous years are archived here:<br /> * '''[[OWASP Community 2006]]'''<br /> <br /> This page is monitored, and items posted here will be copied to the OWASP [[Main Page]]. Please post new items in chronological order using the following format:<br /> <br /> '''Mon ## (##:00h) - [[Article]]'''<br /> <br /> &lt;!--<br /> <br /> CHAPTER LEADS -- please put your schedule here and we'll post a month in advance<br /> <br /> *** Belgium ***<br /> <br /> *** OTTAWA: Rough dates ***<br /> '''Sept 12 (18:00h) - [[Ottawa|Ottawa Chapter Meeting]] '''<br /> '''Nov 14 (18:00h) - [[Ottawa|Ottawa Chapter Meeting]] '''<br /> <br /> *** BOSTON: Every first Wednesday of the month ***<br /> <br /> *** MELBOURNE: First Tuesday of the month ***<br /> '''Jul 3 (18:00h) - [[Melbourne|Melbourne chapter meeting]]'''<br /> <br /> *** NETHERLANDS: Second Thursday of the month sometimes ***<br /> '''Sept 13 (18:00h) - [[Netherlands|Netherlands chapter meeting]]'''<br /> '''Dec 13 (18:00h) - [[Netherlands|Netherlands chapter meeting]]'''<br /> <br /> *** ROCHESTER: Every third Monday of the month ***<br /> <br /> *** TORONTO: Every second Wednesday of the month<br /> <br /> *** VIRGINIA: Every second thursday of the month ***<br /> <br /> --&gt;<br /> <br /> ==Events==<br /> '''July 25 (18:00h) - [[San Jose|San Jose Chapter Meeting]]'''<br /> <br /> '''July 24 (17:00h) - [[Switzerland|Switzerland chapter meeting]]'''<br /> <br /> '''July 14 (11:00h) - [[Turkey|Turkey chapter meeting - 1st Web Security Days]]'''<br /> <br /> '''July 6 (17:00h) - [[Spain|Spain chapter meeting]]'''<br /> <br /> '''June 26 (11:30hr) - [[Austin|Austin chapter meeting]]''' - Running Web Application Scans<br /> <br /> '''June 22 (18:00h) - [[Belgium|Belgium chapter meeting]]'''<br /> <br /> '''June 21 (19:00h) - [[Denver]]''' - Anti-DNS Pinning Attacks / Calculating Return on Security Investment (ROSI)<br /> <br /> '''June 19 (18:00h) - [[Minneapolis St Paul|Minneapolis St Paul chapter meeting]]'''<br /> <br /> '''June 15 (17:00hr) - [[Spain|Spain chapter meeting]]'''<br /> <br /> '''June 13 (18:30hr) - [[Kansas City|Kansas City chapter meeting]]'''<br /> <br /> '''June 12 (18:00hr) - [[New York|NY/NJ Metro chapter meeting]]'''<br /> <br /> '''Jun 5 (19:00h) - [[Helsinki|Helsinki chapter meeting]]'''<br /> <br /> '''Jun 5 (18:00h) - [[Melbourne|Melbourne chapter meeting]]'''<br /> <br /> '''Jun 5 (17:30h) - [[Houston | Houston Chapter Meeting]]'''<br /> <br /> '''May 29 (9:00h) - [[http://www.owasp.org/index.php/Italy#May_29th.2C_2007_-_Seminar:_.22Software_Security.22 Italy@Firenze Tecnologia]]'''<br /> <br /> '''May 29 (11:30h) - [[Austin | Austin Chapter Meeting]]''' - Bullet Proof UI - A programmer's guide to the complete idiot&quot;. <br /> <br /> '''May 29 (18:00h) - [[Ottawa | Ottawa Chapter Meeting]]'''<br /> <br /> '''May 22 (18:30h) - [[New Zealand|1st New Zealand chapter Meeting]]'''<br /> <br /> '''May 21 (14:00h) - [[Israel|2nd OWASP Israel mini conference]]'''<br /> <br /> '''May 15 (18:00h) - [[Rochester|Rochester chapter meeting]]'''<br /> <br /> '''May 10 (18:00h) - [[Belgium|Belgium chapter meeting]]'''<br /> <br /> '''May 9 (18:00h) - [[Toronto|Toronto chapter meeting]]'''<br /> <br /> '''May 8 (18:00h) - [[Virginia (Northern Virginia)|Washington DC (N. VA) chapter meeting]]'''<br /> <br /> '''May 6 (11:00h) - [[Turkey|Turkey chapter meeting]]'''<br /> <br /> '''May 2 (18:30h) - [[Boston|Boston chapter meeting]]'''<br /> <br /> '''May 1 (18:00h) - [[Melbourne|Melbourne chapter meeting]]'''<br /> <br /> '''Apr 26 (11:00h) - [[San Antonio|San Antonio chapter meeting]]'''<br /> <br /> '''Apr 26 (17:00h) - [[Switzerland|Switzerland chapter meeting and &quot;Swiss Security Dinner&quot;]]'''<br /> <br /> '''Apr 24 (18:00h) - [[Minneapolis St Paul|Minneapolis St Paul chapter meeting]]'''<br /> <br /> '''Apr 20 (19:00h) - [[Hong Kong|Hong Kong chapter meeting - Objectives for 2007]]'''<br /> <br /> '''Apr 19 (18:00h) - [[Virginia (Northern Virginia)|Washington DC (N. VA) chapter meeting]]'''<br /> <br /> '''Apr 18 (17:00h) - [[San Francisco City Chapter Meeting]]'''<br /> <br /> '''Apr 17 (18:00h) - [[New Jersey|NY/NJ Metro chapter meeting]]'''<br /> <br /> '''Apr 17 (18:00h) - [[Rochester|Rochester chapter meeting]]'''<br /> <br /> '''Apr 12 (18:00h) - [[Netherlands|Netherlands chapter meeting]]'''<br /> <br /> '''Apr 12 (18:00h) - [[San Jose|San Jose chapter meeting]]'''<br /> <br /> '''Apr 11 (18:00h) - [[Toronto|Toronto chapter meeting]]'''<br /> <br /> '''Apr 4 (18:30h) - [[Boston|Boston chapter meeting]]'''<br /> <br /> '''Apr 3 (18:00h) - [[Melbourne|Melbourne chapter meeting]]'''<br /> <br /> '''Mar 30 - [[http://www.owasp.org/index.php/Italy#March_30th.2C_2007_-_Master_in_Security_-_University_of_Rome_.22La_Sapienza.22| Italy@Master in Security at &quot;La Sapienza&quot;]]'''<br /> <br /> '''Mar 28 (18:00h) - [[Washington DC|Washington DC (MD) chapter meeting]]'''<br /> <br /> '''Mar 28 (11:30h) - [[San Antonio|San Antonio chapter meeting]]'''<br /> <br /> ; '''Mar 27-30 - [http://www.blackhat.com Black Hat Euro]'''<br /> : OWASP members receive a Euro 100 Briefings discount by inserting BH7EUASSOC in the box marked “Coupon Codes”<br /> <br /> '''Mar 22 (18:00h) - [[London|London chapter meeting]]'''<br /> <br /> '''Mar 21-22 - [[Belgium#OWASP_Top_10_2007_Update_.28Infosecurity_Belgium.2C_21_.26_.2622_Mar_2007.29|Belgium@InfoSecurity]]'''<br /> <br /> '''Mar 20 (18:00h) - [[Rochester|Rochester chapter meeting]]'''<br /> <br /> '''Mar 14 (18:00h) - [[Toronto|Toronto chapter meeting]]'''<br /> <br /> '''Mar 14 (18:00h) - [[Chicago|Chicago chapter meeting]]'''<br /> <br /> '''Mar 13 (18:00h) - [[Virginia (Northern Virginia)|Washington DC (N. VA) chapter meeting]]'''<br /> <br /> '''Mar 8 (18:00h) - [[Ottawa|Ottawa Chapter Meeting]] '''<br /> <br /> '''Mar 7 (18:30h) - [[Boston|Boston chapter meeting]]'''<br /> <br /> '''Mar 7 (18:30h) - [[Kansas City|Kansas City chapter meeting]]'''<br /> <br /> '''Mar 6 (18:30h) - [[Philadelphia|Philadelphia chapter meeting]]'''<br /> <br /> '''Mar 6 (18:30h) - [[San Francisco|San Francisco and San Jose chapter meeting]]'''<br /> <br /> '''Mar 6 (18:00h) - [[Melbourne|Melbourne chapter meeting]]'''<br /> <br /> '''Mar 5 (11:00h) - [[New Jersey|New Jersey chapter meeting]]'''<br /> <br /> '''Mar 1 (11:30h) - [http://www.eusecwest.com/agenda.html EUSecWest 07: Testing Guide]'''<br /> <br /> ; '''Feb 26-Mar 1 - [http://www.blackhat.com Black Hat DC]'''<br /> : OWASP members receive a $100 Briefings discount by inserting BH7DCASSOC in the box marked “Coupon Codes”<br /> <br /> '''Feb 28 (18:00h) - [[Seattle|Seattle chapter meeting]]'''<br /> <br /> '''Feb 27 (18:00h) - [[Edmonton|Edmonton chapter meeting]]'''<br /> <br /> '''Feb 22 (18:30h) - [[Helsinki|Helsinki chapter meeting]]'''<br /> <br /> '''Feb 22 (18:00h) - [[London|London chapter meeting]]'''<br /> <br /> '''Feb 21 (18:30h) - [[Denver|Denver chapter meeting]]'''<br /> <br /> '''Feb 19 (18:00h) - [[Rochester|Rochester chapter meeting]]'''<br /> <br /> '''Feb 15 (18:00h) - [[Washington DC|Washington DC (MD) chapter meeting]]'''<br /> <br /> '''Feb 15 (18:00h) - [[Virginia (Northern Virginia)|Washington DC (N. VA) chapter meeting]]'''<br /> <br /> '''Feb 14 (18:00h) - [[Toronto|Toronto chapter meeting]]'''<br /> <br /> '''Feb 13 (18:00h) - [[Ireland|Ireland chapter meeting]]'''<br /> <br /> '''Feb 12 (18:30h) - [[Switzerland|Switzerland chapter meeting]]'''<br /> <br /> '''Feb 7 (18:30h) - [[Boston|Boston chapter meeting]]'''<br /> <br /> '''Feb 6-7 - [[Italy#February_6th-8th.2C_2007_-_InfoSecurity|Italy@InfoSecurity]]'''<br /> <br /> '''Feb 6 (18:00h) - [[Melbourne|Melbourne chapter meeting]]'''<br /> <br /> '''Feb 2 (14:00h) - [[Chennai|Chennai chapter meeting]]'''<br /> <br /> '''Jan 31 (15:00h) - [[Mumbai|Mumbai chapter meeting]]'''<br /> <br /> '''Jan 30 (11:30h) - [[Austin|Austin chapter meeting]]'''<br /> <br /> '''Jan 25 (18:00h) - [[San Francisco| San Francisco chapter meeting]]'''<br /> <br /> '''Jan 25 (14:30h) - [[Italy#October_25th.2C_2007_-_Isaca_Rome|Italy@ISACA Rome]]'''<br /> <br /> '''Jan 24 (17:30h) - [[Israel#6th_OWASP_IL_meeting:_Wednesday.2C_January_24th_2007|6th OWASP Israel chapter meeting]]'''<br /> <br /> '''Jan 23 (18:00h) - [[Belgium|Belgium chapter meeting]]'''<br /> <br /> '''Jan 22 (18:00h) - [[Rochester|Rochester chapter meeting]]'''<br /> <br /> '''Jan 17 (18:30h) - [[Denver|Denver chapter meeting]]'''<br /> <br /> '''Jan 16 (17:45h) - [[Edmonton|Edmonton chapter meeting]]'''<br /> <br /> '''Jan 11 (18:00h) - [[Netherlands|Netherlands chapter meeting]]'''<br /> <br /> '''Jan 11 (18:30h) - [[Phoenix|Phoenix chapter meeting]]'''<br /> <br /> '''Jan 11 (18:00h) - [[Virginia (Northern Virginia)|Washington DC (N. VA) chapter meeting]]'''<br /> <br /> '''Jan 10 (18:00h) - [[Toronto|Toronto chapter meeting]]'''<br /> <br /> '''Jan 8 (18:00h) - [[Seattle|Seattle chapter meeting]]'''<br /> <br /> '''Jan 3 (18:30h) - [[Boston|Boston chapter meeting]]'''<br /> <br /> '''May 1 - [[Melbourne | Melbourne chapter meeting]]'''<br /> <br /> '''May 2 - [[Boston]]'''<br /> <br /> '''May 6 - [[Turkey]]'''<br /> <br /> '''May 8 - [[Virginia (Northern Virginia)|Washington DC (VA)]]'''<br /> <br /> '''May 9 - [[Toronto]]'''<br /> <br /> '''May 10 - [[Belgium]]'''<br /> <br /> '''May 15 - [[Rochester]]'''<br /> <br /> '''May 21 - [[Israel]]'''<br /> <br /> '''May 22 - [[New Zealand]]'''<br /> <br /> '''May 29 - [[Italy]]'''<br /> <br /> '''June 5 - [[Houston]]'''<br /> <br /> '''June 5 - [[Melbourne]]'''<br /> <br /> '''June 5 - [[Helsinki]]'''<br /> <br /> '''June 12 - [[New Jersey]]'''<br /> <br /> '''June 15 - [[Spain]]'''<br /> <br /> '''July 14 - [[Turkey]]'''</div>

Bbertacini https://wiki.owasp.org/index.php?title=San_Jose&diff=19859 2007-07-13T18:20:12Z

<p>Bbertacini: /* Next Meeting - Wednesday, July 25, 2007 */</p> <hr /> <div>{{Chapter Template|chaptername=San Jose|extra=The chapter leader is [mailto:brian.bertacini@owasp.org Brian Bertacini]|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-sanjose|emailarchives=http://lists.owasp.org/pipermail/owasp-sanjose}}<br /> <br /> == Next Meeting - Wednesday, July 25, 2007 ==<br /> Open to the public, attendance is free<br /> <br /> '''Agenda and Presentations:'''&lt;br/&gt;<br /> 6:00pm - 6:30pm ... Check-in and reception (food &amp; bev)&lt;br/&gt;<br /> 6:30pm - 8:00pm ... Attacking XML Security - Brad Hill&lt;br/&gt;<br /> 8:00pm - 8:15pm ... Upcoming Security Workshops - Brian Bertacini&lt;br/&gt;<br /> 8:15pm - 8:35pm ... Networking Session&lt;br/&gt;<br /> <br /> '''Venue:'''&lt;br/&gt;<br /> Ariba&lt;br/&gt;<br /> 807 11th Avenue&lt;br/&gt;<br /> Sunnyvale, Ca 94089&lt;br/&gt;<br /> [http://www.ariba.com/company/hq_map.cfm Map and Directions]&lt;br/&gt;<br /> <br /> <br /> '''Attacking XML Security'''&lt;br/&gt;<br /> '''''Presented by: Brad Hill, iSEC Partners'''''&lt;br/&gt;<br /> <br /> '''Abstract:''' <br /> Brad will present his ongoing research into attacking the XML Digital Signature and Encryption standards that underpin the security of Web Services, mobile code, SAML, federated identity systems and more. The talk will begin with a high-level, critical take on the emerging conventional wisdom about message-oriented security and continue with a detailed discussion of design and implementation weaknesses in the standards. Technical material will include a root cause analysis of the recent iSEC advisory on cross-platform, remote code execution vulnerabilities discovered in multiple XML Digital Signature products. &lt;br/&gt;<br /> <br /> '''Bio:''' Based out of Seattle, Brad Hill is a Senior Security Consultant at iSEC Partners, a full-service security consulting firm that provides penetration testing, secure systems development, security education and software design verification. Brad brings a ten year background as a software developer and architect in the technology and financial services sectors to his work at iSEC, where he does design review, application assessment and development lifecycle improvement for some of the world’s leading software companies. <br /> &lt;br/&gt;<br /> &lt;br/&gt;<br /> &lt;br/&gt;<br /> <br /> '''Upcoming Security Workshops'''&lt;br/&gt;<br /> '''''Presented by: Brian Bertacini, Volunteer Chapter Organizer'''''&lt;br/&gt;<br /> <br /> '''Abstract:''' Introduce local volunteer expert trainers that are planning web application and infrastructure security workshops.<br /> <br /> Please RSVP to via email [mailto:brian.bertacini@owasp.org Brian Bertacini], call 408-979-0571 or visit [http://owasp.mollyguard.com OWASP.Mollyguard.com]<br /> <br /> Special thanks to [http://www.ariba.com Ariba] for hosting this event and to [http://www.appsecconsulting.com AppSec Consulting] and [http://www.isecpartners.com iSEC Partners] for sponsoring.</div>

Bbertacini https://wiki.owasp.org/index.php?title=OWASP_Community&diff=17654 2007-04-02T17:05:05Z

<p>Bbertacini: /* Events */</p> <hr /> <div>This page is for people to post OWASP related events, such as chapter meetings, OWASP conferences, get-togethers, and OWASP sponsored events.<br /> <br /> Events from previous years are archived here:<br /> * '''[[OWASP Community 2006]]'''<br /> <br /> This page is monitored, and items posted here will be copied to the OWASP [[Main Page]]. Please post new items in chronological order using the following format:<br /> <br /> '''Mon ## (##:00h) - [[Article]]'''<br /> <br /> &lt;!--<br /> <br /> CHAPTER LEADS -- please put your schedule here and we'll post a month in advance<br /> <br /> *** Belgium ***<br /> <br /> *** OTTAWA: Rough dates ***<br /> '''Sept 12 (18:00h) - [[Ottawa|Ottawa Chapter Meeting]] '''<br /> '''Nov 14 (18:00h) - [[Ottawa|Ottawa Chapter Meeting]] '''<br /> <br /> *** BOSTON: Every first Wednesday of the month ***<br /> <br /> *** MELBOURNE: First Tuesday of the month ***<br /> '''Jun 5 (18:00h) - [[Melbourne|Melbourne chapter meeting]]'''<br /> '''Jul 3 (18:00h) - [[Melbourne|Melbourne chapter meeting]]'''<br /> <br /> *** NETHERLANDS: Second Thursday of the month sometimes ***<br /> '''Sept 13 (18:00h) - [[Netherlands|Netherlands chapter meeting]]'''<br /> '''Dec 13 (18:00h) - [[Netherlands|Netherlands chapter meeting]]'''<br /> <br /> *** ROCHESTER: Every third Monday of the month ***<br /> <br /> *** TORONTO: Every second Wednesday of the month<br /> <br /> *** VIRGINIA: Every second tuesday of the month ***<br /> <br /> --&gt;<br /> <br /> ==Events==<br /> '''May 15 (18:00h) - [[Rochester|Rochester chapter meeting]]'''<br /> <br /> '''May 10 (18:00h) - [[Belgium|Belgium chapter meeting]]'''<br /> <br /> '''May 9 (18:00h) - [[Toronto|Toronto chapter meeting]]'''<br /> <br /> '''May 9 (18:00h) - [[Ottawa|Ottawa Chapter Meeting]] '''<br /> <br /> '''May 8 (18:00h) - [[Virginia (Northern Virginia)|Washington DC (N. VA) chapter meeting]]'''<br /> <br /> '''May 2 (18:30h) - [[Boston|Boston chapter meeting]]'''<br /> <br /> '''May 1 (18:00h) - [[Melbourne|Melbourne chapter meeting]]'''<br /> <br /> '''May 21 (14:00h) - [[Israel|2nd OWASP Israel mini conference]]'''<br /> <br /> '''Apr 26 (17:00h) - [[Switzerland|Switzerland chapter meeting and &quot;Swiss Security Dinner&quot;]]'''<br /> <br /> '''Apr 20 (19:00h) - [[Hong Kong|Hong Kong chapter meeting - Objectives for 2007]]'''<br /> <br /> '''Apr 17 (18:00h) - [[Rochester|Rochester chapter meeting]]'''<br /> <br /> '''Apr 17 (18:00h) - [[New Jersey|NY/NJ Metro chapter meeting]]'''<br /> <br /> '''Apr 12 (18:00h) - [[Netherlands|Netherlands chapter meeting]]'''<br /> <br /> '''Apr 12 (18:00h) - [[San Jose|San Jose chapter meeting]]'''<br /> <br /> '''Apr 11 (18:00h) - [[Toronto|Toronto chapter meeting]]'''<br /> <br /> '''Apr 10 (18:00h) - [[Virginia (Northern Virginia)|Washington DC (N. VA) chapter meeting]]'''<br /> <br /> '''Apr 4 (18:30h) - [[Boston|Boston chapter meeting]]'''<br /> <br /> '''Apr 3 (18:00h) - [[Melbourne|Melbourne chapter meeting]]'''<br /> <br /> '''Mar 30 - [[http://www.owasp.org/index.php/Italy#March_30th.2C_2007_-_Master_in_Security_-_University_of_Rome_.22La_Sapienza.22| Italy@Master in Security at &quot;La Sapienza&quot;]]'''<br /> <br /> '''Mar 28 (18:00h) - [[Washington DC|Washington DC (MD) chapter meeting]]'''<br /> <br /> '''Mar 28 (11:30h) - [[San Antonio|San Antonio chapter meeting]]'''<br /> <br /> ; '''Mar 27-30 - [http://www.blackhat.com Black Hat Euro]'''<br /> : OWASP members receive a Euro 100 Briefings discount by inserting BH7EUASSOC in the box marked “Coupon Codes”<br /> <br /> '''Mar 22 (18:00h) - [[London|London chapter meeting]]'''<br /> <br /> '''Mar 21-22 - [[Belgium#OWASP_Top_10_2007_Update_.28Infosecurity_Belgium.2C_21_.26_.2622_Mar_2007.29|Belgium@InfoSecurity]]'''<br /> <br /> '''Mar 20 (18:00h) - [[Rochester|Rochester chapter meeting]]'''<br /> <br /> '''Mar 14 (18:00h) - [[Toronto|Toronto chapter meeting]]'''<br /> <br /> '''Mar 14 (18:00h) - [[Chicago|Chicago chapter meeting]]'''<br /> <br /> '''Mar 13 (18:00h) - [[Virginia (Northern Virginia)|Washington DC (N. VA) chapter meeting]]'''<br /> <br /> '''Mar 8 (18:00h) - [[Ottawa|Ottawa Chapter Meeting]] '''<br /> <br /> '''Mar 7 (18:30h) - [[Boston|Boston chapter meeting]]'''<br /> <br /> '''Mar 7 (18:30h) - [[Kansas City|Kansas City chapter meeting]]'''<br /> <br /> '''Mar 6 (18:30h) - [[Philadelphia|Philadelphia chapter meeting]]'''<br /> <br /> '''Mar 6 (18:30h) - [[San Francisco|San Francisco and San Jose chapter meeting]]'''<br /> <br /> '''Mar 6 (18:00h) - [[Melbourne|Melbourne chapter meeting]]'''<br /> <br /> '''Mar 5 (11:00h) - [[New Jersey|New Jersey chapter meeting]]'''<br /> <br /> '''Mar 1 (11:30h) - [http://www.eusecwest.com/agenda.html EUSecWest 07: Testing Guide]'''<br /> <br /> ; '''Feb 26-Mar 1 - [http://www.blackhat.com Black Hat DC]'''<br /> : OWASP members receive a $100 Briefings discount by inserting BH7DCASSOC in the box marked “Coupon Codes”<br /> <br /> '''Feb 28 (18:00h) - [[Seattle|Seattle chapter meeting]]'''<br /> <br /> '''Feb 27 (18:00h) - [[Edmonton|Edmonton chapter meeting]]'''<br /> <br /> '''Feb 22 (18:30h) - [[Helsinki|Helsinki chapter meeting]]'''<br /> <br /> '''Feb 22 (18:00h) - [[London|London chapter meeting]]'''<br /> <br /> '''Feb 21 (18:30h) - [[Denver|Denver chapter meeting]]'''<br /> <br /> '''Feb 19 (18:00h) - [[Rochester|Rochester chapter meeting]]'''<br /> <br /> '''Feb 15 (18:00h) - [[Washington DC|Washington DC (MD) chapter meeting]]'''<br /> <br /> '''Feb 15 (18:00h) - [[Virginia (Northern Virginia)|Washington DC (N. VA) chapter meeting]]'''<br /> <br /> '''Feb 14 (18:00h) - [[Toronto|Toronto chapter meeting]]'''<br /> <br /> '''Feb 13 (18:00h) - [[Ireland|Ireland chapter meeting]]'''<br /> <br /> '''Feb 12 (18:30h) - [[Switzerland|Switzerland chapter meeting]]'''<br /> <br /> '''Feb 7 (18:30h) - [[Boston|Boston chapter meeting]]'''<br /> <br /> '''Feb 6-7 - [[Italy#February_6th-8th.2C_2007_-_InfoSecurity|Italy@InfoSecurity]]'''<br /> <br /> '''Feb 6 (18:00h) - [[Melbourne|Melbourne chapter meeting]]'''<br /> <br /> '''Feb 2 (14:00h) - [[Chennai|Chennai chapter meeting]]'''<br /> <br /> '''Jan 31 (15:00h) - [[Mumbai|Mumbai chapter meeting]]'''<br /> <br /> '''Jan 30 (11:30h) - [[Austin|Austin chapter meeting]]'''<br /> <br /> '''Jan 25 (18:00h) - [[San Francisco| San Francisco chapter meeting]]'''<br /> <br /> '''Jan 25 (14:30h) - [[Italy#October_25th.2C_2007_-_Isaca_Rome|Italy@ISACA Rome]]'''<br /> <br /> '''Jan 24 (17:30h) - [[Israel#6th_OWASP_IL_meeting:_Wednesday.2C_January_24th_2007|6th OWASP Israel chapter meeting]]'''<br /> <br /> '''Jan 23 (18:00h) - [[Belgium|Belgium chapter meeting]]'''<br /> <br /> '''Jan 22 (18:00h) - [[Rochester|Rochester chapter meeting]]'''<br /> <br /> '''Jan 17 (18:30h) - [[Denver|Denver chapter meeting]]'''<br /> <br /> '''Jan 16 (17:45h) - [[Edmonton|Edmonton chapter meeting]]'''<br /> <br /> '''Jan 11 (18:00h) - [[Netherlands|Netherlands chapter meeting]]'''<br /> <br /> '''Jan 11 (18:30h) - [[Phoenix|Phoenix chapter meeting]]'''<br /> <br /> '''Jan 11 (18:00h) - [[Virginia (Northern Virginia)|Washington DC (N. VA) chapter meeting]]'''<br /> <br /> '''Jan 10 (18:00h) - [[Toronto|Toronto chapter meeting]]'''<br /> <br /> '''Jan 8 (18:00h) - [[Seattle|Seattle chapter meeting]]'''<br /> <br /> '''Jan 3 (18:30h) - [[Boston|Boston chapter meeting]]'''</div>

Bbertacini https://wiki.owasp.org/index.php?title=San_Jose&diff=14040 2006-12-08T07:30:29Z

<p>Bbertacini: /* Next Meeting - Tuesday, December 19, 2006 */</p> <hr /> <div>{{Chapter Template|chaptername=San Jose|extra=The chapter leader is [mailto:brian.bertacini@owasp.org Brian Bertacini]|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-sanjose|emailarchives=http://lists.owasp.org/pipermail/owasp-sanjose}}<br /> <br /> == Next Meeting - Tuesday, December 19, 2006 ==<br /> Open to the public, attendance is free<br /> <br /> '''Agenda and Presentations:'''&lt;br/&gt;<br /> 6:00pm – 6:30pm ... Check-in and reception (food &amp; bev)&lt;br/&gt;<br /> 6:30pm – 6:45pm ... About OWASP, Brian Bertacini &lt;br/&gt;<br /> 6:45pm – 7:30pm ... Latest Web Application Security Trends and Statistics, Jeremiah Grossman&lt;br/&gt;<br /> 7:30pm – 8:30pm ... Networking &amp; Holiday Reception&lt;br/&gt;<br /> <br /> '''Venue:'''&lt;br/&gt;<br /> Fujitsu Advanced Networking Solutions&lt;br/&gt;<br /> 1240 E. Arques Ave.&lt;br/&gt;<br /> Sunnyvale, CA 94085&lt;br/&gt;<br /> <br /> <br /> '''New Trends and Web Application Security Statistics'''&lt;br/&gt;<br /> '''''Presented by: Jeremiah Grossman, Founder &amp; CTO, WhiteHat Security'''''&lt;br/&gt;<br /> <br /> '''Abstract:''' First Look at New Web Application Security Statistics. The Top 10 Web Application Vulnerabilities and their Impact on the Enterprise Web applications are the newest attack target, hitting the biggest and best brands on the Internet. And yet, until now, there has been limited information available about the most prevalent and most severe vulnerabilities that are facilitating the rapidly rising number of attacks.<br /> <br /> WhiteHat Security founder and CTO, Jeremiah Grossman, will present the findings from the first WhiteHat Security Web Application Security Risk Report. Based on WhiteHat’s aggregate data from hundreds of web application assessments, Mr.Grossman's presentation will provide a first-of-its-kind look at the top vulnerabilities that attackers are exploiting at businesses across the Web.<br /> &lt;br/&gt;<br /> • Identify and discuss the top ten vulnerabilities &lt;br/&gt;<br /> • Define the severity levels of web application vulnerabilities &lt;br/&gt;<br /> • Present strategies for web application vulnerability management &lt;br/&gt;<br /> <br /> '''Bio:''' Mr. Grossman is a world-renowned expert in Web security and a founding member of the Web Application Security Consortium. He is a frequent speaker at industry events including the BlackHat Briefings, ISACA’s Networks Security Conference, NASA, the Air Force and Technology Conference, ISSA and Defcon. Mr. Grossman is also a featured expert and frequent contributor on TechTarget’s SearchAppSecurity.com.<br /> <br /> &lt;br/&gt;<br /> '''About OWASP'''&lt;br/&gt;<br /> '''''Presented by: Brian Bertacini, Volunteer chapter organizer'''''&lt;br/&gt;<br /> <br /> '''Abstract:''' An overview of the Open Web Application Security Project (OWASP), current projects and feedback from the recent WebAppSec Conference in Seattle. <br /> <br /> Please RSVP to via email [mailto:brian.bertacini@owasp.org Brian Bertacini], call 408-979-0571 or visit [http://owasp.mollyguard.com OWASP.Mollyguard.com]<br /> <br /> Special thanks to [http://www.fsba.com Fujitsu Advanced Networking Solutions] for hosting this event.</div>

Bbertacini https://wiki.owasp.org/index.php?title=San_Jose&diff=14039 2006-12-08T07:20:01Z

<p>Bbertacini: /* Next Meeting - Tuesday, December 19, 2006 */</p> <hr /> <div>{{Chapter Template|chaptername=San Jose|extra=The chapter leader is [mailto:brian.bertacini@owasp.org Brian Bertacini]|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-sanjose|emailarchives=http://lists.owasp.org/pipermail/owasp-sanjose}}<br /> <br /> == Next Meeting - Tuesday, December 19, 2006 ==<br /> Open to the public, attendance is free<br /> <br /> '''Agenda and Presentations:'''&lt;br/&gt;<br /> 6:00pm – 6:30pm ... Check-in and reception (food &amp; bev)&lt;br/&gt;<br /> 6:30pm – 6:45pm ... About OWASP, Brian Bertacini &lt;br/&gt;<br /> 6:45pm – 7:30pm ... Latest Web Application Security Trends and Statistics, Jeremiah Grossman&lt;br/&gt;<br /> 7:30pm – 8:30pm ... Networking &amp; Holiday Reception&lt;br/&gt;<br /> <br /> '''Venue:'''&lt;br/&gt;<br /> Fujitsu Advanced Networking Solutions&lt;br/&gt;<br /> 1240 E. Arques Ave.&lt;br/&gt;<br /> Sunnyvale, CA 94085&lt;br/&gt;<br /> <br /> <br /> '''New Trends and Web Application Security Statistics'''&lt;br/&gt;<br /> '''''Presented by: Jeremiah Grossman, Founder &amp; CTO, WhiteHat Security'''''&lt;br/&gt;<br /> <br /> '''Abstract:''' First Look at New Web Application Security Statistics. The Top 10 Web Application Vulnerabilities and their Impact on the Enterprise Web applications are the newest attack target, hitting the biggest and best brands on the Internet. And yet, until now, there has been limited information available about the most prevalent and most severe vulnerabilities that are facilitating the rapidly rising number of attacks.<br /> <br /> WhiteHat Security founder and CTO, Jeremiah Grossman, will present the findings from the first WhiteHat Security Web Application Security Risk Report. Based on WhiteHat’s aggregate data from hundreds of web application assessments, Mr.Grossman's presentation will provide a first-of-its-kind look at the top vulnerabilities that attackers are exploiting at businesses across the Web.<br /> &lt;br/&gt;<br /> • Identify and discuss the top ten vulnerabilities &lt;br/&gt;<br /> • Define the severity levels of web application vulnerabilities &lt;br/&gt;<br /> • Present strategies for web application vulnerability management &lt;br/&gt;<br /> <br /> '''Bio:''' Mr. Grossman is a world-renowned expert in Web security and a founding member of the Web Application Security Consortium. He is a frequent speaker at industry events including the BlackHat Briefings, ISACA’s Networks Security Conference, NASA, the Air Force and Technology Conference, ISSA and Defcon. Mr. Grossman is also a featured expert and frequent contributor on TechTarget’s SearchAppSecurity.com.<br /> <br /> &lt;br/&gt;<br /> '''About OWASP'''&lt;br/&gt;<br /> '''''Presented by: Brian Bertacini, Volunteer chapter organizer'''''&lt;br/&gt;<br /> <br /> '''Abstract:''' An overview of the Open Web Application Security Project (OWASP), current projects and feedback from the recent WebAppSec Conference in Seatle. <br /> <br /> Please RSVP to via email [mailto:brian.bertacini@owasp.org Brian Bertacini], call 408-979-0571 or visit [http://owasp.mollyguard.com OWASP.Mollyguard.com]<br /> <br /> Special thanks to [http://www.fsba.com Fujitsu Advanced Networking Solutions] for hosting this event.</div>

Bbertacini https://wiki.owasp.org/index.php?title=San_Jose&diff=14038 2006-12-08T07:06:15Z

<p>Bbertacini: /* Next Meeting - Tuesday, December 19, 2006 */</p> <hr /> <div>{{Chapter Template|chaptername=San Jose|extra=The chapter leader is [mailto:brian.bertacini@owasp.org Brian Bertacini]|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-sanjose|emailarchives=http://lists.owasp.org/pipermail/owasp-sanjose}}<br /> <br /> == Next Meeting - Tuesday, December 19, 2006 ==<br /> Open to the public, attendance is free<br /> <br /> '''Agenda and Presentations:'''&lt;br/&gt;<br /> 6:00pm – 6:30pm ... Check-in and reception (food &amp; bev)&lt;br/&gt;<br /> 6:30pm – 6:45pm ... About OWASP, Brian Bertacini &lt;br/&gt;<br /> 6:45pm – 7:30pm ... Latest Web Application Security Trends and Statistics, Jeremiah Grossman&lt;br/&gt;<br /> 7:30pm – 8:30pm ... Networking &amp; Holiday Reception&lt;br/&gt;<br /> <br /> '''Venue:'''&lt;br/&gt;<br /> Fujitsu Advanced Networking Solutions&lt;br/&gt;<br /> 1240 E. Arques Ave.&lt;br/&gt;<br /> Sunnyvale, CA 94085&lt;br/&gt;<br /> <br /> <br /> '''New Trends and Web Application Security Statistics'''&lt;br/&gt;<br /> '''''Presented by: Jeremiah Grossman, Founder &amp; CTO, WhiteHat Security'''''&lt;br/&gt;<br /> <br /> '''Abstract:''' First Look at New Web Application Security Statistics. The Top 10 Web Application Vulnerabilities and their Impact on the Enterprise Web applications are the newest attack target, hitting the biggest and best brands on the Internet. And yet, until now, there has been limited information available about the most prevalent and most severe vulnerabilities that are facilitating the rapidly rising number of attacks.<br /> <br /> WhiteHat Security founder and CTO, Jeremiah Grossman, will present the findings from the first WhiteHat Security Web Application Security Risk Report. Based on WhiteHat’s aggregate data from hundreds of web application assessments, Mr.Grossman's presentation will provide a first-of-its-kind look at the top vulnerabilities that attackers are exploiting at businesses across the Web.<br /> <br /> • Identify and discuss the top ten vulnerabilities<br /> • Define the severity levels of web application vulnerabilities<br /> • Present strategies for web application vulnerability management<br /> <br /> '''Bio:''' Mr. Grossman is a world-renowned expert in Web security and a founding member of the Web Application Security Consortium. He is a frequent speaker at industry events including the BlackHat Briefings, ISACA’s Networks Security Conference, NASA, the Air Force and Technology Conference, ISSA and Defcon. Mr. Grossman is also a featured expert and frequent contributor on TechTarget’s SearchAppSecurity.com.<br /> <br /> Please RSVP to via email [mailto:brian.bertacini@owasp.org Brian Bertacini], call 408-979-0571 or visit [http://owasp.mollyguard.com OWASP.Mollyguard.com]<br /> <br /> Special thanks to [http://www.fsba.com Fujitsu Advanced Networking Solutions] for hosting this event.</div>

Bbertacini https://wiki.owasp.org/index.php?title=San_Jose&diff=14037 2006-12-08T07:03:47Z

<p>Bbertacini: /* Next Meeting - Tuesday, December 19, 2006 */</p> <hr /> <div>{{Chapter Template|chaptername=San Jose|extra=The chapter leader is [mailto:brian.bertacini@owasp.org Brian Bertacini]|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-sanjose|emailarchives=http://lists.owasp.org/pipermail/owasp-sanjose}}<br /> <br /> == Next Meeting - Tuesday, December 19, 2006 ==<br /> Open to the public, attendance is free<br /> <br /> '''Agenda and Presentations:'''&lt;br/&gt;<br /> 6:00pm – 6:30pm Check-in and reception (food &amp; bev)&lt;br/&gt;<br /> 6:30pm – 6:45pm About OWASP, Brian Bertacini &lt;br/&gt;<br /> 6:45pm – 7:30pm Latest Web Application Security Trends and Statistics, Jeremiah Grossman&lt;br/&gt;<br /> 7:30pm – 8:30pm Networking &amp; Holiday Reception&lt;br/&gt;<br /> <br /> '''Venue:'''&lt;br/&gt;<br /> Fujitsu Advanced Networking Solutions&lt;br/&gt;<br /> 1240 E. Arques Ave.&lt;br/&gt;<br /> Sunnyvale, CA 94085&lt;br/&gt;<br /> <br /> <br /> '''New Trends and Web Application Security Statistics'''&lt;br/&gt;<br /> '''''Presented by: Jeremiah Grossman, Founder &amp; CTO, WhiteHat Security'''''&lt;br/&gt;<br /> <br /> '''Abstract:''' First Look at New Web Application Security Statistics. The Top 10 Web Application Vulnerabilities and their Impact on the Enterprise Web applications are the newest attack target, hitting the biggest and best brands on the Internet. And yet, until now, there has been limited information available about the most prevalent and most severe vulnerabilities that are facilitating the rapidly rising number of attacks.<br /> <br /> WhiteHat Security founder and CTO, Jeremiah Grossman, will present the findings from the first WhiteHat Security Web Application Security Risk Report. Based on WhiteHat’s aggregate data from hundreds of web application assessments, Mr.Grossman's presentation will provide a first-of-its-kind look at the top vulnerabilities that attackers are exploiting at businesses across the Web.<br /> <br /> • Identify and discuss the top ten vulnerabilities<br /> • Define the severity levels of web application vulnerabilities<br /> • Present strategies for web application vulnerability management<br /> <br /> '''Bio:''' Mr. Grossman is a world-renowned expert in Web security and a founding member of the Web Application Security Consortium. He is a frequent speaker at industry events including the BlackHat Briefings, ISACA’s Networks Security Conference, NASA, the Air Force and Technology Conference, ISSA and Defcon. Mr. Grossman is also a featured expert and frequent contributor on TechTarget’s SearchAppSecurity.com.<br /> <br /> Please RSVP to via email [mailto:brian.bertacini@owasp.org Brian Bertacini], call 408-979-0571 or visit [http://owasp.mollyguard.com OWASP.Mollyguard.com]<br /> <br /> Special thanks to [http://www.fsba.com Fujitsu Advanced Networking Solutions] for hosting this event.</div>

Bbertacini https://wiki.owasp.org/index.php?title=San_Jose&diff=14036 2006-12-08T06:57:38Z

<p>Bbertacini: /* Next Meeting - Thursday, August 10, 2006 */</p> <hr /> <div>{{Chapter Template|chaptername=San Jose|extra=The chapter leader is [mailto:brian.bertacini@owasp.org Brian Bertacini]|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-sanjose|emailarchives=http://lists.owasp.org/pipermail/owasp-sanjose}}<br /> <br /> == Next Meeting - Tuesday, December 19, 2006 ==<br /> Open to the public, attendance is free<br /> <br /> '''Agenda and Presentations:'''&lt;br/&gt;<br /> 6:00pm – 6:30pm Check-in and reception (food &amp; bev)&lt;br/&gt;<br /> 6:30pm – 6:45pm About OWASP, Brian Bertacini, AppSec Consulting &lt;br/&gt;<br /> 6:45pm – 7:30pm Latest Web Application Security Trends and Statistics, Jeremiah Grossman, Founder &amp; CTO Whitehat Security&lt;br/&gt;<br /> 7:30pm – 8:30pm Open discussion &amp; Networking&lt;br/&gt;<br /> <br /> '''Venue:'''&lt;br/&gt;<br /> Fujitsu Advanced Networking Solutions&lt;br/&gt;<br /> 1240 E. Arques Ave.&lt;br/&gt;<br /> Sunnyvale, CA 94085&lt;br/&gt;<br /> <br /> <br /> '''New Trends and Web Application Security Statistics'''&lt;br/&gt;<br /> '''''Presented by: Jeremiah Grossman, Founder &amp; CTO, WhiteHat Security'''''&lt;br/&gt;<br /> <br /> '''Abstract:''' First Look at New Web Application Security Statistics. The Top 10 Web Application Vulnerabilities and their Impact on the Enterprise Web applications are the newest attack target, hitting the biggest and best brands on the Internet. And yet, until now, there has been limited information available about the most prevalent and most severe vulnerabilities that are facilitating the rapidly rising number of attacks.<br /> <br /> WhiteHat Security founder and CTO, Jeremiah Grossman, will present the findings from the first WhiteHat Security Web Application Security Risk Report. Based on WhiteHat’s aggregate data from hundreds of web application assessments, Mr.Grossman's presentation will provide a first-of-its-kind look at the top vulnerabilities that attackers are exploiting at businesses across the Web.<br /> <br /> • Identify and discuss the top ten vulnerabilities<br /> • Define the severity levels of web application vulnerabilities<br /> • Present strategies for web application vulnerability management<br /> <br /> '''Bio:''' Mr. Grossman is a world-renowned expert in Web security and a founding member of the Web Application Security Consortium. He is a frequent speaker at industry events including the BlackHat Briefings, ISACA’s Networks Security Conference, NASA, the Air Force and Technology Conference, ISSA and Defcon. Mr. Grossman is also a featured expert and frequent contributor on TechTarget’s SearchAppSecurity.com.<br /> <br /> Please RSVP to via email [mailto:brian.bertacini@owasp.org Brian Bertacini], call 408-979-0571 or visit [http://owasp.mollyguard.com OWASP.Mollyguard.com]<br /> <br /> <br /> This event is co-sponsored by [http://www.appsecconsulting.com AppSec Consulting, Inc]. and [http://www.whitehatsec.com WhiteHat Security, Inc.]<br /> <br /> Special thanks to [http://www.fsba.com Fujitsu Advanced Networking Solutions] for hosting this event.</div>

Bbertacini https://wiki.owasp.org/index.php?title=Talk:San_Jose&diff=14035 2006-12-08T06:32:10Z

<p>Bbertacini: /* Previous Meetings: */</p> <hr /> <div>== Previous Meetings: ==<br /> <br /> '''August 10, 2006 - The Next Generation of Vulnerable Applications'''<br /> <br /> '''Presented by: Alex Stamos, Founding Partner, iSEC Partners'''<br /> <br /> '''Abstract:''' Web Services represent a new and unexplored set of security-sensitive technologies that have been widely deployed by large companies, governments, financial institutions, and in consumer applications. Unfortunately, the attributes that make web services attractive, such as their ease of use, platform independence, use of HTTP and powerful functionality, also make them a great target for attack. In this talk, we will explain the basic technologies (such as XML, SOAP, and UDDI) upon which web services are built, and explore the innate security weaknesses in each. We will then demonstrate new attacks that exist in web service infrastructures, and show how classic web application attacks (SQL Injection, XSS, etc…) can be retooled to work with the next-generation of enterprise applications. <br /> <br /> <br /> '''Bio:''' Alex Stamos is a founding partner of iSEC Partners - a strategic digital security organization. Alex is an experienced security engineer and consultant specializing in application security and securing large infrastructures, and has taught multiple classes in network and application security. He is a leading researcher in the field of web application and web services security and has been a featured speaker at top industry conferences such as BlackHat, DefCon, SyScan, Microsoft BlueHat and OWASP App Sec. <br /> <br /> Before he helped form iSEC Partners, Alex spent two years as a Managing Security Architect with @stake. Alex performed as a technical leader on many complex and difficult assignments, including a thorough penetration test and architectural review of a 6 million line enterprise management system, a secure re-design of a multi-thousand host ASP network, and a thorough analysis and code review of a major commercial web server. He was also one of @stake’s West Coast trainers, educating select technical audiences in advanced network and application attacks. <br /> <br /> Alex has also worked in at a DoE National Laboratory. He holds a BS in Electrical Engineering and Computer Science from the University of California, Berkeley, where he participated in research projects related to distributed secure storage and automatic C code auditing.</div>

Bbertacini https://wiki.owasp.org/index.php?title=Talk:San_Jose&diff=14034 2006-12-08T06:31:33Z

<p>Bbertacini: /* Previous Meetings: */</p> <hr /> <div>== Previous Meetings: ==<br /> <br /> '''August 10, 2006 - The Next Generation of Vulnerable Applications'''<br /> <br /> '''Presented by: Alex Stamos, Founding Partner, iSEC Partners'''<br /> '''Abstract:''' Web Services represent a new and unexplored set of security-sensitive technologies that have been widely deployed by large companies, governments, financial institutions, and in consumer applications. Unfortunately, the attributes that make web services attractive, such as their ease of use, platform independence, use of HTTP and powerful functionality, also make them a great target for attack. In this talk, we will explain the basic technologies (such as XML, SOAP, and UDDI) upon which web services are built, and explore the innate security weaknesses in each. We will then demonstrate new attacks that exist in web service infrastructures, and show how classic web application attacks (SQL Injection, XSS, etc…) can be retooled to work with the next-generation of enterprise applications. <br /> <br /> <br /> '''Bio:''' Alex Stamos is a founding partner of iSEC Partners - a strategic digital security organization. Alex is an experienced security engineer and consultant specializing in application security and securing large infrastructures, and has taught multiple classes in network and application security. He is a leading researcher in the field of web application and web services security and has been a featured speaker at top industry conferences such as BlackHat, DefCon, SyScan, Microsoft BlueHat and OWASP App Sec. <br /> <br /> Before he helped form iSEC Partners, Alex spent two years as a Managing Security Architect with @stake. Alex performed as a technical leader on many complex and difficult assignments, including a thorough penetration test and architectural review of a 6 million line enterprise management system, a secure re-design of a multi-thousand host ASP network, and a thorough analysis and code review of a major commercial web server. He was also one of @stake’s West Coast trainers, educating select technical audiences in advanced network and application attacks. <br /> <br /> Alex has also worked in at a DoE National Laboratory. He holds a BS in Electrical Engineering and Computer Science from the University of California, Berkeley, where he participated in research projects related to distributed secure storage and automatic C code auditing.</div>

Bbertacini https://wiki.owasp.org/index.php?title=Talk:San_Jose&diff=14033 2006-12-08T06:29:47Z

<p>Bbertacini: </p> <hr /> <div><br /> == Previous Meetings: ==<br /> <br /> '''August 10, 2006<br /> <br /> The Next Generation of Vulnerable Applications'''Presented by: Alex Stamos, Founding Partner, iSEC Partners<br /> Abstract: Web Services represent a new and unexplored set of security-sensitive technologies that have been widely deployed by large companies, governments, financial institutions, and in consumer applications. Unfortunately, the attributes that make web services attractive, such as their ease of use, platform independence, use of HTTP and powerful functionality, also make them a great target for attack. In this talk, we will explain the basic technologies (such as XML, SOAP, and UDDI) upon which web services are built, and explore the innate security weaknesses in each. We will then demonstrate new attacks that exist in web service infrastructures, and show how classic web application attacks (SQL Injection, XSS, etc…) can be retooled to work with the next-generation of enterprise applications. <br /> <br /> <br /> '''Bio:''' Alex Stamos is a founding partner of iSEC Partners - a strategic digital security organization. Alex is an experienced security engineer and consultant specializing in application security and securing large infrastructures, and has taught multiple classes in network and application security. He is a leading researcher in the field of web application and web services security and has been a featured speaker at top industry conferences such as BlackHat, DefCon, SyScan, Microsoft BlueHat and OWASP App Sec. <br /> <br /> Before he helped form iSEC Partners, Alex spent two years as a Managing Security Architect with @stake. Alex performed as a technical leader on many complex and difficult assignments, including a thorough penetration test and architectural review of a 6 million line enterprise management system, a secure re-design of a multi-thousand host ASP network, and a thorough analysis and code review of a major commercial web server. He was also one of @stake’s West Coast trainers, educating select technical audiences in advanced network and application attacks. <br /> <br /> Alex has also worked in at a DoE National Laboratory. He holds a BS in Electrical Engineering and Computer Science from the University of California, Berkeley, where he participated in research projects related to distributed secure storage and automatic C code auditing.</div>

Bbertacini https://wiki.owasp.org/index.php?title=OWASP_Community&diff=14032 2006-12-08T06:20:37Z

<p>Bbertacini: /* Events */</p> <hr /> <div>This page is for people to post OWASP related events, such as chapter meetings, OWASP conferences, get-togethers, and OWASP sponsored events. This page is monitored, and items will be copied to the front page.<br /> <br /> Please post new items in chronological order using the following format:<br /> <br /> &lt;nowiki&gt;<br /> '''Mon ## (##:00h) - [[Article]]'''<br /> &lt;/nowiki&gt;<br /> <br /> &lt;!--<br /> *** Every second tuesday of the month ***<br /> '''xxx xx (18:00h) - [[Virginia (Northern Virginia)|Washington DC (N. VA) chapter meeting]]'''<br /> <br /> *** Every first Wednesday of the month ***<br /> '''xxx xx (18:30h) - [[Boston|Boston chapter meeting]]'''<br /> <br /> *** Every second Wednesday of the month<br /> '''xxx xx (18:00h) - [[Toronto|Toronto chapter meeting]]'''<br /> <br /> *** Every third Monday of the month ***<br /> '''xxx xx (18:00h) - [[Rochester|Rochester chapter meeting]]'''<br /> <br /> --&gt;<br /> <br /> ==Events==<br /> <br /> '''Jan 17 (18:30h) - [[Denver|Denver chapter meeting]]'''<br /> <br /> '''Jan 4 (18:30h) - [[Boston|Boston chapter meeting]]'''<br /> <br /> '''Dec 19 (18:00h) - [[San Jose|San Jose chapter meeting]]'''<br /> <br /> '''Dec 18 (18:30h) - [[Rochester|Rochester chapter meeting]]'''<br /> <br /> '''Dec 14 (18:00h) - [[Washington DC|Washington DC (MD) chapter meeting]]'''<br /> <br /> '''Dec 13 (18:00h) - [[Chicago|Chicago chapter meeting]]'''<br /> <br /> '''Dec 12 (18:30h) - [[Helsinki|Helsinki chapter meeting]]'''<br /> <br /> '''Dec 12 (18:00h) - [[Cleveland|Cleveland chapter meeting]]'''<br /> <br /> '''Dec 12 (18:00h) - [[Virginia (Northern Virginia)|Washington DC (N. VA) chapter meeting]]'''<br /> <br /> '''Dec 7 (17:30h) - [[New Jersey|New Jersey chapter meeting]]'''<br /> <br /> '''Dec 6 (18:30h) - [[Kansas City|Kansas City chapter meeting]]'''<br /> <br /> '''Dec 6 (18:30h) - [[Boston|Boston chapter meeting]] (cancelled)'''<br /> <br /> '''Dec 5 (18:00h) - [[Edmonton|Edmonton chapter meeting]]'''<br /> <br /> '''Nov 21 (11:30h) - [[Austin|Austin chapter meeting]]<br /> <br /> '''Nov 20 (18:00h) - [[Rochester|Rochester chapter meeting]]'''<br /> <br /> '''Nov 15 (18:30h) - [[Denver|Denver chapter meeting]]'''<br /> <br /> '''Nov 14 (18:00h) - [[Virginia (Northern Virginia)|Washington DC (N. VA) chapter meeting]]'''<br /> <br /> '''Nov 13 (14:30h) - [[Israel|Israeli chapter mini-conference at IDC Herzliya]]'''<br /> <br /> '''Nov 11 (10:00h) - [[Switzerland|Kickoff Meeting OWASP Switzerland Local Chapter]]'''<br /> <br /> '''Nov 9 (18:30h) - [[Phoenix|Phoenix chapter meeting]]'''<br /> <br /> '''Nov 8 (18:00h) - [[Toronto|Toronto chapter meeting]]'''<br /> <br /> '''Nov 6 (18:00h) - [[Ottawa|Ottawa chapter meeting]]'''<br /> <br /> '''Nov 1 (18:30h) - [[Boston|Boston chapter meeting]]'''<br /> <br /> '''Oct 31 (12:00h) - [[Austin|Austin OWASP chapter]]'''<br /> <br /> '''Oct 30 (11:00h) - [[Montgomery|Montgomery chapter meeting]]'''<br /> <br /> '''Oct 26 (18:00h) - [[Washington DC|Washington DC (MD) chapter meeting]]'''<br /> <br /> '''Oct 24 (18:00h) - [[Edmonton|Edmonton chapter meeting]]'''<br /> <br /> '''Oct 16-18 - [[OWASP AppSec Seattle 2006|OWASP AppSec Seattle 2006 Conference]]'''<br /> <br /> '''Oct 16 (18:00h) - [[Rochester|Rochester chapter meeting]]'''<br /> <br /> '''Oct 12 (18:00h) - [[Virginia (Northern Virginia)|Washington DC (N. VA) chapter meeting]]'''<br /> <br /> '''Oct 7 - [[Italy| OWASP Italy at SMAU 06]]''' <br /> <br /> '''Oct 4 (18:30h) - [[Boston|Boston chapter meeting]]'''<br /> <br /> '''Oct 2 (18:00h) - [[Ottawa|Ottawa chapter meeting]]'''<br /> <br /> '''Sep 29 - [[Italy| OWASP Italy at OpenEXP]]''' <br /> <br /> '''Sep 28 (18:00h) - [[Washington DC|Washington DC (MD) chapter meeting]]'''<br /> <br /> '''Sep 27 (11:30h) - [[San Antonio|San Antonio chapter meeting]]'''<br /> <br /> '''Sep 26-27 (08:00h) - [[Manila|OWASP Manila presenting at PhilOSC 2006]]'''<br /> <br /> '''Sep 26 (12:00h) - [[Austin|Austin OWASP chapter]]'''<br /> <br /> '''Sep 25 (17:00h) - [[New Jersey|New Jersey chapter meeting]]'''<br /> <br /> '''Sep 21 (17:30h) - [[San Francisco|San Francisco chapter meeting]]'''<br /> <br /> '''Sep 18 (18:00h) - [[Rochester|Rochester chapter meeting]]'''<br /> <br /> '''Sep 14 (18:00h) - [[Brisbane|Brisbane chapter meeting]]'''<br /> <br /> '''Sep 14 (18:00h) - [[Belgium|Belgium chapter meeting in Antwerp]]'''<br /> <br /> '''Sep 14 (18:00h) - [[Virginia (Northern Virginia)|Washington DC (N. VA) chapter meeting]] (cancelled)'''<br /> <br /> '''Sep 12 - [[Edmonton|Edmonton chapter meeting]]'''<br /> <br /> '''Sep 7 (18:30h) - [[Boston|Boston chapter meeting]]'''<br /> <br /> '''Aug 31 (15:00h) - [[Mumbai|Mumbai chapter meeting]]'''<br /> <br /> '''Aug 31 (08:00h) - [[Manila|OWASP Manila presentation at UST]]'''<br /> <br /> '''Aug 29 (11:30h) - [[Austin|Austin OWASP chapter]]'''<br /> <br /> '''Aug 24 (17:30h) - [[Brisbane|Brisbane chapter meeting]]'''<br /> <br /> '''Aug 23 (11:30h) - [[San Antonio|San Antonio chapter meeting]]'''<br /> <br /> '''Aug 19 - [[Bangalore|Bangalore chapter meeting]]'''<br /> <br /> '''Aug 17 - [[London|London chapter meeting (Central London)]]'''<br /> <br /> '''Aug 10 - [[San Jose|San Jose chapter meeting (SJ Hyatt - Airport)]]'''<br /> <br /> '''Aug 9 (18:00h) - [[Virginia (Northern Virginia)|Washington DC (N. VA) chapter meeting]]'''<br /> <br /> '''Aug 9 (18:00h) - [[Toronto|Toronto chapter meeting]]'''<br /> <br /> '''Aug 8 (18:00h) - [[Minneapolis St Paul|Minneapolis / St.Paul chapter meeting]]'''<br /> <br /> '''Aug 7 (18:30h) - [[Boston|Boston chapter meeting]]'''<br /> <br /> '''Aug 2 (19:30h) - [[OWASP/Blackhat Vegas International Meet-Up]]'''<br /> <br /> '''Jul 31 (15:00h) - [[Mumbai|Mumbai chapter meeting]]'''<br /> <br /> '''Jul 27 (12:00h) - [[Austin|Austin OWASP chapter kickoff meeting]]'''<br /> <br /> '''Jul 26 (19:15h) - [[Israel|Israel chapter meeting]]'''<br /> <br /> '''Jul 19 (12:15h) - [[Hong Kong|Hong Kong chapter meeting]]'''<br /> <br /> '''Jul 15 - [[Bangalore|Bangalore chapter meeting]]'''<br /> <br /> '''Jul 12 (18:00h) - [[Virginia (Northern Virginia)|Washington DC (N. VA) chapter meeting]]'''<br /> <br /> '''Jul 7 (18:30h) - [[Boston|Boston chapter meeting]]'''<br /> <br /> '''Jul 5 (18:00h) - [[Ottawa|Ottawa chapter meeting]]'''<br /> <br /> '''Jun 29 (18:00h) - [[San Jose|San Jose chapter meeting]]'''<br /> <br /> '''Jun 26 (15:30h) - [[BostonFinancialDist|Boston financial district chapter meeting]]'''<br /> <br /> '''Jun 24 (9:30h) - [[Mumbai|Mumbai chapter meeting]]'''<br /> <br /> '''Jun 22 (18:00h) - [[Washington DC|Washington DC (MD) chapter meeting]]'''<br /> <br /> '''Jun 21 - [[Italy|OWASP presentations at InfoSecurity 2006 (Italy)]]'''<br /> <br /> '''Jun 21 (11:30h) - [[San Antonio|San Antonio chapter meeting]]'''<br /> <br /> '''Jun 20 (18:00h) - [[Minneapolis St Paul|Minneapolis/St. Paul chapter meeting]]'''<br /> <br /> '''Jun 19 (18:00h) - [[Ottawa|Ottawa chapter meeting]]'''<br /> <br /> '''Jun 16 (16:45h) - [[Spain|Spain chapter meeting (Barcelona)]]'''<br /> <br /> '''Jun 14-16 - [http://www.nyphpcon.com NY PHP Conference]'''<br /> <br /> '''Jun 14 (18:00h) - [[Virginia (Northern Virginia)|Washington DC (N. VA) chapter meeting]]'''<br /> <br /> '''Jun 7 (18:30h) - [[Boston|Boston chapter meeting]]'''<br /> <br /> '''Jun 2 (12:00h) - [[Hong Kong|Hong Kong chapter meeting]]'''<br /> <br /> '''May 29-31 - [[AppSec Europe 2006|OWASP AppSec 2006 Europe Conference]]'''</div>

Bbertacini https://wiki.owasp.org/index.php?title=San_Jose&diff=8199 2006-07-26T16:03:11Z

<p>Bbertacini: /* Next Meeting - Thursday, June 29, 2006 */</p> <hr /> <div>{{Chapter Template|chaptername=San Jose|extra=The chapter leader is [mailto:brian.bertacini@owasp.org Brian Bertacini]|mailinglistsite=http://lists.sourceforge.net/lists/listinfo/owasp-sanjose/}}<br /> <br /> == Next Meeting - Thursday, August 10, 2006 ==<br /> Open to the public, attendance is free<br /> <br /> '''Agenda and Presentations:'''&lt;br/&gt;<br /> 6:00pm – 6:30pm Check-in and reception (food &amp; bev)&lt;br/&gt;<br /> 6:30pm – 6:40pm Chapter announcements&lt;br/&gt;<br /> 6:40pm – 8:00pm The Next Generation of Vulnerable Applications, Alex Stamos, iSec Partners &lt;br/&gt;<br /> 8:00pm – 8:30pm Open discussion &amp; Networking&lt;br/&gt;<br /> <br /> '''Venue:'''&lt;br/&gt;<br /> San Jose Hyatt (Airport)&lt;br/&gt;<br /> 1740 North First Street&lt;br/&gt;<br /> San Jose, CA 95112&lt;br/&gt;<br /> <br /> <br /> '''The Next Generation of Vulnerable Applications'''&lt;br/&gt;<br /> '''''Presented by: Alex Stamos, Founding Partner, iSEC Partners'''''&lt;br/&gt;<br /> '''Abstract:''' Web Services represent a new and unexplored set of security-sensitive technologies that have been widely deployed by large companies, governments, financial institutions, and in consumer applications. Unfortunately, the attributes that make web services attractive, such as their ease of use, platform independence, use of HTTP and powerful functionality, also make them a great target for attack. In this talk, we will explain the basic technologies (such as XML, SOAP, and UDDI) upon which web services are built, and explore the innate security weaknesses in each. We will then demonstrate new attacks that exist in web service infrastructures, and show how classic web application attacks (SQL Injection, XSS, etc…) can be retooled to work with the next-generation of enterprise applications. <br /> <br /> <br /> '''Bio:''' Alex Stamos is a founding partner of iSEC Partners - a strategic digital security organization. Alex is an experienced security engineer and consultant specializing in application security and securing large infrastructures, and has taught multiple classes in network and application security. He is a leading researcher in the field of web application and web services security and has been a featured speaker at top industry conferences such as BlackHat, DefCon, SyScan, Microsoft BlueHat and OWASP App Sec.<br /> <br /> Before he helped form iSEC Partners, Alex spent two years as a Managing Security Architect with @stake. Alex performed as a technical leader on many complex and difficult assignments, including a thorough penetration test and architectural review of a 6 million line enterprise management system, a secure re-design of a multi-thousand host ASP network, and a thorough analysis and code review of a major commercial web server. He was also one of @stake’s West Coast trainers, educating select technical audiences in advanced network and application attacks. <br /> <br /> Alex has also worked in at a DoE National Laboratory. He holds a BS in Electrical Engineering and Computer Science from the University of California, Berkeley, where he participated in research projects related to distributed secure storage and automatic C code auditing. <br /> <br /> Please RSVP to via email [mailto:brian.bertacini@owasp.org Brian Bertacini], call 408-979-0571 or visit [http://owasp.mollyguard.com OWASP.Mollyguard.com]<br /> <br /> <br /> This event is co-sponsored by [http://www.appsecconsulting.com AppSec Consulting, Inc]. and [http://www.whitehatsec.com WhiteHat Security, Inc.]</div>

Bbertacini https://wiki.owasp.org/index.php?title=OWASP_Community&diff=8198 2006-07-26T15:55:42Z

<p>Bbertacini: /* Events */</p> <hr /> <div>This page is for people to post OWASP related events, such as chapter meetings, OWASP conferences, get-togethers, and OWASP sponsored events. This page is monitored, and items will be copied to the front page.<br /> <br /> Please post new items at the top of the list using the following format:<br /> <br /> &lt;nowiki&gt;<br /> '''Mon ## (##:00h) - [[Article]]'''<br /> &lt;/nowiki&gt;<br /> <br /> &lt;!--<br /> *** Every second tuesday of the month ***<br /> '''Jun 14 (18:00h) - [[Virginia (Northern Virginia)|Washington DC (N. VA) chapter meeting]]'''<br /> <br /> --&gt;<br /> <br /> ==Events==<br /> <br /> <br /> '''Oct 16-18 - [[OWASP AppSec Seattle 2006|OWASP AppSec Seattle 2006 Conference]]'''<br /> <br /> '''Sep 25 (17:00) - [[New Jersey|New Jersey chapter meeting]]'''<br /> <br /> '''Sep 12 - [[Edmonton|Edmonton chapter meeting]]'''<br /> <br /> '''Aug 19 - [[Bangalore|Bangalore chapter meeting]]'''<br /> <br /> '''Aug 17 - [[London|London chapter meeting (Central London)]]'''<br /> <br /> '''Aug 10 - [[San Jose|San Jose chapter meeting (SJ Hyatt - Airport)]]'''<br /> <br /> '''Aug 9 (18:00h) - [[Virginia (Northern Virginia)|Washington DC (N. VA) chapter meeting]]'''<br /> <br /> '''Aug 8 (18:00h) - [[Minneapolis St Paul|Minneapolis / St.Paul chapter meeting]]'''<br /> <br /> '''Aug 2 (19:30h) - [[OWASP/Blackhat Vegas International Meet-Up]]'''<br /> <br /> '''Jul 31 (15:00h) - [[Mumbai|Mumbai chapter meeting]]'''<br /> <br /> '''Jul 27 (12:00h) - [[Austin|Austin OWASP chapter kickoff meeting]]'''<br /> <br /> '''Jul 26 (19:15h) - [[Israel|Israel chapter meeting]]'''<br /> <br /> '''Jul 19 (12:15h) - [[Hong Kong|Hong Kong chapter meeting]]'''<br /> <br /> '''Jul 15 - [[Bangalore|Bangalore chapter meeting]]'''<br /> <br /> '''Jul 12 (18:00h) - [[Virginia (Northern Virginia)|Washington DC (N. VA) chapter meeting]]'''<br /> <br /> '''Jul 5 (18:00h) - [[Ottawa|Ottawa chapter meeting]]'''<br /> <br /> '''Jun 29 (18:00h) - [[San Jose|San Jose chapter meeting]]'''<br /> <br /> '''Jun 26 (15:30h) - [[BostonFinancialDist|Boston financial district chapter meeting]]'''<br /> <br /> '''Jun 24 (9:30h) - [[Mumbai|Mumbai chapter meeting]]'''<br /> <br /> '''Jun 22 (18:00h) - [[Washington DC|Washington DC (MD) chapter meeting]]'''<br /> <br /> '''Jun 21 - [[Italy|OWASP presentations at InfoSecurity 2006 (Italy)]]'''<br /> <br /> '''Jun 21 (11:30h) - [[San Antonio|San Antonio chapter meeting]]'''<br /> <br /> '''Jun 20 (18:00h) - [[Minneapolis St Paul|Minneapolis/St. Paul chapter meeting]]'''<br /> <br /> '''Jun 19 (18:00h) - [[Ottawa|Ottawa chapter meeting]]'''<br /> <br /> '''Jun 16 (16:45h) - [[Spain|Spain chapter meeting (Barcelona)]]'''<br /> <br /> '''Jun 14-16 - [http://www.nyphpcon.com NY PHP Conference]'''<br /> <br /> '''Jun 14 (18:00h) - [[Virginia (Northern Virginia)|Washington DC (N. VA) chapter meeting]]'''<br /> <br /> '''Jun 7 (18:30h) - [[Boston|Boston chapter meeting]]'''<br /> <br /> '''Jun 2 (12:00h) - [[Hong Kong|Hong Kong chapter meeting]]'''<br /> <br /> '''May 29-31 - [[AppSec Europe 2006|OWASP AppSec 2006 Europe Conference]]'''</div>

Bbertacini https://wiki.owasp.org/index.php?title=San_Jose&diff=6982 2006-06-29T04:32:53Z

<p>Bbertacini: /* Next Meeting - Thursday, June 29, 2006 */</p> <hr /> <div>{{Chapter Template|chaptername=San Jose|extra=The chapter leader is [mailto:brian.bertacini@owasp.org Brian Bertacini]|mailinglistsite=http://lists.sourceforge.net/lists/listinfo/owasp-sanjose/}}<br /> <br /> == Next Meeting - Thursday, June 29, 2006 ==<br /> Open to the public, attendance is free<br /> <br /> '''Agenda and Presentations:'''&lt;br/&gt;<br /> 6:00pm – 6:30pm Check-in and reception (food &amp; bev)&lt;br/&gt;<br /> 6:30pm – 6:40pm Chapter announcements&lt;br/&gt;<br /> 6:40pm – 7:30pm FoRMa for Secure Software Development, Kris Kahn, Seagate Technology&lt;br/&gt;<br /> 7:35pm – 8:25pm JavaScript Attacks &amp; Intranet Applications, Jeremiah Grossman, WhiteHat Security&lt;br/&gt;<br /> 8:30pm – 9:00pm Open discussion &amp; Networking&lt;br/&gt;<br /> <br /> '''Venue:'''&lt;br/&gt;<br /> San Jose Hyatt (Airport)&lt;br/&gt;<br /> 1740 North First Street&lt;br/&gt;<br /> San Jose, CA 95112&lt;br/&gt;<br /> <br /> <br /> '''Framework of Risk Management &amp; Analysis (FoRMA) for Secure Software Development'''&lt;br/&gt;<br /> '''''Presented by: Kris Kahn, Sr. Governance Analyst, Seagate Technology'''''&lt;br/&gt;<br /> '''Abstract:''' We frequently apply Risk Management concepts in our daily lives, whether it’s driving in the rain on the freeway, or crossing a busy intersection. It comes down to making a choice, taking a calculated risk to reach our objective. We decide quickly, making assumptions about the threats and about our environment. The lessons we learn from our failures help us make wiser decisions next time, if we survive.<br /> <br /> Using a new Framework of Risk Management &amp; Analysis (FoRMA) for Secure Software Development, we will be able to make better decisions by understanding our threats. FoRMA will help us ensure that we have the appropriate level of protection to maximize our business objectives, increasing quality and minimizing cost.<br /> <br /> <br /> '''Bio:''' Kris Kahn, CISSP-ISSAP,ISSMP, CISA, OPSA, currently a Sr. Governance Analyst at Seagate Technology. Passionate about security for more than 15 years, also worked for companies in the San Francisco Bay Area that include Autodesk, and Best Internet Communications. A CISSP since 2001, his key contributions include firewall architectures, risk management models, security assessment methodologies, and security awareness training. Kris has expertise in offensive, defensive and governance facets of security.<br /> <br /> <br /> '''JavaScript Attacks and Threats to Intranet Applications'''&lt;br/&gt;<br /> '''''Presented by: Jeremiah Grossman, Founder and CTO, WhiteHat Security'''''&lt;br/&gt;<br /> '''Abstract:''' Malicious JavaScript is capable of stealing cookies, capturing keystrokes, monitoring activity and planting root kits. Attackers are using JavaScript to hijack browser sessions to commit bank fraud, hack other websites, or post derogatory comments in a public forum – all without traces, tracks or warning sirens. Web application security research is revealing that outsiders can also use these hijacked browsers to exploit intranet websites.<br /> <br /> Most assume while surfing the Web we are protected by firewalls that are isolated through private networks. We believe nothing is capable of directly connecting in from the outside world. Right? Well, not quite. Web browsers can be completely controlled by any web page, enabling them to become launching points to attack internal network resources. <br /> <br /> The web browser of every user on an enterprise network becomes a stepping stone for intruders. During this presentation we'll demonstrate a wide variety of cutting-edge web application attack techniques and describe best practices for securing websites and users against these threats.<br /> <br /> You’ll see<br /> <br /> * Port scanning and attacking intranet devices using JavaScript<br /> * Blind web server fingerprinting using unique URLs<br /> * Discovery NAT'ed IP addresses with Java Applets<br /> * Stealing web browser history with Cascading Style Sheets<br /> * Best-practice defense measures for securing websites<br /> * Essential habits for safe web surfing<br /> <br /> <br /> '''Bio:''' Jeremiah Grossman is the founder and Chief Technology Officer of WhiteHat Security and responsible for web application security R&amp;D and industry evangelism. Mr. Grossman is a frequent speaker at the Black Hat Briefings, ISSA, ISACA, NASA, and other industry events. Jeremiah been published in USA Today, VAR Business, NBC, ABC News (AU), ZDNet, eWeek, Computerworld and BetaNews. Prior to WhiteHat, Mr. Grossman served as an information security officer at Yahoo!.<br /> <br /> <br /> Please RSVP to via email [mailto:brian.bertacini@owasp.org Brian Bertacini] or call 408-979-0571<br /> <br /> <br /> This event is co-sponsored by [http://www.appsecconsulting.com AppSec Consulting, Inc]. and [http://www.whitehatsec.com WhiteHat Security, Inc.]</div>

Bbertacini https://wiki.owasp.org/index.php?title=San_Jose&diff=6981 2006-06-29T04:31:39Z

<p>Bbertacini: /* Next Meeting - Thursday, June 29, 2006 */</p> <hr /> <div>{{Chapter Template|chaptername=San Jose|extra=The chapter leader is [mailto:brian.bertacini@owasp.org Brian Bertacini]|mailinglistsite=http://lists.sourceforge.net/lists/listinfo/owasp-sanjose/}}<br /> <br /> == Next Meeting - Thursday, June 29, 2006 ==<br /> Open to the public, attendance is free<br /> <br /> '''Agenda and Presentations:'''&lt;br/&gt;<br /> 6:00pm – 6:30pm Check-in and reception (food &amp; bev)&lt;br/&gt;<br /> 6:30pm – 6:40pm Chapter announcements&lt;br/&gt;<br /> 6:40pm – 7:30pm FoRMa for Secure Software Development, Kris Kahn, Seagate Technology&lt;br/&gt;<br /> 7:35pm – 8:25pm JavaScript Attacks &amp; Intranet Applications, Jeremiah Grossman, WhiteHat Security&lt;br/&gt;<br /> 8:30pm – 9:00pm Open discussion &amp; Networking&lt;br/&gt;<br /> <br /> '''Venue:'''&lt;br/&gt;<br /> San Jose Hyatt (Airport)&lt;br/&gt;<br /> 1740 North First Street&lt;br/&gt;<br /> San Jose, CA 95112&lt;br/&gt;<br /> <br /> <br /> '''Framework of Risk Management &amp; Analysis (FoRMA) for Secure Software Development'''&lt;br/&gt;<br /> '''''Presented by: Kris Kahn, Sr. Governance Analyst, Seagate Technology'''''&lt;br/&gt;<br /> '''Abstract:''' We frequently apply Risk Management concepts in our daily lives, whether it’s driving in the rain on the freeway, or crossing a busy intersection. It comes down to making a choice, taking a calculated risk to reach our objective. We decide quickly, making assumptions about the threats and about our environment. The lessons we learn from our failures help us make wiser decisions next time, if we survive.<br /> <br /> Using a new Framework of Risk Management &amp; Analysis (FoRMA) for Secure Software Development, we will be able to make better decisions by understanding our threats. FoRMA will help us ensure that we have the appropriate level of protection to maximize our business objectives, increasing quality and minimizing cost.<br /> <br /> <br /> '''Bio:''' Kris Kahn, CISSP-ISSAP,ISSMP, CISA, OPSA, currently a Sr. Governance Analyst at Seagate Technology. Passionate about security for more than 15 years, also worked for companies in the San Francisco Bay Area that include Autodesk, and Best Internet Communications. A CISSP since 2001, his key contributions include firewall architectures, risk management models, security assessment methodologies, and security awareness training. Kris has expertise in offensive, defensive and governance facets of security.<br /> <br /> <br /> '''JavaScript Attacks and Threats to Intranet Applications'''&lt;br/&gt;<br /> '''''Presented by: Jeremiah Grossman, Founder and CTO, WhiteHat Security'''''&lt;br/&gt;<br /> '''Abstract:''' Malicious JavaScript is capable of stealing cookies, capturing keystrokes, monitoring activity and planting root kits. Attackers are using JavaScript to hijack browser sessions to commit bank fraud, hack other websites, or post derogatory comments in a public forum – all without traces, tracks or warning sirens. Web application security research is revealing that outsiders can also use these hijacked browsers to exploit intranet websites.<br /> <br /> Most assume while surfing the Web we are protected by firewalls that are isolated through private networks. We believe nothing is capable of directly connecting in from the outside world. Right? Well, not quite. Web browsers can be completely controlled by any web page, enabling them to become launching points to attack internal network resources. <br /> <br /> The web browser of every user on an enterprise network becomes a stepping stone for intruders. During this presentation we'll demonstrate a wide variety of cutting-edge web application attack techniques and describe best practices for securing websites and users against these threats.<br /> <br /> You’ll see<br /> <br /> * Port scanning and attacking intranet devices using JavaScript<br /> * Blind web server fingerprinting using unique URLs<br /> * Discovery NAT'ed IP addresses with Java Applets<br /> * Stealing web browser history with Cascading Style Sheets<br /> * Best-practice defense measures for securing websites<br /> * Essential habits for safe web surfing<br /> <br /> <br /> '''Bio:''' Jeremiah Grossman is the founder and Chief Technology Officer of WhiteHat Security and responsible for web application security R&amp;D and industry evangelism. Mr. Grossman is a frequent speaker at the Black Hat Briefings, ISSA, ISACA, NASA, and other industry events. Jeremiah been published in USA Today, VAR Business, NBC, ABC News (AU), ZDNet, eWeek, Computerworld and BetaNews. Prior to WhiteHat, Mr. Grossman served as an information security officer at Yahoo!.<br /> <br /> <br /> Please RSVP to via email [mailto://brian.bertacini@owasp.org Brian Bertacini] or call 408-979-0571<br /> <br /> <br /> This event is co-sponsored by [http://www.appsecconsulting.com AppSec Consulting, Inc]. and [http://www.whitehatsec.com WhiteHat Security, Inc.]</div>

Bbertacini https://wiki.owasp.org/index.php?title=San_Jose&diff=6501 2006-06-19T20:15:47Z

<p>Bbertacini: /* Next Meeting - Thursday, June 29, 2006 */</p> <hr /> <div>{{Chapter Template|chaptername=San Jose|leaderemail=brian.bertacini@owasp.org|leadername=Brian Bertacini|mailinglistsite=http://lists.sourceforge.net/lists/listinfo/owasp-sanjose/}}<br /> <br /> == Next Meeting - Thursday, June 29, 2006 ==<br /> Open to the public, attendance is free<br /> <br /> '''Agenda and Presentations:'''&lt;br/&gt;<br /> 6:00pm – 6:30pm Check-in and reception (food &amp; bev)&lt;br/&gt;<br /> 6:30pm – 6:40pm Chapter announcements&lt;br/&gt;<br /> 6:40pm – 7:30pm FoRMa for Secure Software Development, Kris Kahn, Seagate Technology&lt;br/&gt;<br /> 7:35pm – 8:25pm JavaScript Attacks &amp; Intranet Applications, Jeremiah Grossman, WhiteHat Security&lt;br/&gt;<br /> 8:30pm – 9:00pm Open discussion &amp; Networking&lt;br/&gt;<br /> <br /> '''Venue:'''&lt;br/&gt;<br /> San Jose Hyatt (Airport)&lt;br/&gt;<br /> 1740 North First Street&lt;br/&gt;<br /> San Jose, CA 95112&lt;br/&gt;<br /> <br /> <br /> '''Framework of Risk Management &amp; Analysis (FoRMA) for Secure Software Development'''&lt;br/&gt;<br /> '''''Presented by: Kris Kahn, Sr. Governance Analyst, Seagate Technology'''''&lt;br/&gt;<br /> '''Abstract:''' We frequently apply Risk Management concepts in our daily lives, whether it’s driving in the rain on the freeway, or crossing a busy intersection. It comes down to making a choice, taking a calculated risk to reach our objective. We decide quickly, making assumptions about the threats and about our environment. The lessons we learn from our failures help us make wiser decisions next time, if we survive.<br /> <br /> Using a new Framework of Risk Management &amp; Analysis (FoRMA) for Secure Software Development, we will be able to make better decisions by understanding our threats. FoRMA will help us ensure that we have the appropriate level of protection to maximize our business objectives, increasing quality and minimizing cost.<br /> <br /> <br /> '''Bio:''' Kris Kahn, CISSP-ISSAP,ISSMP, CISA, OPSA, currently a Sr. Governance Analyst at Seagate Technology. Passionate about security for more than 15 years, also worked for companies in the San Francisco Bay Area that include Autodesk, and Best Internet Communications. A CISSP since 2001, his key contributions include firewall architectures, risk management models, security assessment methodologies, and security awareness training. Kris has expertise in offensive, defensive and governance facets of security.<br /> <br /> <br /> '''JavaScript Attacks and Threats to Intranet Applications'''&lt;br/&gt;<br /> '''''Presented by: Jeremiah Grossman, Founder and CTO, WhiteHat Security'''''&lt;br/&gt;<br /> '''Abstract:''' Malicious JavaScript is capable of stealing cookies, capturing keystrokes, monitoring activity and planting root kits. Attackers are using JavaScript to hijack browser sessions to commit bank fraud, hack other websites, or post derogatory comments in a public forum – all without traces, tracks or warning sirens. Web application security research is revealing that outsiders can also use these hijacked browsers to exploit intranet websites.<br /> <br /> Most assume while surfing the Web we are protected by firewalls that are isolated through private networks. We believe nothing is capable of directly connecting in from the outside world. Right? Well, not quite. Web browsers can be completely controlled by any web page, enabling them to become launching points to attack internal network resources. <br /> <br /> The web browser of every user on an enterprise network becomes a stepping stone for intruders. During this presentation we'll demonstrate a wide variety of cutting-edge web application attack techniques and describe best practices for securing websites and users against these threats.<br /> <br /> You’ll see<br /> <br /> * Port scanning and attacking intranet devices using JavaScript<br /> * Blind web server fingerprinting using unique URLs<br /> * Discovery NAT'ed IP addresses with Java Applets<br /> * Stealing web browser history with Cascading Style Sheets<br /> * Best-practice defense measures for securing websites<br /> * Essential habits for safe web surfing<br /> <br /> <br /> '''Bio:''' Jeremiah Grossman is the founder and Chief Technology Officer of WhiteHat Security and responsible for web application security R&amp;D and industry evangelism. Mr. Grossman is a frequent speaker at the Black Hat Briefings, ISSA, ISACA, NASA, and other industry events. Jeremiah been published in USA Today, VAR Business, NBC, ABC News (AU), ZDNet, eWeek, Computerworld and BetaNews. Prior to WhiteHat, Mr. Grossman served as an information security officer at Yahoo!.<br /> <br /> <br /> Please RSVP to via email [brian.bertacini@owasp.org] or call 408-979-0571<br /> <br /> <br /> This event is co-sponsored by AppSec Consulting, Inc. and WhiteHat Security, Inc.</div>

Bbertacini https://wiki.owasp.org/index.php?title=San_Jose&diff=6496 2006-06-19T15:48:43Z

<p>Bbertacini: /* '''Next Meeting - Thursday, June 29, 2006''' */</p> <hr /> <div>{{Chapter Template|chaptername=San Jose|leaderemail=brian.bertacini@owasp.org|leadername=Brian Bertacini|mailinglistsite=http://lists.sourceforge.net/lists/listinfo/owasp-sanjose/}}<br /> <br /> == Next Meeting - Thursday, June 29, 2006 ==<br /> Open to the public, attendance is free<br /> <br /> '''Agenda and Presentations:'''&lt;br/&gt;<br /> 6:00pm – 6:30pm Check-in and reception (food &amp; bev)&lt;br/&gt;<br /> 6:30pm – 6:40pm Chapter announcements&lt;br/&gt;<br /> 6:40pm – 7:30pm FoRMa for Secure Software Development, Kris Kahn, Seagate Technology&lt;br/&gt;<br /> 7:35pm – 8:25pm JavaScript Attacks &amp; Intranet Applications, Jeremiah Grossman, WhiteHat Security&lt;br/&gt;<br /> 8:30pm – 9:00pm Open discussion &amp; Networking&lt;br/&gt;<br /> <br /> '''Venue:'''&lt;br/&gt;<br /> San Jose Hyatt (Airport)&lt;br/&gt;<br /> 1740 North First Street&lt;br/&gt;<br /> San Jose, CA 95112&lt;br/&gt;<br /> <br /> <br /> '''Framework of Risk Management &amp; Analysis (FoRMA) for Secure Software Development'''&lt;br/&gt;<br /> '''''Presented by: Kris Kahn, Sr. Governance Analyst, Seagate Technology'''''&lt;br/&gt;<br /> '''Abstract:''' We frequently apply Risk Management concepts in our daily lives, whether it’s driving in the rain on the freeway, or crossing a busy intersection. It comes down to making a choice, taking a calculated risk to reach our objective. We decide quickly, making assumptions about the threats and about our environment. The lessons we learn from our failures help us make wiser decisions next time, if we survive.<br /> <br /> Using a new Framework of Risk Management &amp; Analysis (FoRMA) for Secure Software Development, we will be able to make better decisions by understanding our threats. FoRMA will help us ensure that we have the appropriate level of protection to maximize our business objectives, increasing quality and minimizing cost.<br /> <br /> <br /> '''Bio:''' Kris Kahn, CISSP-ISSAP,ISSMP, CISA, OPSA, currently a Sr. Governance Analyst at Seagate Technology. Passionate about security for more than 15 years, also worked for companies in the San Francisco Bay Area that include Autodesk, and Best Internet Communications. A CISSP since 2001, his key contributions include firewall architectures, risk management models, security assessment methodologies, and security awareness training. Kris has expertise in offensive, defensive and governance facets of security.<br /> <br /> <br /> <br /> <br /> Please RSVP to via email [brian.bertacini@owasp.org] or call 408-979-0571<br /> <br /> <br /> This event is co-sponsored by AppSec Consulting, Inc. and WhiteHat Security, Inc.</div>

Bbertacini https://wiki.owasp.org/index.php?title=San_Jose&diff=6495 2006-06-19T15:47:27Z

<p>Bbertacini: /* '''Next Meeting - Thursday, June 29, 2006''' */</p> <hr /> <div>{{Chapter Template|chaptername=San Jose|leaderemail=brian.bertacini@owasp.org|leadername=Brian Bertacini|mailinglistsite=http://lists.sourceforge.net/lists/listinfo/owasp-sanjose/}}<br /> <br /> === '''Next Meeting - Thursday, June 29, 2006''' ===<br /> Open to the public, attendance is free<br /> <br /> '''Agenda and Presentations:'''&lt;br/&gt;<br /> 6:00pm – 6:30pm Check-in and reception (food &amp; bev)&lt;br/&gt;<br /> 6:30pm – 6:40pm Chapter announcements&lt;br/&gt;<br /> 6:40pm – 7:30pm FoRMa for Secure Software Development, Kris Kahn, Seagate Technology&lt;br/&gt;<br /> 7:35pm – 8:25pm JavaScript Attacks &amp; Intranet Applications, Jeremiah Grossman, WhiteHat Security&lt;br/&gt;<br /> 8:30pm – 9:00pm Open discussion &amp; Networking&lt;br/&gt;<br /> <br /> '''Venue:'''&lt;br/&gt;<br /> San Jose Hyatt (Airport)&lt;br/&gt;<br /> 1740 North First Street&lt;br/&gt;<br /> San Jose, CA 95112&lt;br/&gt;<br /> <br /> <br /> '''Framework of Risk Management &amp; Analysis (FoRMA) for Secure Software Development'''&lt;br/&gt;<br /> '''''Presented by: Kris Kahn, Sr. Governance Analyst, Seagate Technology'''''&lt;br/&gt;<br /> '''Abstract:''' We frequently apply Risk Management concepts in our daily lives, whether it’s driving in the rain on the freeway, or crossing a busy intersection. It comes down to making a choice, taking a calculated risk to reach our objective. We decide quickly, making assumptions about the threats and about our environment. The lessons we learn from our failures help us make wiser decisions next time, if we survive.<br /> <br /> Using a new Framework of Risk Management &amp; Analysis (FoRMA) for Secure Software Development, we will be able to make better decisions by understanding our threats. FoRMA will help us ensure that we have the appropriate level of protection to maximize our business objectives, increasing quality and minimizing cost.<br /> <br /> <br /> '''Bio:''' Kris Kahn, CISSP-ISSAP,ISSMP, CISA, OPSA, currently a Sr. Governance Analyst at Seagate Technology. Passionate about security for more than 15 years, also worked for companies in the San Francisco Bay Area that include Autodesk, and Best Internet Communications. A CISSP since 2001, his key contributions include firewall architectures, risk management models, security assessment methodologies, and security awareness training. Kris has expertise in offensive, defensive and governance facets of security.<br /> <br /> <br /> <br /> <br /> Please RSVP to via email [brian.bertacini@owasp.org] or call 408-979-0571<br /> <br /> <br /> This event is co-sponsored by AppSec Consulting, Inc. and WhiteHat Security, Inc.</div>

Bbertacini https://wiki.owasp.org/index.php?title=San_Jose&diff=6494 2006-06-19T15:43:24Z

<p>Bbertacini: /* Local News */</p> <hr /> <div>{{Chapter Template|chaptername=San Jose|leaderemail=brian.bertacini@owasp.org|leadername=Brian Bertacini|mailinglistsite=http://lists.sourceforge.net/lists/listinfo/owasp-sanjose/}}<br /> <br /> == '''Next Meeting - Thursday, June 29, 2006''' ==<br /> Open to the public, attendance is free<br /> <br /> '''Agenda and Presentations:'''&lt;br/&gt;<br /> 6:00pm – 6:30pm Check-in and reception (food &amp; bev)&lt;br/&gt;<br /> 6:30pm – 6:40pm Chapter announcements&lt;br/&gt;<br /> 6:40pm – 7:30pm FoRMa for Secure Software Development, Kris Kahn, Seagate Technology&lt;br/&gt;<br /> 7:35pm – 8:25pm JavaScript Attacks &amp; Intranet Applications, Jeremiah Grossman, WhiteHat Security&lt;br/&gt;<br /> 8:30pm – 9:00pm Open discussion &amp; Networking&lt;br/&gt;<br /> <br /> '''Venue:'''&lt;br/&gt;<br /> San Jose Hyatt (Airport)&lt;br/&gt;<br /> 1740 North First Street&lt;br/&gt;<br /> San Jose, CA 95112&lt;br/&gt;<br /> <br /> <br /> '''Framework of Risk Management &amp; Analysis (FoRMA) for Secure Software Development'''&lt;br/&gt;<br /> '''''Presented by: Kris Kahn, Sr. Governance Analyst, Seagate Technology'''''&lt;br/&gt;<br /> '''Abstract:''' We frequently apply Risk Management concepts in our daily lives, whether it’s driving in the rain on the freeway, or crossing a busy intersection. It comes down to making a choice, taking a calculated risk to reach our objective. We decide quickly, making assumptions about the threats and about our environment. The lessons we learn from our failures help us make wiser decisions next time, if we survive.<br /> <br /> Using a new Framework of Risk Management &amp; Analysis (FoRMA) for Secure Software Development, we will be able to make better decisions by understanding our threats. FoRMA will help us ensure that we have the appropriate level of protection to maximize our business objectives, increasing quality and minimizing cost.<br /> <br /> <br /> '''Bio:''' Kris Kahn, CISSP-ISSAP,ISSMP, CISA, OPSA, currently a Sr. Governance Analyst at Seagate Technology. Passionate about security for more than 15 years, also worked for companies in the San Francisco Bay Area that include Autodesk, and Best Internet Communications. A CISSP since 2001, his key contributions include firewall architectures, risk management models, security assessment methodologies, and security awareness training. Kris has expertise in offensive, defensive and governance facets of security.<br /> <br /> <br /> <br /> <br /> Please RSVP to via email [brian.bertacini@owasp.org] or call 408-979-0571<br /> <br /> <br /> This event is co-sponsored by AppSec Consulting, Inc. and WhiteHat Security, Inc.</div>

Bbertacini