https://wiki.owasp.org/api.php?action=feedcontributions&feedformat=atom&user=Craig+Klosterman 2026-05-16T23:39:50Z User contributions MediaWiki 1.27.2 https://wiki.owasp.org/index.php?title=Denver&diff=162839 2013-11-07T23:29:57Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Steve Kosten. |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> == Local News ==<br /> ===THANK YOU TO OUR SPONSORS===<br /> [[File:SS_SolutionsII.jpg]]<br /> <br /> A big thank you to [http://www.southseascorp.com/ South Seas, a division of Solutions II] for sponsoring all catering for our 2013 monthly chapter meetings!! It is much appreciated!<br /> <br /> South Seas is now a division of Solutions II, providing our Clients an even better experience! Solutions II, founded in 1992, is nationally recognized for their world class innovation in Virtualization, Business Continuance and Data Lifecycle Management. Solutions II assists Clients in leveraging technologies and services to drive the cost out of IT. Their experience in IT solutions will make this a seamless transition.<br /> <br /> <br /> ==Next Chapter Meeting: November 20th at Chinook Tavern==<br /> 6380 South Fiddlers Green Circle <br /> Denver, CO 80122<br /> <br /> RSVP at: http://www.meetup.com/Denver-OWASP/events/149764742/?a=ea1_grp&amp;rv=ea1<br /> <br /> or at: http://www.eventbrite.com/org/4542128885?s=19431483<br /> <br /> Food and Chapter Business starting at 6, presentation starting at about 6:30.<br /> <br /> Guest Speaker: Joe Gerber<br /> Joe will be talking with us about security and HTML 5.<br /> <br /> <br /> '''About the chapter:'''<br /> Chapter Meetings are held the 3rd Wednesday of designated months for the Denver Chapter, and the 3rd Thursday of designated months for the [[Boulder|Boulder]] Chapter. If you have an idea for a topic or speaker or would like to present, please<br /> reach out to Steve Kosten, Denver OWASP Chapter Leader: steve 'dot' kosten 'at' owasp.org<br /> <br /> <br /> '''Thanks to [http://www.ccaurora.edu/ Community College Aurora ] a[http://universitycollege.du.edu/ict/degree/masters/information-systems-security-online/degreeid/402/The University of Denver] for hosting us, [http://www.southseascorp.com/ South Seas Corporation] for providing food for our meetings...'''<br /> <br /> <br /> Future meetings are planned for September and November.<br /> <br /> ==Chapter Board of Directors==<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Steve Kosten<br /> * Director of Communications - Craig Klosterman<br /> * Comm Vice-Director - Alan Darien<br /> <br /> NOTE: PLEASE CONSIDER FOLLOWING US AT @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST] AND/OR join the OWASP Denver Linked In group.<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> &lt;!-- =====Wassup Boulder=====<br /> Boulder has built a strong chapter over the past 3 years. Any individuals up north of Denver have a great resource. We hope to share some resources and communication with the Boulder chapter. If you're interested in meeting with the Boulder chapter please let us know! <br /> --&gt;<br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Steve Kosten, Denver OWASP: steve 'dot' kosten 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> Meetings are usually the 3rd Wednesday of the month. We are trying to have at least 2/quarter. If you can't make the Denver meeting, the [[Boulder|Boulder]] meeting is usually the 3rd Thursday of the month.<br /> <br /> == Future Meetings == <br /> <br /> Meetings are planned for the 3rd Wednesdays of September and October. We may do a social event or two also...<br /> <br /> <br /> &lt;!-- 5 March 28 2013: SnowFROC 2013 --&gt;<br /> <br /> == Past Meetings ==<br /> [[Denver_July_2013|Jim Manico: &quot;Secure Coding Techniques Part 2&quot;]]<br /> <br /> [[Denver_June_2013|Aaron Cure: &quot;Less Frequently talked about vulnerabilities&quot;]]<br /> <br /> [[Denver_April_2013|Matt Schufeldt: &quot;Security in the SDLC&quot;]]<br /> <br /> [[Denver_March_2013|Jim Manico: &quot;Secure Coding Techniques&quot;]]<br /> <br /> [[Denver_February_2013|Chris Roberts: &quot;The Evolution of Hacking&quot;]]<br /> <br /> [[Denver_January_2013|Dave Ferguson: &quot;Building a Successful Application Security Program&quot;]]<br /> <br /> [[Denver_June_2012|Laz: Emerging Threats]]<br /> <br /> [[Denver May 2012 meeting|Steve Kosten: XSS hands-on]]<br /> <br /> [[Denver April 2012 meeting|April 18th 2012: Tim Van Cleave &quot;Intro to WebScarab and WebGoat&quot;]]<br /> <br /> [[Denver February 2012 meeting|February 15th 2012: Andy Lewis &quot;Why OWASP? OWASP is the wheel. You don't need to reinvent it!]]<br /> <br /> Denver January 2012 meeting January 18th, 2012| Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Steve Kosten, Denver OWASP: steve.kosten 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> <br /> [[FROC Schedule|SnowFROC 2013 ]]<br /> * http://www.meetup.com/Denver-OWASP/<br /> <br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=156952 2013-08-17T16:00:57Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Steve Kosten. |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> == Local News ==<br /> ===THANK YOU TO OUR SPONSORS===<br /> [[File:DenverCateringSponsor2013SouthSeas.jpg]]<br /> <br /> A big thank you to [http://www.southseascorp.com/ South Seas Corporation] for sponsoring all catering for our 2013 monthly chapter meetings!! It is much appreciated!<br /> <br /> <br /> ==Next Chapter Meeting: Sept 18th at Chinook Tavern==<br /> 6380 South Fiddlers Green Circle <br /> Denver, CO 80122<br /> <br /> RSVP at: http://www.meetup.com/Denver-OWASP/events/135102292/<br /> <br /> or at: http://www.eventbrite.com/event/7929311785<br /> <br /> Food and Chapter Business starting at 6, presentation starting at about 6:30.<br /> <br /> Guest Speaker: Bill Jackson<br /> Bill has been a software engineer with Raytheon for 15 years. He has worked as the secure coding lead for the GPS-OCX program, and has helped define and implement secure coding processes and practices for several other programs. His other presentation topic include Java EE, Agile software development, concurrency, and user interface design.<br /> <br /> His certifications include a CISSP and CompTIA Security+<br /> <br /> Bill has an MS in computer science from the University of Colorado at Denver and a BS from Colorado State University.<br /> <br /> <br /> <br /> <br /> '''About the chapter:'''<br /> Chapter Meetings are held the 3rd Wednesday of designated months for the Denver Chapter, and the 3rd Thursday of designated months for the [[Boulder|Boulder]] Chapter. If you have an idea for a topic or speaker or would like to present, please<br /> reach out to Steve Kosten, Denver OWASP Chapter Leader: steve 'dot' kosten 'at' owasp.org<br /> <br /> <br /> '''Thanks to [http://www.ccaurora.edu/ Community College Aurora ] a[http://universitycollege.du.edu/ict/degree/masters/information-systems-security-online/degreeid/402/The University of Denver] for hosting us, [http://www.southseascorp.com/ South Seas Corporation] for providing food for our meetings...'''<br /> <br /> <br /> Future meetings are planned for September and November.<br /> <br /> ==Chapter Board of Directors==<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Steve Kosten<br /> * Director of Communications - Craig Klosterman<br /> * Comm Vice-Director - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Micah Tapman<br /> * FROC Chair Emeritus - Kathy Thaxton<br /> <br /> NOTE: PLEASE CONSIDER FOLLOWING US AT @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST] AND/OR join the OWASP Denver Linked In group.<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> &lt;!-- =====Wassup Boulder=====<br /> Boulder has built a strong chapter over the past 3 years. Any individuals up north of Denver have a great resource. We hope to share some resources and communication with the Boulder chapter. If you're interested in meeting with the Boulder chapter please let us know! <br /> --&gt;<br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Steve Kosten, Denver OWASP: steve 'dot' kosten 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> Meetings are usually the 3rd Wednesday of the month. We are trying to have at least 2/quarter. If you can't make the Denver meeting, the [[Boulder|Boulder]] meeting is usually the 3rd Thursday of the month.<br /> <br /> == Future Meetings == <br /> <br /> Meetings are planned for the 3rd Wednesdays of September and October. We may do a social event or two also...<br /> <br /> <br /> &lt;!-- 5 March 28 2013: SnowFROC 2013 --&gt;<br /> <br /> == Past Meetings ==<br /> [[Denver_July_2013|Jim Manico: &quot;Secure Coding Techniques Part 2&quot;]]<br /> <br /> [[Denver_June_2013|Aaron Cure: &quot;Less Frequently talked about vulnerabilities&quot;]]<br /> <br /> [[Denver_April_2013|Matt Schufeldt: &quot;Security in the SDLC&quot;]]<br /> <br /> [[Denver_March_2013|Jim Manico: &quot;Secure Coding Techniques&quot;]]<br /> <br /> [[Denver_February_2013|Chris Roberts: &quot;The Evolution of Hacking&quot;]]<br /> <br /> [[Denver_January_2013|Dave Ferguson: &quot;Building a Successful Application Security Program&quot;]]<br /> <br /> [[Denver_June_2012|Laz: Emerging Threats]]<br /> <br /> [[Denver May 2012 meeting|Steve Kosten: XSS hands-on]]<br /> <br /> [[Denver April 2012 meeting|April 18th 2012: Tim Van Cleave &quot;Intro to WebScarab and WebGoat&quot;]]<br /> <br /> [[Denver February 2012 meeting|February 15th 2012: Andy Lewis &quot;Why OWASP? OWASP is the wheel. You don't need to reinvent it!]]<br /> <br /> Denver January 2012 meeting January 18th, 2012| Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Steve Kosten, Denver OWASP: steve.kosten 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> <br /> [[FROC Schedule|SnowFROC 2013 ]]<br /> * http://www.meetup.com/Denver-OWASP/<br /> <br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver_July_2013&diff=156951 2013-08-17T15:14:49Z

<p>Craig Klosterman: Created page with &quot;Speaker:Jim Manico: Secure coding Part 2 Click here for to see Jims slides. http://www.meetup.com/Denver-OWASP/files/&quot;</p> <hr /> <div>Speaker:Jim Manico: Secure coding Part 2<br /> Click here for to see Jims slides. http://www.meetup.com/Denver-OWASP/files/</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=156950 2013-08-17T15:13:19Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Steve Kosten. |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> == Local News ==<br /> ===THANK YOU TO OUR SPONSORS===<br /> [[File:DenverCateringSponsor2013SouthSeas.jpg]]<br /> <br /> A big thank you to [http://www.southseascorp.com/ South Seas Corporation] for sponsoring all catering for our 2013 monthly chapter meetings!! It is much appreciated!<br /> <br /> <br /> ==Next Chapter Meeting: Sept 18th at Chinook Tavern==<br /> 6380 South Fiddlers Green Circle <br /> Denver, CO 80122<br /> <br /> RSVP at: http://www.meetup.com/Denver-OWASP/events/135102292/<br /> <br /> or at: <br /> <br /> Food and Chapter Business starting at 6, presentation starting at about 6:30.<br /> <br /> Guest Speaker: Bill Jackson<br /> Bill has been a software engineer with Raytheon for 15 years. He has worked as the secure coding lead for the GPS-OCX program, and has helped define and implement secure coding processes and practices for several other programs. His other presentation topic include Java EE, Agile software development, concurrency, and user interface design.<br /> <br /> His certifications include a CISSP and CompTIA Security+<br /> <br /> Bill has an MS in computer science from the University of Colorado at Denver and a BS from Colorado State University.<br /> <br /> <br /> <br /> <br /> '''About the chapter:'''<br /> Chapter Meetings are held the 3rd Wednesday of designated months for the Denver Chapter, and the 3rd Thursday of designated months for the [[Boulder|Boulder]] Chapter. If you have an idea for a topic or speaker or would like to present, please<br /> reach out to Steve Kosten, Denver OWASP Chapter Leader: steve 'dot' kosten 'at' owasp.org<br /> <br /> <br /> '''Thanks to [http://www.ccaurora.edu/ Community College Aurora ] a[http://universitycollege.du.edu/ict/degree/masters/information-systems-security-online/degreeid/402/The University of Denver] for hosting us, [http://www.southseascorp.com/ South Seas Corporation] for providing food for our meetings...'''<br /> <br /> <br /> Future meetings are planned for September and November.<br /> <br /> ==Chapter Board of Directors==<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Steve Kosten<br /> * Director of Communications - Craig Klosterman<br /> * Comm Vice-Director - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Micah Tapman<br /> * FROC Chair Emeritus - Kathy Thaxton<br /> <br /> NOTE: PLEASE CONSIDER FOLLOWING US AT @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST] AND/OR join the OWASP Denver Linked In group.<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> &lt;!-- =====Wassup Boulder=====<br /> Boulder has built a strong chapter over the past 3 years. Any individuals up north of Denver have a great resource. We hope to share some resources and communication with the Boulder chapter. If you're interested in meeting with the Boulder chapter please let us know! <br /> --&gt;<br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Steve Kosten, Denver OWASP: steve 'dot' kosten 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> Meetings are usually the 3rd Wednesday of the month. We are trying to have at least 2/quarter. If you can't make the Denver meeting, the [[Boulder|Boulder]] meeting is usually the 3rd Thursday of the month.<br /> <br /> == Future Meetings == <br /> <br /> Meetings are planned for the 3rd Wednesdays of September and October. We may do a social event or two also...<br /> <br /> <br /> &lt;!-- 5 March 28 2013: SnowFROC 2013 --&gt;<br /> <br /> == Past Meetings ==<br /> [[Denver_July_2013|Jim Manico: &quot;Secure Coding Techniques Part 2&quot;]]<br /> <br /> [[Denver_June_2013|Aaron Cure: &quot;Less Frequently talked about vulnerabilities&quot;]]<br /> <br /> [[Denver_April_2013|Matt Schufeldt: &quot;Security in the SDLC&quot;]]<br /> <br /> [[Denver_March_2013|Jim Manico: &quot;Secure Coding Techniques&quot;]]<br /> <br /> [[Denver_February_2013|Chris Roberts: &quot;The Evolution of Hacking&quot;]]<br /> <br /> [[Denver_January_2013|Dave Ferguson: &quot;Building a Successful Application Security Program&quot;]]<br /> <br /> [[Denver_June_2012|Laz: Emerging Threats]]<br /> <br /> [[Denver May 2012 meeting|Steve Kosten: XSS hands-on]]<br /> <br /> [[Denver April 2012 meeting|April 18th 2012: Tim Van Cleave &quot;Intro to WebScarab and WebGoat&quot;]]<br /> <br /> [[Denver February 2012 meeting|February 15th 2012: Andy Lewis &quot;Why OWASP? OWASP is the wheel. You don't need to reinvent it!]]<br /> <br /> Denver January 2012 meeting January 18th, 2012| Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Steve Kosten, Denver OWASP: steve.kosten 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> <br /> [[FROC Schedule|SnowFROC 2013 ]]<br /> * http://www.meetup.com/Denver-OWASP/<br /> <br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=156949 2013-08-17T15:09:43Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Steve Kosten. |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> == Local News ==<br /> ===THANK YOU TO OUR SPONSORS===<br /> [[File:DenverCateringSponsor2013SouthSeas.jpg]]<br /> <br /> A big thank you to [http://www.southseascorp.com/ South Seas Corporation] for sponsoring all catering for our 2013 monthly chapter meetings!! It is much appreciated!<br /> <br /> <br /> ==Next Chapter Meeting: Sept 18th at Chinook Tavern==<br /> 6380 South Fiddlers Green Circle <br /> Denver, CO 80122<br /> <br /> RSVP at: http://www.meetup.com/Denver-OWASP/events/135102292/<br /> <br /> or at: <br /> <br /> Food and Chapter Business starting at 6, presentation starting at about 6:30.<br /> <br /> Guest Speaker: Bill Jackson<br /> Bill has been a software engineer with Raytheon for 15 years. He has worked as the secure coding lead for the GPS-OCX program, and has helped define and implement secure coding processes and practices for several other programs. His other presentation topic include Java EE, Agile software development, concurrency, and user interface design.<br /> <br /> His certifications include a CISSP and CompTIA Security+<br /> <br /> Bill has an MS in computer science from the University of Colorado at Denver and a BS from Colorado State University.<br /> <br /> <br /> <br /> <br /> '''About the chapter:'''<br /> Chapter Meetings are held the 3rd Wednesday of designated months for the Denver Chapter, and the 3rd Thursday of designated months for the [[Boulder|Boulder]] Chapter. If you have an idea for a topic or speaker or would like to present, please<br /> reach out to Steve Kosten, Denver OWASP Chapter Leader: steve 'dot' kosten 'at' owasp.org<br /> <br /> <br /> '''Thanks to [http://www.ccaurora.edu/ Community College Aurora ] a[http://universitycollege.du.edu/ict/degree/masters/information-systems-security-online/degreeid/402/The University of Denver] for hosting us, [http://www.southseascorp.com/ South Seas Corporation] for providing food for our meetings...'''<br /> <br /> <br /> Future meetings are planned for September and November.<br /> <br /> ==Chapter Board of Directors==<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Steve Kosten<br /> * Director of Communications - Craig Klosterman<br /> * Comm Vice-Director - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Micah Tapman<br /> * FROC Chair Emeritus - Kathy Thaxton<br /> <br /> NOTE: PLEASE CONSIDER FOLLOWING US AT @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST] AND/OR join the OWASP Denver Linked In group.<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> &lt;!-- =====Wassup Boulder=====<br /> Boulder has built a strong chapter over the past 2 years. Any individuals up north of Denver have a great resource. We hope to share some resources and communication with the Boulder chapter. If you're interested in meeting with the Boulder chapter please let us know! <br /> --&gt;<br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Steve Kosten, Denver OWASP: steve 'dot' kosten 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> Meetings are usually the 3rd Wednesday of the month. We are trying to have at least 2/quarter. If you can't make the Denver meeting, the [[Boulder|Boulder]] meeting is usually the 3rd Thursday of the month.<br /> <br /> == Future Meetings == <br /> <br /> Meetings are planned for the 3rd Wednesdays of September and October. We may do a social event or two also...<br /> <br /> <br /> &lt;!-- 5 March 28 2013: SnowFROC 2013 --&gt;<br /> <br /> == Past Meetings ==<br /> [[Denver_July_2013|Jim Manico: &quot;Secure Coding Techniques Part 2&quot;]]<br /> <br /> [[Denver_June_2013|Aaron Cure: &quot;Less Frequently talked about vulnerabilities&quot;]]<br /> <br /> [[Denver_April_2013|Matt Schufeldt: &quot;Security in the SDLC&quot;]]<br /> <br /> [[Denver_March_2013|Jim Manico: &quot;Secure Coding Techniques&quot;]]<br /> <br /> [[Denver_February_2013|Chris Roberts: &quot;The Evolution of Hacking&quot;]]<br /> <br /> [[Denver_January_2013|Dave Ferguson: &quot;Building a Successful Application Security Program&quot;]]<br /> <br /> [[Denver_June_2012|Laz: Emerging Threats]]<br /> <br /> [[Denver May 2012 meeting|Steve Kosten: XSS hands-on]]<br /> <br /> [[Denver April 2012 meeting|April 18th 2012: Tim Van Cleave &quot;Intro to WebScarab and WebGoat&quot;]]<br /> <br /> [[Denver February 2012 meeting|February 15th 2012: Andy Lewis &quot;Why OWASP? OWASP is the wheel. You don't need to reinvent it!]]<br /> <br /> Denver January 2012 meeting January 18th, 2012| Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Steve Kosten, Denver OWASP: steve.kosten 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> <br /> [[FROC Schedule|SnowFROC 2013 ]]<br /> * http://www.meetup.com/Denver-OWASP/<br /> <br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver_June_2013&diff=155185 2013-07-05T22:21:46Z

<p>Craig Klosterman: Created page with &quot;Speaker:Aron Cure Topic: Less Frequantly talked about vulnerabilities Click here for to see Aarons slides. http://www.meetup.com/Denver-OWASP/files/&quot;</p> <hr /> <div>Speaker:Aron Cure Topic: Less Frequantly talked about vulnerabilities<br /> <br /> Click here for to see Aarons slides. <br /> http://www.meetup.com/Denver-OWASP/files/</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=155184 2013-07-05T22:10:46Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Steve Kosten. |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> == Local News ==<br /> ===THANK YOU TO OUR SPONSORS===<br /> [[File:DenverCateringSponsor2013SouthSeas.jpg]]<br /> <br /> A big thank you to [http://www.southseascorp.com/ South Seas Corporation] for sponsoring all catering for our 2013 monthly chapter meetings!! It is much appreciated!<br /> <br /> <br /> ==Next Chapter Meeting: Jul 17th at Chinook Tavern==<br /> 6380 South Fiddlers Green Circle <br /> Denver, CO 80122<br /> <br /> RSVP at: http://www.meetup.com/Denver-OWASP/events/127370252/<br /> <br /> or at: http://www.meetup.com/Denver-OWASP/events/127370252/<br /> <br /> Food and Chapter Business starting at 6, presentation starting at about 6:30.<br /> <br /> Guest Speaker: Jim Manico (VP Security Architecture at WhiteHat Security and Global OWASP board member)<br /> <br /> <br /> Topic: Secure Development round 2 (building on and exploring more than his earlier presentation)<br /> <br /> <br /> <br /> <br /> '''About the chapter:'''<br /> Chapter Meetings are held the 3rd Wednesday of designated months for the Denver Chapter, and the 3rd Thursday of designated months for the [[Boulder|Boulder]] Chapter. If you have an idea for a topic or speaker or would like to present, please<br /> reach out to Steve Kosten, Denver OWASP Chapter Leader: steve 'dot' kosten 'at' owasp.org<br /> <br /> <br /> '''Thanks to [http://www.ccaurora.edu/ Community College Aurora ] a[http://universitycollege.du.edu/ict/degree/masters/information-systems-security-online/degreeid/402/The University of Denver] for hosting us, [http://www.southseascorp.com/ South Seas Corporation] for providing food for our meetings...'''<br /> <br /> <br /> Future meetings are planned for July, September and November.<br /> <br /> ==Chapter Board of Directors==<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Steve Kosten<br /> * Director of Communications - Craig Klosterman<br /> * Comm Vice-Director - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Micah Tapman<br /> * FROC Chair Emeritus - Kathy Thaxton<br /> <br /> NOTE: PLEASE CONSIDER FOLLOWING US AT @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST] AND/OR join the OWASP Denver Linked In group.<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> &lt;!-- =====Wassup Boulder=====<br /> Boulder has built a strong chapter over the past 2 years. Any individuals up north of Denver have a great resource. We hope to share some resources and communication with the Boulder chapter. If you're interested in meeting with the Boulder chapter please let us know! <br /> --&gt;<br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Steve Kosten, Denver OWASP: steve 'dot' kosten 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> Meetings are usually the 3rd Wednesday of the month. We are trying to have at least 2/quarter. If you can't make the Denver meeting, the [[Boulder|Boulder]] meeting is usually the 3rd Thursday of the month.<br /> <br /> == Future Meetings == <br /> <br /> Meetings are planned for the 3rd Wednesdays of September and October. We may do a social event or two also...<br /> <br /> <br /> &lt;!-- 5 March 28 2013: SnowFROC 2013 --&gt;<br /> <br /> == Past Meetings ==<br /> [[Denver_June_2013|Aaron Cure: &quot;Less Frequently talked about vulnerabilities&quot;]]<br /> <br /> [[Denver_April_2013|Matt Schufeldt: &quot;Security in the SDLC&quot;]]<br /> <br /> [[Denver_March_2013|Jim Manico: &quot;Secure Coding Techniques&quot;]]<br /> <br /> [[Denver_February_2013|Chris Roberts: &quot;The Evolution of Hacking&quot;]]<br /> <br /> [[Denver_January_2013|Dave Ferguson: &quot;Building a Successful Application Security Program&quot;]]<br /> <br /> [[Denver_June_2012|Laz: Emerging Threats]]<br /> <br /> [[Denver May 2012 meeting|Steve Kosten: XSS hands-on]]<br /> <br /> [[Denver April 2012 meeting|April 18th 2012: Tim Van Cleave &quot;Intro to WebScarab and WebGoat&quot;]]<br /> <br /> [[Denver February 2012 meeting|February 15th 2012: Andy Lewis &quot;Why OWASP? OWASP is the wheel. You don't need to reinvent it!]]<br /> <br /> Denver January 2012 meeting January 18th, 2012| Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Steve Kosten, Denver OWASP: steve.kosten 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> <br /> [[FROC Schedule|SnowFROC 2013 ]]<br /> * http://www.meetup.com/Denver-OWASP/<br /> <br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=151286 2013-05-10T13:04:23Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Steve Kosten. |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> == Local News ==<br /> ===THANK YOU TO OUR SPONSORS===<br /> [[File:DenverCateringSponsor2013SouthSeas.jpg]]<br /> <br /> A big thank you to [http://www.southseascorp.com/ South Seas Corporation] for sponsoring all catering for our 2013 monthly chapter meetings!! It is much appreciated!<br /> <br /> ===Next Chapter Meeting: June 19th at Denver University <br /> <br /> Food and Chapter Business starting at 6, presentation starting at about 6:30.<br /> <br /> <br /> '''Topic: Look for the details'''<br /> <br /> <br /> Thanks to Matt Shufeldt he had a great presentation on security in the SDLC looking at different models and what has worked and not worked. Matt is the Director of Information Security at Sports Authority and it was excellent to hear his lessons learned!<br /> <br /> <br /> '''About the chapter:'''<br /> Chapter Meetings are held the 3rd Wednesday of designated months for the Denver Chapter, and the 3rd Thursday of designated months for the [[Boulder|Boulder]] Chapter. If you have an idea for a topic or speaker or would like to present, please<br /> reach out to Steve Kosten, Denver OWASP Chapter Leader: steve 'dot' kosten 'at' owasp.org<br /> <br /> &lt;!-- June 20th at 6'ish at Hosting. [http://www.eventbrite.com/org/371792456 RSVP HERE ] so we can order the right # of pizzas --&gt;<br /> <br /> '''Thanks to [http://www.ccaurora.edu/ Community College Aurora ] for hosting us, [http://www.southseascorp.com/ South Seas Corporation] for providing food for our meetings and thanks to [http://veracode.com Veracode] for providing a speaker for this meeting...'''<br /> <br /> <br /> Future meetings are planned for: stay tuned for 2013.<br /> <br /> ==Chapter Board of Directors==<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Steve Kosten<br /> * Director of Communications - Craig Klosterman<br /> * Comm Vice-Director - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Micah Tapman<br /> * FROC Chair Emeritus - Kathy Thaxton<br /> <br /> NOTE: PLEASE CONSIDER FOLLOWING US AT @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST] AND/OR join the OWASP Denver Linked In group.<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> &lt;!-- =====Wassup Boulder=====<br /> Boulder has built a strong chapter over the past 2 years. Any individuals up north of Denver have a great resource. We hope to share some resources and communication with the Boulder chapter. If you're interested in meeting with the Boulder chapter please let us know! <br /> --&gt;<br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Steve Kosten, Denver OWASP: steve 'dot' kosten 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> Meetings are usually the 3rd Wednesday of the month. We are trying to have at least 2/quarter. If you can't make the Denver meeting, the [[Boulder|Boulder]] meeting is usually the 3rd Thursday of the month.<br /> <br /> == Future Meetings == <br /> <br /> Meetings are planned for the 3rd Wednesdays of September and October. We may do a social event or two also...<br /> <br /> <br /> &lt;!-- 5 March 28 2013: SnowFROC 2013 --&gt;<br /> <br /> == Past Meetings ==<br /> [[Denver_April_2013|Matt Schufeldt: &quot;Security in the SDLC&quot;]]<br /> <br /> [[Denver_March_2013|Jim Manico: &quot;Secure Coding Techniques&quot;]]<br /> <br /> [[Denver_February_2013|Chris Roberts: &quot;The Evolution of Hacking&quot;]]<br /> <br /> [[Denver_January_2013|Dave Ferguson: &quot;Building a Successful Application Security Program&quot;]]<br /> <br /> [[Denver_June_2012|Laz: Emerging Threats]]<br /> <br /> [[Denver May 2012 meeting|Steve Kosten: XSS hands-on]]<br /> <br /> [[Denver April 2012 meeting|April 18th 2012: Tim Van Cleave &quot;Intro to WebScarab and WebGoat&quot;]]<br /> <br /> [[Denver February 2012 meeting|February 15th 2012: Andy Lewis &quot;Why OWASP? OWASP is the wheel. You don't need to reinvent it!]]<br /> <br /> Denver January 2012 meeting January 18th, 2012| Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Steve Kosten, Denver OWASP: steve.kosten 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> <br /> [[FROC Schedule|SnowFROC 2013 ]]<br /> * http://www.meetup.com/Denver-OWASP/<br /> <br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver_April_2013&diff=150139 2013-04-19T15:15:25Z

<p>Craig Klosterman: </p> <hr /> <div>Speaker:Matt Shufeldt<br /> Topic: Security in the SDLC<br /> <br /> Click here for to see Matt's slides. [http://www.meetup.com/Denver-OWASP/files/ Meetup]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver_March_2013&diff=150138 2013-04-19T15:14:47Z

<p>Craig Klosterman: </p> <hr /> <div>Speaker:Jim Manico <br /> Topic: Writing secure code<br /> <br /> Click here for to see Jim's slides. [http://www.meetup.com/Denver-OWASP/files/ Meetup]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver_March_2013&diff=150137 2013-04-19T15:14:15Z

<p>Craig Klosterman: </p> <hr /> <div>Speaker:Jim Manico <br /> Topic: Writing secure code<br /> <br /> Click here for to see Jim's slides. [http://www.meetup.com/Denver-OWASP/files/]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver_April_2013&diff=150136 2013-04-19T15:10:42Z

<p>Craig Klosterman: Created page with &quot;Speaker:Matt Shufeldt Topic: Security in the SDLC Click here for to see Matt's slides. [http://www.meetup.com/Denver-OWASP/events/2808802/ Meetup]&quot;</p> <hr /> <div>Speaker:Matt Shufeldt<br /> Topic: Security in the SDLC<br /> <br /> Click here for to see Matt's slides. [http://www.meetup.com/Denver-OWASP/events/2808802/ Meetup]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver_March_2013&diff=150135 2013-04-19T15:07:22Z

<p>Craig Klosterman: Created page with &quot;Speaker:Jim Manico Topic: Writing secure code Click here for to see Jim's slides. [http://www.meetup.com/Denver-OWASP/events/2808802/ Meetup]&quot;</p> <hr /> <div>Speaker:Jim Manico <br /> Topic: Writing secure code<br /> <br /> Click here for to see Jim's slides. [http://www.meetup.com/Denver-OWASP/events/2808802/ Meetup]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=150134 2013-04-19T14:57:58Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Steve Kosten. |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> == Local News ==<br /> ===THANK YOU TO OUR SPONSORS===<br /> [[File:DenverCateringSponsor2013SouthSeas.jpg]]<br /> <br /> A big thank you to [http://www.southseascorp.com/ South Seas Corporation] for sponsoring all catering for our 2013 monthly chapter meetings!! It is much appreciated!<br /> <br /> ===Next Chapter Meeting: April 17th at CCA Lowery [ http://1304denverowasp.eventbrite.com/# RSVP Now!!! ] ===<br /> <br /> Food and Chapter Business starting at 6, presentation starting at about 6:30.<br /> <br /> [ http://1304denverowasp.eventbrite.com/# RSVP]<br /> <br /> '''Topic: Security in the SDLC'''<br /> <br /> <br /> This month we welcome Matt Shufeldt who will be presenting on security in the SDLC looking at different models and what has worked and not worked. Matt is the Director of Information Security at Sports Authority and we look forward to hearing of his lessons learned!<br /> <br /> <br /> '''About the chapter:'''<br /> Chapter Meetings are held the 3rd Wednesday of designated months for the Denver Chapter, and the 3rd Thursday of designated months for the [[Boulder|Boulder]] Chapter. If you have an idea for a topic or speaker or would like to present, please<br /> reach out to Steve Kosten, Denver OWASP Chapter Leader: steve 'dot' kosten 'at' owasp.org<br /> <br /> &lt;!-- June 20th at 6'ish at Hosting. [http://www.eventbrite.com/org/371792456 RSVP HERE ] so we can order the right # of pizzas --&gt;<br /> <br /> '''Thanks to [http://www.ccaurora.edu/ Community College Aurora ] for hosting us, [http://www.southseascorp.com/ South Seas Corporation] for providing food for our meetings and thanks to [http://veracode.com Veracode] for providing a speaker for this meeting...'''<br /> <br /> <br /> Future meetings are planned for: stay tuned for 2013.<br /> <br /> ==Chapter Board of Directors==<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Steve Kosten<br /> * Director of Communications - Craig Klosterman<br /> * Comm Vice-Director - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Micah Tapman<br /> * FROC Chair Emeritus - Kathy Thaxton<br /> <br /> NOTE: PLEASE CONSIDER FOLLOWING US AT @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST] AND/OR join the OWASP Denver Linked In group.<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> &lt;!-- =====Wassup Boulder=====<br /> Boulder has built a strong chapter over the past 2 years. Any individuals up north of Denver have a great resource. We hope to share some resources and communication with the Boulder chapter. If you're interested in meeting with the Boulder chapter please let us know! <br /> --&gt;<br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Steve Kosten, Denver OWASP: steve 'dot' kosten 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> Meetings are usually the 3rd Wednesday of the month. We are trying to have at least 2/quarter. If you can't make the Denver meeting, the [[Boulder|Boulder]] meeting is usually the 3rd Thursday of the month.<br /> <br /> == Future Meetings == <br /> <br /> Meetings are planned for the 3rd Wednesdays of September and October. We may do a social event or two also...<br /> <br /> <br /> &lt;!-- 5 March 28 2013: SnowFROC 2013 --&gt;<br /> <br /> == Past Meetings ==<br /> [[Denver_April_2013|Matt Schufeldt: &quot;Security in the SDLC&quot;]]<br /> <br /> [[Denver_March_2013|Jim Manico: &quot;Secure Coding Techniques&quot;]]<br /> <br /> [[Denver_February_2013|Chris Roberts: &quot;The Evolution of Hacking&quot;]]<br /> <br /> [[Denver_January_2013| Dave Ferguson: Securing Your Code]]<br /> <br /> [[Denver_June_2012|Laz: Emerging Threats]]<br /> <br /> [[Denver May 2012 meeting|Steve Kosten: XSS hands-on]]<br /> <br /> [[Denver April 2012 meeting|April 18th 2012: Tim Van Cleave &quot;Intro to WebScarab and WebGoat&quot;]]<br /> <br /> [[Denver February 2012 meeting|February 15th 2012: Andy Lewis &quot;Why OWASP? OWASP is the wheel. You don't need to reinvent it!]]<br /> <br /> Denver January 2012 meeting January 18th, 2012| Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Steve Kosten, Denver OWASP: steve.kosten 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> <br /> [[FROC Schedule|SnowFROC 2013 ]]<br /> * http://www.meetup.com/Denver-OWASP/<br /> <br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=150133 2013-04-19T14:54:27Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Steve Kosten. |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> == Local News ==<br /> ===THANK YOU TO OUR SPONSORS===<br /> [[File:DenverCateringSponsor2013SouthSeas.jpg]]<br /> <br /> A big thank you to [http://www.southseascorp.com/ South Seas Corporation] for sponsoring all catering for our 2013 monthly chapter meetings!! It is much appreciated!<br /> <br /> ===Next Chapter Meeting: April 17th at CCA Lowery [ http://1304denverowasp.eventbrite.com/# RSVP Now!!! ] ===<br /> <br /> Food and Chapter Business starting at 6, presentation starting at about 6:30.<br /> <br /> [ http://1304denverowasp.eventbrite.com/# RSVP]<br /> <br /> '''Topic: Security in the SDLC'''<br /> <br /> <br /> This month we welcome Matt Shufeldt who will be presenting on security in the SDLC looking at different models and what has worked and not worked. Matt is the Director of Information Security at Sports Authority and we look forward to hearing of his lessons learned!<br /> <br /> <br /> '''About the chapter:'''<br /> Chapter Meetings are held the 3rd Wednesday of designated months for the Denver Chapter, and the 3rd Thursday of designated months for the [[Boulder|Boulder]] Chapter. If you have an idea for a topic or speaker or would like to present, please<br /> reach out to Steve Kosten, Denver OWASP Chapter Leader: steve 'dot' kosten 'at' owasp.org<br /> <br /> &lt;!-- June 20th at 6'ish at Hosting. [http://www.eventbrite.com/org/371792456 RSVP HERE ] so we can order the right # of pizzas --&gt;<br /> <br /> '''Thanks to [http://www.ccaurora.edu/ Community College Aurora ] for hosting us, [http://www.southseascorp.com/ South Seas Corporation] for providing food for our meetings and thanks to [http://veracode.com Veracode] for providing a speaker for this meeting...'''<br /> <br /> <br /> Future meetings are planned for: stay tuned for 2013.<br /> <br /> ==Chapter Board of Directors==<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Steve Kosten<br /> * Director of Communications - Craig Klosterman<br /> * Comm Vice-Director - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Micah Tapman<br /> * FROC Chair Emeritus - Kathy Thaxton<br /> <br /> NOTE: PLEASE CONSIDER FOLLOWING US AT @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST] AND/OR join the OWASP Denver Linked In group.<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> &lt;!-- =====Wassup Boulder=====<br /> Boulder has built a strong chapter over the past 2 years. Any individuals up north of Denver have a great resource. We hope to share some resources and communication with the Boulder chapter. If you're interested in meeting with the Boulder chapter please let us know! <br /> --&gt;<br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Steve Kosten, Denver OWASP: steve 'dot' kosten 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> Meetings are usually the 3rd Wednesday of the month. We are trying to have at least 2/quarter. If you can't make the Denver meeting, the [[Boulder|Boulder]] meeting is usually the 3rd Thursday of the month.<br /> <br /> == Future Meetings == <br /> <br /> Meetings are planned for the 3rd Wednesdays of September and October. We may do a social event or two also...<br /> <br /> <br /> &lt;!-- 5 March 28 2013: SnowFROC 2013 --&gt;<br /> <br /> == Past Meetings ==<br /> [[Denver_April_2013|Matt Schufeldt: &quot;Security in the SDLC&quot;]<br /> <br /> [[Denver_March_2013|Jim Manico: &quot;Secure Coding Techniques&quot;]]<br /> <br /> [[Denver_February_2013|Chris Roberts: &quot;The Evolution of Hacking&quot;]]<br /> <br /> [[Denver_January_2013| Dave Ferguson: Securing Your Code]]<br /> <br /> [[Denver_June_2012|Laz: Emerging Threats]]<br /> <br /> [[Denver May 2012 meeting|Steve Kosten: XSS hands-on]]<br /> <br /> [[Denver April 2012 meeting|April 18th 2012: Tim Van Cleave &quot;Intro to WebScarab and WebGoat&quot;]]<br /> <br /> [[Denver February 2012 meeting|February 15th 2012: Andy Lewis &quot;Why OWASP? OWASP is the wheel. You don't need to reinvent it!]]<br /> <br /> Denver January 2012 meeting January 18th, 2012| Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Steve Kosten, Denver OWASP: steve.kosten 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> <br /> [[FROC Schedule|SnowFROC 2013 ]]<br /> * http://www.meetup.com/Denver-OWASP/<br /> <br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=149576 2013-04-10T15:02:33Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Steve Kosten. |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> == Local News ==<br /> ===THANK YOU TO OUR SPONSORS===<br /> [[File:DenverCateringSponsor2013SouthSeas.jpg]]<br /> <br /> A big thank you to [http://www.southseascorp.com/ South Seas Corporation] for sponsoring all catering for our 2013 monthly chapter meetings!! It is much appreciated!<br /> <br /> ===Next Chapter Meeting: April 17th at CCA Lowery [ http://1304denverowasp.eventbrite.com/# RSVP Now!!! ] ===<br /> <br /> Food and Chapter Business starting at 6, presentation starting at about 6:30.<br /> <br /> [ http://1304denverowasp.eventbrite.com/# RSVP]<br /> <br /> '''Topic: Security in the SDLC'''<br /> <br /> <br /> This month we welcome Matt Shufeldt who will be presenting on security in the SDLC looking at different models and what has worked and not worked. Matt is the Director of Information Security at Sports Authority and we look forward to hearing of his lessons learned!<br /> <br /> <br /> '''About the chapter:'''<br /> Chapter Meetings are held the 3rd Wednesday of designated months for the Denver Chapter, and the 3rd Thursday of designated months for the [[Boulder|Boulder]] Chapter. If you have an idea for a topic or speaker or would like to present, please<br /> reach out to Steve Kosten, Denver OWASP Chapter Leader: steve 'dot' kosten 'at' owasp.org<br /> <br /> &lt;!-- June 20th at 6'ish at Hosting. [http://www.eventbrite.com/org/371792456 RSVP HERE ] so we can order the right # of pizzas --&gt;<br /> <br /> '''Thanks to [http://www.ccaurora.edu/ Community College Aurora ] for hosting us, [http://www.southseascorp.com/ South Seas Corporation] for providing food for our meetings and thanks to [http://veracode.com Veracode] for providing a speaker for this meeting...'''<br /> <br /> <br /> Future meetings are planned for: stay tuned for 2013.<br /> <br /> ==Chapter Board of Directors==<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Steve Kosten<br /> * Director of Communications - Craig Klosterman<br /> * Comm Vice-Director - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Micah Tapman<br /> * FROC Chair Emeritus - Kathy Thaxton<br /> <br /> NOTE: PLEASE CONSIDER FOLLOWING US AT @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST] AND/OR join the OWASP Denver Linked In group.<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> &lt;!-- =====Wassup Boulder=====<br /> Boulder has built a strong chapter over the past 2 years. Any individuals up north of Denver have a great resource. We hope to share some resources and communication with the Boulder chapter. If you're interested in meeting with the Boulder chapter please let us know! <br /> --&gt;<br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Steve Kosten, Denver OWASP: steve 'dot' kosten 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> Meetings are usually the 3rd Wednesday of the month. We are trying to have at least 2/quarter. If you can't make the Denver meeting, the [[Boulder|Boulder]] meeting is usually the 3rd Thursday of the month.<br /> <br /> == Future Meetings == <br /> <br /> Meetings are planned for the 3rd Wednesdays of September and October. We may do a social event or two also...<br /> <br /> <br /> &lt;!-- 5 March 28 2013: SnowFROC 2013 --&gt;<br /> <br /> == Past Meetings ==<br /> [[Denver_March_2013|Jim Manico: &quot;Secure Coding Techniques&quot;]]<br /> <br /> [[Denver_February_2013|Chris Roberts: &quot;The Evolution of Hacking&quot;]]<br /> <br /> [[Denver_January_2013| Dave Ferguson: Securing Your Code]]<br /> <br /> [[Denver_June_2012|Laz: Emerging Threats]]<br /> <br /> [[Denver May 2012 meeting|Steve Kosten: XSS hands-on]]<br /> <br /> [[Denver April 2012 meeting|April 18th 2012: Tim Van Cleave &quot;Intro to WebScarab and WebGoat&quot;]]<br /> <br /> [[Denver February 2012 meeting|February 15th 2012: Andy Lewis &quot;Why OWASP? OWASP is the wheel. You don't need to reinvent it!]]<br /> <br /> Denver January 2012 meeting January 18th, 2012| Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Steve Kosten, Denver OWASP: steve.kosten 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> <br /> [[FROC Schedule|SnowFROC 2013 ]]<br /> * http://www.meetup.com/Denver-OWASP/<br /> <br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=FROC_Schedule&diff=147571 2013-03-11T20:56:44Z

<p>Craig Klosterman: Created page with &quot; Front Range OWASP Conference Join 300+ developers, security professionals, and cyber security industry leaders for a day-and-a-half of world-class presentations, hacking com...&quot;</p> <hr /> <div><br /> Front Range OWASP Conference<br /> <br /> Join 300+ developers, security professionals, and cyber security industry leaders for a day-and-a-half of world-class presentations, hacking competitions, expert training, and collaborative Birds of a Feather sessions.<br /> <br /> SnowFROC 2013 offers four tracks designed to tackle cyber security from all angles: technical, deep-dive, management, and legal. For the hands-on crowd, a capture the flag hacking tournament will run in parallel to conference proceedings.<br /> <br /> The keynote speaker will be Neal Ziring, Technical Director of Information Protection, NSA.<br /> <br /> <br /> <br /> When<br /> Conference proceedings: Thursday, March 28, 2013<br /> Training and Birds of a Feather: Friday, March 29, 2013<br /> <br /> Where<br /> <br /> Attendee Registration<br /> Non-Member Registration $115.00<br /> (One year of OWASP membership is included in the cost)<br /> <br /> OWASP Member Registration $65.00<br /> (Register using the email address associated with your membership)<br /> <br /> Student Registration $35.00<br /> (An active student ID or transcript is required)<br /> <br /> Event Registration <br /> Additional SnowFROC Information<br /> <br /> Come for the conference, stay for the winter sports.<br /> <br /> <br /> <br /> Please respond by clicking one of the options below<br /> <br /> https://www.cvent.com/events/front-range-owasp-conference/registration-e25b04af59c84f4db33f51fb4fb6f5ec.aspx<br /> <br /> https://www.cvent.com/events/front-range-owasp-conference/regret-survey-e25b04af59c84f4db33f51fb4fb6f5ec.aspx?rc=18313587-d688-4340-aa82-34a81d18b080</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=147570 2013-03-11T20:53:40Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Steve Kosten. |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> == Local News ==<br /> ===THANK YOU TO OUR SPONSORS===<br /> [[File:DenverCateringSponsor2013SouthSeas.jpg]]<br /> <br /> A big thank you to [http://www.southseascorp.com/ South Seas Corporation] for sponsoring all catering for our 2013 monthly chapter meetings!! It is much appreciated!<br /> <br /> ===Next Chapter Meeting: March 20th at CCA Lowery [ http://1303owaspdenver.eventbrite.com/# RSVP Now!!! ] ===<br /> <br /> Food and Chapter Business starting at 6, presentation starting at about 6:30.<br /> <br /> [ http://1303owaspdenver.eventbrite.com/# RSVP]<br /> <br /> '''Topic: secure coding techniques'''<br /> <br /> <br /> This month we welcome Jim Manico who will be presenting on secure coding techniques. Jim is a global board member for the OWASP organization and VP of Security Architecture at WhiteHat Security. It is our understanding that some giveaways will be presented to some lucky attendees. <br /> <br /> <br /> '''About the chapter:'''<br /> Chapter Meetings are held the 3rd Wednesday of designated months for the Denver Chapter, and the 3rd Thursday of designated months for the [[Boulder|Boulder]] Chapter. If you have an idea for a topic or speaker or would like to present, please<br /> reach out to Steve Kosten, Denver OWASP Chapter Leader: steve 'dot' kosten 'at' owasp.org<br /> <br /> &lt;!-- June 20th at 6'ish at Hosting. [http://www.eventbrite.com/org/371792456 RSVP HERE ] so we can order the right # of pizzas --&gt;<br /> <br /> '''Thanks to [http://www.ccaurora.edu/ Community College Aurora ] for hosting us, [http://www.southseascorp.com/ South Seas Corporation] for providing food for our meetings and thanks to [http://veracode.com Veracode] for providing a speaker for this meeting...'''<br /> <br /> <br /> Future meetings are planned for: stay tuned for 2013.<br /> <br /> ==Chapter Board of Directors==<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Steve Kosten<br /> * Director of Communications - Craig Klosterman<br /> * Comm Vice-Director - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Micah Tapman<br /> * FROC Chair Emeritus - Kathy Thaxton<br /> <br /> NOTE: PLEASE CONSIDER FOLLOWING US AT @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST] AND/OR join the OWASP Denver Linked In group.<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> &lt;!-- =====Wassup Boulder=====<br /> Boulder is in the process of putting together new leadership. We hope to share some resources and communication with the Boulder chapter. If you're interested in working with the Boulder chapter please let us know! More to come...<br /> --&gt;<br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Steve Kosten, Denver OWASP: steve 'dot' kosten 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> Meetings are usually the 3rd Wednesday of the month. We are trying to have at least 2/quarter. If you can't make the Denver meeting, the [[Boulder|Boulder]] meeting is usually the 3rd Thursday of the month.<br /> <br /> == Future Meetings == <br /> <br /> Meetings are planned for the 3rd Wednesdays of September and October. We may do a social event or two also...<br /> <br /> <br /> &lt;!-- 5 March 28 2013: SnowFROC 2013 --&gt;<br /> <br /> == Past Meetings ==<br /> [[Denver_February_2013|Chris Roberts: &quot;The Evolution of Hacking&quot;]]<br /> <br /> [[Denver_January_2013| Dave Ferguson: Securing Your Code]]<br /> <br /> [[Denver_June_2012|Laz: Emerging Threats]]<br /> <br /> [[Denver May 2012 meeting|Steve Kosten: XSS hands-on]]<br /> <br /> [[Denver April 2012 meeting|April 18th 2012: Tim Van Cleave &quot;Intro to WebScarab and WebGoat&quot;]]<br /> <br /> [[Denver February 2012 meeting|February 15th 2012: Andy Lewis &quot;Why OWASP? OWASP is the wheel. You don't need to reinvent it!]]<br /> <br /> Denver January 2012 meeting January 18th, 2012| Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Steve Kosten, Denver OWASP: steve.kosten 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> <br /> [[FROC Schedule|SnowFROC 2013 ]]<br /> * http://www.meetup.com/Denver-OWASP/<br /> <br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver_February_2013&diff=147567 2013-03-11T20:40:25Z

<p>Craig Klosterman: Created page with &quot;Speaker:Chris Roberts Founder and CISO of One World Labs Topic: The Evolution of Hacking Click here for Chris' slides. [http://www.meetup.com/Denver-OWASP/events/105012802/ M...&quot;</p> <hr /> <div>Speaker:Chris Roberts Founder and CISO of One World Labs<br /> Topic: The Evolution of Hacking<br /> <br /> Click here for Chris' slides. [http://www.meetup.com/Denver-OWASP/events/105012802/ Meetup]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=147563 2013-03-11T20:25:28Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Steve Kosten. |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> == Local News ==<br /> ===THANK YOU TO OUR SPONSORS===<br /> [[File:DenverCateringSponsor2013SouthSeas.jpg]]<br /> <br /> A big thank you to [http://www.southseascorp.com/ South Seas Corporation] for sponsoring all catering for our 2013 monthly chapter meetings!! It is much appreciated!<br /> <br /> ===Next Chapter Meeting: March 20th at CCA Lowery [ http://1303owaspdenver.eventbrite.com/# RSVP Now!!! ] ===<br /> <br /> Food and Chapter Business starting at 6, presentation starting at about 6:30.<br /> <br /> [ http://1303owaspdenver.eventbrite.com/# RSVP]<br /> <br /> '''Topic: secure coding techniques'''<br /> <br /> <br /> This month we welcome Jim Manico who will be presenting on secure coding techniques. Jim is a global board member for the OWASP organization and VP of Security Architecture at WhiteHat Security. It is our understanding that some giveaways will be presented to some lucky attendees. <br /> <br /> <br /> '''About the chapter:'''<br /> Chapter Meetings are held the 3rd Wednesday of designated months for the Denver Chapter, and the 3rd Thursday of designated months for the [[Boulder|Boulder]] Chapter. If you have an idea for a topic or speaker or would like to present, please<br /> reach out to Steve Kosten, Denver OWASP Chapter Leader: steve 'dot' kosten 'at' owasp.org<br /> <br /> &lt;!-- June 20th at 6'ish at Hosting. [http://www.eventbrite.com/org/371792456 RSVP HERE ] so we can order the right # of pizzas --&gt;<br /> <br /> '''Thanks to [http://www.hosting.com/ Hosting.com] for hosting us, [http://www.southseascorp.com/ South Seas Corporation] for providing food for our meetings and thanks to [http://veracode.com Veracode] for providing a speaker for this meeting...'''<br /> <br /> <br /> Future meetings are planned for: stay tuned for 2013.<br /> <br /> ==Chapter Board of Directors==<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Steve Kosten<br /> * Director of Communications - Craig Klosterman<br /> * Comm Vice-Director - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Micah Tapman<br /> * FROC Chair Emeritus - Kathy Thaxton<br /> <br /> NOTE: PLEASE CONSIDER FOLLOWING US AT @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST] AND/OR join the OWASP Denver Linked In group.<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> &lt;!-- =====Wassup Boulder=====<br /> Boulder is in the process of putting together new leadership. We hope to share some resources and communication with the Boulder chapter. If you're interested in working with the Boulder chapter please let us know! More to come...<br /> --&gt;<br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Steve Kosten, Denver OWASP: steve 'dot' kosten 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> Meetings are usually the 3rd Wednesday of the month. We are trying to have at least 2/quarter. If you can't make the Denver meeting, the [[Boulder|Boulder]] meeting is usually the 3rd Thursday of the month.<br /> <br /> == Future Meetings == <br /> <br /> Meetings are planned for the 3rd Wednesdays of September and October. We may do a social event or two also...<br /> <br /> <br /> &lt;!-- 5 March 28 2013: SnowFROC 2013 --&gt;<br /> <br /> == Past Meetings ==<br /> [[Denver_February_2013|Chris Roberts: &quot;The Evolution of Hacking&quot;]]<br /> <br /> [[Denver_January_2013| Dave Ferguson: Securing Your Code]]<br /> <br /> [[Denver_June_2012|Laz: Emerging Threats]]<br /> <br /> [[Denver May 2012 meeting|Steve Kosten: XSS hands-on]]<br /> <br /> [[Denver April 2012 meeting|April 18th 2012: Tim Van Cleave &quot;Intro to WebScarab and WebGoat&quot;]]<br /> <br /> [[Denver February 2012 meeting|February 15th 2012: Andy Lewis &quot;Why OWASP? OWASP is the wheel. You don't need to reinvent it!]]<br /> <br /> Denver January 2012 meeting January 18th, 2012| Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Steve Kosten, Denver OWASP: steve.kosten 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> <br /> [[FROC Schedule|SnowFROC 2013 ]]<br /> * http://www.meetup.com/Denver-OWASP/<br /> <br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=147560 2013-03-11T20:21:52Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Steve Kosten. |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> == Local News ==<br /> ===THANK YOU TO OUR SPONSORS===<br /> [[File:DenverCateringSponsor2013SouthSeas.jpg]]<br /> <br /> A big thank you to [http://www.southseascorp.com/ South Seas Corporation] for sponsoring all catering for our 2013 monthly chapter meetings!! It is much appreciated!<br /> <br /> ===Next Chapter Meeting: March 20th at CCA Lowery [ http://1303owaspdenver.eventbrite.com/# RSVP Now!!! ] ===<br /> <br /> Food and Chapter Business starting at 6, presentation starting at about 6:30.<br /> <br /> [ http://1303owaspdenver.eventbrite.com/# RSVP]<br /> <br /> '''Topic: secure coding techniques'''<br /> <br /> <br /> This month we welcome Jim Manico who will be presenting on secure coding techniques. Jim is a global board member for the OWASP organization and VP of Security Architecture at WhiteHat Security. It is our understanding that some giveaways will be presented to some lucky attendees. <br /> <br /> <br /> '''About the chapter:'''<br /> Chapter Meetings are held the 3rd Wednesday of designated months for the Denver Chapter, and the 3rd Thursday of designated months for the [[Boulder|Boulder]] Chapter. If you have an idea for a topic or speaker or would like to present, please<br /> reach out to Steve Kosten, Denver OWASP Chapter Leader: steve 'dot' kosten 'at' owasp.org<br /> <br /> &lt;!-- June 20th at 6'ish at Hosting. [http://www.eventbrite.com/org/371792456 RSVP HERE ] so we can order the right # of pizzas --&gt;<br /> <br /> '''Thanks to [http://www.hosting.com/ Hosting.com] for hosting us, [http://www.southseascorp.com/ South Seas Corporation] for providing food for our meetings and thanks to [http://veracode.com Veracode] for providing a speaker for this meeting...'''<br /> <br /> <br /> Future meetings are planned for: stay tuned for 2013.<br /> <br /> ==Chapter Board of Directors==<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Steve Kosten<br /> * Director of Communications - Craig Klosterman<br /> * Comm Vice-Director - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Micah Tapman<br /> * FROC Chair Emeritus - Kathy Thaxton<br /> <br /> NOTE: PLEASE CONSIDER FOLLOWING US AT @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST] AND/OR join the OWASP Denver Linked In group.<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> &lt;!-- =====Wassup Boulder=====<br /> Boulder is in the process of putting together new leadership. We hope to share some resources and communication with the Boulder chapter. If you're interested in working with the Boulder chapter please let us know! More to come...<br /> --&gt;<br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Steve Kosten, Denver OWASP: steve 'dot' kosten 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> Meetings are usually the 3rd Wednesday of the month. We are trying to have at least 2/quarter. If you can't make the Denver meeting, the [[Boulder|Boulder]] meeting is usually the 3rd Thursday of the month.<br /> <br /> == Future Meetings == <br /> <br /> Meetings are planned for the 3rd Wednesdays of September and October. We may do a social event or two also...<br /> <br /> <br /> &lt;!-- 5 March 28 2013: SnowFROC 2013 --&gt;<br /> <br /> == Past Meetings ==<br /> [[Denver_February_2013|Chris Roberts: &quot;The Evolution of Hacking&quot;]]<br /> <br /> [[Denver_January_2013| Dave Ferguson: Securing Your Code]]<br /> <br /> [[Denver_June_2012|Laz: Emerging Threats]]<br /> <br /> [[Denver May 2012 meeting|Steve Kosten: XSS hands-on]]<br /> <br /> [[Denver April 2012 meeting|April 18th 2012: Tim Van Cleave &quot;Intro to WebScarab and WebGoat&quot;]]<br /> <br /> [[Denver February 2012 meeting|February 15th 2012: Andy Lewis &quot;Why OWASP? OWASP is the wheel. You don't need to reinvent it!]]<br /> <br /> Denver January 2012 meeting January 18th, 2012| Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Steve Kosten, Denver OWASP: steve.kosten 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> <br /> [[FROC Schedule Draft|SnowFROC 2012 Schedule Draft]]<br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=124817 2012-02-21T23:18:51Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Andy Lewis (many thanks to David Campbell for past leadership). |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> ==== Local News ====<br /> <br /> =====Next Chapter Meeting: [http://snowfroc2012.eventbrite.com RSVP Now!]=====<br /> Front Range OWASP Conference: March 22nd, 2012: SnowFROC<br /> <br /> * [http://snowfroc2012.eventbrite.com/ RSVP Now!]<br /> <br /> ====New Chapter Board of Directors!====<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Andy Lewis<br /> * Vice Chairman - Steve Kosten<br /> * Communications Chairman - Craig Klosterman<br /> * Comm Vice-Chair - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Kathy Thaxton<br /> <br /> NOTE: THIS WIKI IS USUALLY TERRIBLY OUT OF DATE. PLEASE FOLLOW @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST]<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> =====Wassup Boulder=====<br /> Boulder is in the process of putting together new leadership. We hope to share some resources and communication with the Boulder chapter. If you're interested in working with the Boulder chapter please let us know! More to come...<br /> <br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> <br /> == Future Meetings == <br /> <br /> [https://www.owasp.org/index.php/Front_Range_OWASP_Conference_2012 SNOWFROC 2012 ] March 22d at the Tivoli!<br /> <br /> [Denver April 2012 meeting] - stay tuned...<br /> <br /> <br /> <br /> &lt;!-- 5 May 2011: SnowFROC 2011 followed by B-Sides &quot;SkiSides&quot;. Details TBD --&gt;<br /> <br /> == Past Meetings ==<br /> [Denver February 2012 meeting|February 15th 2012: Andy Lewis &quot;Why OWASP? OWASP is the wheel. You don't need to reinvent it!]<br /> <br /> [Denver January 2012 meeting January 18th, 2012| Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=124816 2012-02-21T23:16:02Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Andy Lewis (many thanks to David Campbell for past leadership). |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> ==== Local News ====<br /> <br /> =====Next Chapter Meeting: [http://snowfroc2012.eventbrite.com RSVP Now!]=====<br /> Front Range OWASP Conference: March 22nd, 2012: SnoFROC<br /> <br /> * [http://snowfroc2012.eventbrite.com/ RSVP Now!]<br /> <br /> ====New Chapter Board of Directors!====<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Andy Lewis<br /> * Vice Chairman - Steve Kosten<br /> * Communications Chairman - Craig Klosterman<br /> * Comm Vice-Chair - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Kathy Thaxton<br /> <br /> NOTE: THIS WIKI IS USUALLY TERRIBLY OUT OF DATE. PLEASE FOLLOW @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST]<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> =====Wassup Boulder=====<br /> Boulder is in the process of putting together new leadership. We hope to share some resources and communication with the Boulder chapter. If you're interested in working with the Boulder chapter please let us know! More to come...<br /> <br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> <br /> == Future Meetings == <br /> <br /> [https://www.owasp.org/index.php/Front_Range_OWASP_Conference_2012 SNOWFROC 2012 ] March 22d at the Tivoli!<br /> <br /> [Denver April 2012 meeting] - stay tuned...<br /> <br /> <br /> <br /> &lt;!-- 5 May 2011: SnowFROC 2011 followed by B-Sides &quot;SkiSides&quot;. Details TBD --&gt;<br /> <br /> == Past Meetings ==<br /> [Denver February 2012 meeting|February 15th 2012: Andy Lewis &quot;Why OWASP? OWASP is the wheel. You don't need to reinvent it!]<br /> <br /> [Denver January 2012 meeting January 18th, 2012| Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=124810 2012-02-21T20:02:44Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Andy Lewis (many thanks to David Campbell for past leadership). |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> ==== Local News ====<br /> <br /> =====Next Chapter Meeting: [http://snowfroc2012.eventbrite.com RSVP Now!]=====<br /> Front Range OWASP Conference: March 22nd, 2012: SnoFROC<br /> <br /> * [http://snowfroc2012.eventbrite.com/ RSVP Now!]<br /> <br /> ====New Chapter Board of Directors!====<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Andy Lewis<br /> * Vice Chairman - Steve Kosten<br /> * Communications Chairman - Craig Klosterman<br /> * Comm Vice-Chair - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Kathy Thaxton<br /> <br /> NOTE: THIS WIKI IS USUALLY TERRIBLY OUT OF DATE. PLEASE FOLLOW @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST]<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> =====Wassup with Boulder???=====<br /> Boulder is presently leaderless. We hope that by moving the Denver meetings up north several miles that we can lure more of the Boulder folks to come join us in our new setup close to downtown Denver. If you're interested in taking over the Boulder chapter please let us know!<br /> <br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> <br /> == Future Meetings == <br /> <br /> [https://www.owasp.org/index.php/Front_Range_OWASP_Conference_2012 SNOWFROC 2012 ] March 22d at the Tivoli!<br /> <br /> [Denver April 2012 meeting] - stay tuned...<br /> <br /> <br /> <br /> &lt;!-- 5 May 2011: SnowFROC 2011 followed by B-Sides &quot;SkiSides&quot;. Details TBD --&gt;<br /> <br /> == Past Meetings ==<br /> [Denver February 2012 meeting|February 15th 2012: Andy Lewis &quot;Why OWASP? OWASP is the wheel. You don't need to reinvent it!]<br /> <br /> [Denver January 2012 meeting January 18th, 2012| Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=124807 2012-02-21T20:00:50Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Andy Lewis (many thanks to David Campbell for past leadership). |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> ==== Local News ====<br /> <br /> =====Next Chapter Meeting: [http://snowfroc2012.eventbrite.com RSVP Now!]=====<br /> Front Range OWASP Conference: March 22nd, 2012: SnoFROC<br /> <br /> * [http://snowfroc2012.eventbrite.com/ RSVP Now!]<br /> <br /> ====New Chapter Board of Directors!====<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Andy Lewis<br /> * Vice Chairman - Steve Kosten<br /> * Communications Chairman - Craig Klosterman<br /> * Comm Vice-Chair - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Kathy Thaxton<br /> <br /> NOTE: THIS WIKI IS USUALLY TERRIBLY OUT OF DATE. PLEASE FOLLOW @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST]<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> =====Wassup with Boulder???=====<br /> Boulder is presently leaderless. We hope that by moving the Denver meetings up north several miles that we can lure more of the Boulder folks to come join us in our new setup close to downtown Denver. If you're interested in taking over the Boulder chapter please let us know!<br /> <br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> <br /> == Future Meetings == <br /> <br /> [https://www.owasp.org/index.php/Front_Range_OWASP_Conference_2012 SNOWFROC 2012 ] March 22d at the Tivoli!<br /> <br /> [[Denver April 2012 meeting | DenverOWASP201202]] - stay tuned...<br /> <br /> <br /> <br /> &lt;!-- 5 May 2011: SnowFROC 2011 followed by B-Sides &quot;SkiSides&quot;. Details TBD --&gt;<br /> <br /> == Past Meetings ==<br /> [Denver February 2012 meeting|February 15th 2012: Andy Lewis &quot;Why OWASP? OWASP is the wheel. You don't need to reinvent it!]<br /> <br /> [Denver January 2012 meeting January 18th, 2012| Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=124799 2012-02-21T19:45:53Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Andy Lewis (many thanks to David Campbell for past leadership). |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> ==== Local News ====<br /> <br /> =====Next Chapter Meeting: [http://snowfroc2012.eventbrite.com RSVP Now!]=====<br /> Front Range OWASP Conference: March 22nd, 2012: SnoFROC<br /> <br /> * [http://snowfroc2012.eventbrite.com/ RSVP Now!]<br /> <br /> ====New Chapter Board of Directors!====<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Andy Lewis<br /> * Vice Chairman - Steve Kosten<br /> * Communications Chairman - Craig Klosterman<br /> * Comm Vice-Chair - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Kathy Thaxton<br /> <br /> NOTE: THIS WIKI IS USUALLY TERRIBLY OUT OF DATE. PLEASE FOLLOW @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST]<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> =====Wassup with Boulder???=====<br /> Boulder is presently leaderless. We hope that by moving the Denver meetings up north several miles that we can lure more of the Boulder folks to come join us in our new setup close to downtown Denver. If you're interested in taking over the Boulder chapter please let us know!<br /> <br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> <br /> == Future Meetings == <br /> <br /> [[Denver Feb 2012 meeting | DenverOWASP201202]] - stay tuned...<br /> <br /> [https://www.owasp.org/index.php/Front_Range_OWASP_Conference_2012 SNOWFROC 2012 ] March 22d at the Tivoli!<br /> <br /> &lt;!-- 5 May 2011: SnowFROC 2011 followed by B-Sides &quot;SkiSides&quot;. Details TBD --&gt;<br /> <br /> == Past Meetings ==<br /> [[Denver February 2012 meeting|February 15th 2012: Andy Lewis &quot;Why OWASP?&quot;]]<br /> <br /> [Denver January 2012 meeting January 18th, 2012| Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=123252 2012-01-25T22:40:48Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Andy Lewis (many thanks to David Campbell for past leadership). |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> ==== Local News ====<br /> <br /> =====Next Chapter Meeting: [http://dowasp20120118.eventbrite.com RSVP Now!]=====<br /> Denver Febuary 2012 meeting: Febuary 15th, 2012: &quot;Stay Tuned&quot;]<br /> <br /> * [http://dowasp20120118.eventbrite.com RSVP Now!]<br /> <br /> ====New Chapter Board of Directors!====<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Andy Lewis<br /> * Vice Chairman - Steve Kosten<br /> * Communications Chairman - Craig Klosterman<br /> * Comm Vice-Chair - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Kathy Thaxton<br /> <br /> NOTE: THIS WIKI IS USUALLY TERRIBLY OUT OF DATE. PLEASE FOLLOW @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST]<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> =====Wassup with Boulder???=====<br /> Boulder is presently leaderless. We hope that by moving the Denver meetings up north several miles that we can lure more of the Boulder folks to come join us in our new setup close to downtown Denver. If you're interested in taking over the Boulder chapter please let us know!<br /> <br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> <br /> == Future Meetings == <br /> <br /> [[Denver Feb 2012 meeting | DenverOWASP201202]] - stay tuned...<br /> <br /> [https://www.owasp.org/index.php/Front_Range_OWASP_Conference_2012 SNOWFROC 2012 ] March 22d at the Tivoli!<br /> <br /> &lt;!-- 5 May 2011: SnowFROC 2011 followed by B-Sides &quot;SkiSides&quot;. Details TBD --&gt;<br /> <br /> == Past Meetings ==<br /> [Denver January 2012 meeting January 18th, 2012| Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=123251 2012-01-25T22:10:51Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Andy Lewis (many thanks to David Campbell for past leadership). |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> ==== Local News ====<br /> <br /> =====Next Chapter Meeting: [http://dowasp20120118.eventbrite.com RSVP Now!]=====<br /> Denver January 2012 meeting: January 18th, 2012: Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> * [http://dowasp20120118.eventbrite.com RSVP Now!]<br /> <br /> ====New Chapter Board of Directors!====<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Andy Lewis<br /> * Vice Chairman - Steve Kosten<br /> * Communications Chairman - Craig Klosterman<br /> * Comm Vice-Chair - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Kathy Thaxton<br /> <br /> NOTE: THIS WIKI IS USUALLY TERRIBLY OUT OF DATE. PLEASE FOLLOW @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST]<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> =====Wassup with Boulder???=====<br /> Boulder is presently leaderless. We hope that by moving the Denver meetings up north several miles that we can lure more of the Boulder folks to come join us in our new setup close to downtown Denver. If you're interested in taking over the Boulder chapter please let us know!<br /> <br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> <br /> == Future Meetings == <br /> <br /> [[Denver Feb 2012 meeting | DenverOWASP201202]] - stay tuned...<br /> <br /> [https://www.owasp.org/index.php/Front_Range_OWASP_Conference_2012 SNOWFROC 2012 ] March 22d at the Tivoli!<br /> <br /> &lt;!-- 5 May 2011: SnowFROC 2011 followed by B-Sides &quot;SkiSides&quot;. Details TBD --&gt;<br /> <br /> == Past Meetings ==<br /> [Denver January 2012 meeting January 18th, 2012| Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=123250 2012-01-25T22:09:23Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Andy Lewis (many thanks to David Campbell for past leadership). |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> ==== Local News ====<br /> <br /> =====Next Chapter Meeting: [http://dowasp20120118.eventbrite.com RSVP Now!]=====<br /> Denver January 2012 meeting: January 18th, 2012: Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> * [http://dowasp20120118.eventbrite.com RSVP Now!]<br /> <br /> ====New Chapter Board of Directors!====<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Andy Lewis<br /> * Vice Chairman - Steve Kosten<br /> * Communications Chairman - Craig Klosterman<br /> * Comm Vice-Chair - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Kathy Thaxton<br /> <br /> NOTE: THIS WIKI IS USUALLY TERRIBLY OUT OF DATE. PLEASE FOLLOW @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST]<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> =====Wassup with Boulder???=====<br /> Boulder is presently leaderless. We hope that by moving the Denver meetings up north several miles that we can lure more of the Boulder folks to come join us in our new setup close to downtown Denver. If you're interested in taking over the Boulder chapter please let us know!<br /> <br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> <br /> == Future Meetings == <br /> <br /> [[Denver Feb 2012 meeting | DenverOWASP201202]] - stay tuned...<br /> <br /> [https://www.owasp.org/index.php/Front_Range_OWASP_Conference_2012 SNOWFROC 2012 ] March 22d at the Tivoli!<br /> <br /> &lt;!-- 5 May 2011: SnowFROC 2011 followed by B-Sides &quot;SkiSides&quot;. Details TBD --&gt;<br /> <br /> == Past Meetings ==<br /> [[Denver January 2012 meeting January 18th, 2012| Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=123249 2012-01-25T22:08:23Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Andy Lewis (many thanks to David Campbell for past leadership). |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> ==== Local News ====<br /> <br /> =====Next Chapter Meeting: [http://dowasp20120118.eventbrite.com RSVP Now!]=====<br /> Denver January 2012 meeting: January 18th, 2012: Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> * [http://dowasp20120118.eventbrite.com RSVP Now!]<br /> <br /> ====New Chapter Board of Directors!====<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Andy Lewis<br /> * Vice Chairman - Steve Kosten<br /> * Communications Chairman - Craig Klosterman<br /> * Comm Vice-Chair - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Kathy Thaxton<br /> <br /> NOTE: THIS WIKI IS USUALLY TERRIBLY OUT OF DATE. PLEASE FOLLOW @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST]<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> =====Wassup with Boulder???=====<br /> Boulder is presently leaderless. We hope that by moving the Denver meetings up north several miles that we can lure more of the Boulder folks to come join us in our new setup close to downtown Denver. If you're interested in taking over the Boulder chapter please let us know!<br /> <br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> <br /> == Future Meetings == <br /> <br /> [[Denver Feb 2012 meeting | DenverOWASP201202]] - stay tuned...<br /> <br /> [https://www.owasp.org/index.php/Front_Range_OWASP_Conference_2012 SNOWFROC 2012 ] March 22d at the Tivoli!<br /> <br /> &lt;!-- 5 May 2011: SnowFROC 2011 followed by B-Sides &quot;SkiSides&quot;. Details TBD --&gt;<br /> <br /> == Past Meetings ==<br /> [[Denver January 2012 meeting|January 18th, 2012| Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=123248 2012-01-25T22:03:07Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Andy Lewis (many thanks to David Campbell for past leadership). |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> ==== Local News ====<br /> <br /> =====Next Chapter Meeting: [http://dowasp20120118.eventbrite.com RSVP Now!]=====<br /> Denver January 2012 meeting: January 18th, 2012: Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> * [http://dowasp20120118.eventbrite.com RSVP Now!]<br /> <br /> ====New Chapter Board of Directors!====<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Andy Lewis<br /> * Vice Chairman - Steve Kosten<br /> * Communications Chairman - Craig Klosterman<br /> * Comm Vice-Chair - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Kathy Thaxton<br /> <br /> NOTE: THIS WIKI IS USUALLY TERRIBLY OUT OF DATE. PLEASE FOLLOW @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST]<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> =====Wassup with Boulder???=====<br /> Boulder is presently leaderless. We hope that by moving the Denver meetings up north several miles that we can lure more of the Boulder folks to come join us in our new setup close to downtown Denver. If you're interested in taking over the Boulder chapter please let us know!<br /> <br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> <br /> == Future Meetings == <br /> <br /> [[Denver Feb 2012 meeting | DenverOWASP201202]] - stay tuned...<br /> <br /> [https://www.owasp.org/index.php/Front_Range_OWASP_Conference_2012 SNOWFROC 2012 ] March 22d at the Tivoli!<br /> <br /> &lt;!-- 5 May 2011: SnowFROC 2011 followed by B-Sides &quot;SkiSides&quot;. Details TBD --&gt;<br /> <br /> == Past Meetings ==<br /> [[Denver January 2012 meeting|January 18th, 2012: Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=123247 2012-01-25T22:00:59Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Andy Lewis (many thanks to David Campbell for past leadership). |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> ==== Local News ====<br /> <br /> =====Next Chapter Meeting: [http://dowasp20120118.eventbrite.com RSVP Now!]=====<br /> Denver January 2012 meeting: January 18th, 2012: Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> * [http://dowasp20120118.eventbrite.com RSVP Now!]<br /> <br /> ====New Chapter Board of Directors!====<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Andy Lewis<br /> * Vice Chairman - Steve Kosten<br /> * Communications Chairman - Craig Klosterman<br /> * Comm Vice-Chair - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Kathy Thaxton<br /> <br /> NOTE: THIS WIKI IS USUALLY TERRIBLY OUT OF DATE. PLEASE FOLLOW @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST]<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> =====Wassup with Boulder???=====<br /> Boulder is presently leaderless. We hope that by moving the Denver meetings up north several miles that we can lure more of the Boulder folks to come join us in our new setup close to downtown Denver. If you're interested in taking over the Boulder chapter please let us know!<br /> <br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> <br /> == Future Meetings == <br /> <br /> [[Denver Feb 2012 meeting | DenverOWASP201202]] - stay tuned...<br /> <br /> [https://www.owasp.org/index.php/Front_Range_OWASP_Conference_2012 SNOWFROC 2012 ] March 22d at the Tivoli!<br /> <br /> &lt;!-- 5 May 2011: SnowFROC 2011 followed by B-Sides &quot;SkiSides&quot;. Details TBD --&gt;<br /> <br /> == Past Meetings ==<br /> [[Denver January 2012 meeting|January 18th 2010:Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack]]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=123246 2012-01-25T22:00:02Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Andy Lewis (many thanks to David Campbell for past leadership). |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> ==== Local News ====<br /> <br /> =====Next Chapter Meeting: [http://dowasp20120118.eventbrite.com RSVP Now!]=====<br /> Denver January 2012 meeting: January 18th, 2012: Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> * [http://dowasp20120118.eventbrite.com RSVP Now!]<br /> <br /> ====New Chapter Board of Directors!====<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Andy Lewis<br /> * Vice Chairman - Steve Kosten<br /> * Communications Chairman - Craig Klosterman<br /> * Comm Vice-Chair - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Kathy Thaxton<br /> <br /> NOTE: THIS WIKI IS USUALLY TERRIBLY OUT OF DATE. PLEASE FOLLOW @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST]<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> =====Wassup with Boulder???=====<br /> Boulder is presently leaderless. We hope that by moving the Denver meetings up north several miles that we can lure more of the Boulder folks to come join us in our new setup close to downtown Denver. If you're interested in taking over the Boulder chapter please let us know!<br /> <br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> <br /> == Future Meetings == <br /> <br /> [[Denver Feb 2012 meeting | DenverOWASP201202]] - stay tuned...<br /> <br /> [https://www.owasp.org/index.php/Front_Range_OWASP_Conference_2012 SNOWFROC 2012 ] March 22d at the Tivoli!<br /> <br /> &lt;!-- 5 May 2011: SnowFROC 2011 followed by B-Sides &quot;SkiSides&quot;. Details TBD --&gt;<br /> <br /> == Past Meetings ==<br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack]]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver&diff=123245 2012-01-25T21:59:18Z

<p>Craig Klosterman: </p> <hr /> <div>{{Chapter Template|chaptername=Denver|extra=Chapter leader is Andy Lewis (many thanks to David Campbell for past leadership). |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}<br /> <br /> ==== Local News ====<br /> <br /> =====Next Chapter Meeting: [http://dowasp20120118.eventbrite.com RSVP Now!]=====<br /> Denver January 2012 meeting: January 18th, 2012: Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]<br /> <br /> * [http://dowasp20120118.eventbrite.com RSVP Now!]<br /> <br /> ====New Chapter Board of Directors!====<br /> Here's the team that's putting it all together:<br /> * Chairman/Chapter Leader - Andy Lewis<br /> * Vice Chairman - Steve Kosten<br /> * Communications Chairman - Craig Klosterman<br /> * Comm Vice-Chair - Alan Darien<br /> * Outreach &amp; Education Chair - James Synovec<br /> * Outreach &amp; Education Vice Chair - Brad Carvalho<br /> * FROC Chair - Kathy Thaxton<br /> <br /> NOTE: THIS WIKI IS USUALLY TERRIBLY OUT OF DATE. PLEASE FOLLOW @OWASP303 ON TWITTER AND/OR [http://lists.owasp.org/mailman/listinfo/owasp-denver SUBSCRIBE TO THE MAILING LIST]<br /> <br /> &lt;!-- =====Missed the con?=====<br /> * [http://www.reddit.com/r/netsec/comments/fgetw/shmoocon_2011_video_collection/ Vids from Schmoocon 2011]<br /> * [http://media.ccc.de/browse/congress/2010/index.html Vids from 27c3]<br /> * [http://vimeo.com/groups/asdc10/videos/sort:newest Vids from AppsecDC 2010]<br /> --&gt;<br /> <br /> =====OWASP Podcast=====<br /> [http://www.owasp.org/index.php/OWASP_Podcast OWASP Podcast]<br /> <br /> <br /> =====Wassup with Boulder???=====<br /> Boulder is presently leaderless. We hope that by moving the Denver meetings up north several miles that we can lure more of the Boulder folks to come join us in our new setup close to downtown Denver. If you're interested in taking over the Boulder chapter please let us know!<br /> <br /> <br /> &lt;paypal&gt;Denver&lt;/paypal&gt;<br /> &lt;hr&gt;<br /> <br /> <br /> ==Questions, Comments==<br /> Questions can be directed to <br /> <br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> &lt;hr&gt;<br /> <br /> <br /> ==== Chapter Meetings ====<br /> <br /> == Future Meetings == <br /> <br /> [[Denver Feb 2012 meeting | DenverOWASP201202]] - stay tuned...<br /> <br /> [https://www.owasp.org/index.php/Front_Range_OWASP_Conference_2012 SNOWFROC 2012 ] March 22d at the Tivoli!<br /> <br /> &lt;!-- 5 May 2011: SnowFROC 2011 followed by B-Sides &quot;SkiSides&quot;. Details TBD --&gt;<br /> <br /> == Past Meetings ==<br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Greg Knaddison [http://2011.badcamp.net/program/sessions/how-does-drupal-security-stack &quot;How Does Drupal Security Stack up?&quot;]]<br /> <br /> [[Denver September 2011 meeting|September 14th 2011: Chris Schmidt &quot;OWASP ESAPI&quot;]]<br /> <br /> [[Denver March 2011 meeting|March 17th 2011: Hands on &quot;Hack a Thon&quot;]]<br /> <br /> [[Denver September 2010 meeting|September 22nd 2010: Eric Duprey: Application Vulnerability Shooting Gallery]]<br /> <br /> [[Denver August 2010 meeting|August 18th 2010: Clint Pollock: Protecting Your Applications from Backdoors]]<br /> <br /> [[Front_Range_OWASP_Conference_2010|June 2nd 2010: Front Range OWASP Conference]]<br /> <br /> [[Denver January 2010 meeting|January 20th 2010: John Evans: Securing Webapps: An Illustrative Overview]]<br /> <br /> [[Denver November 2009 meeting|November 18th 2009: Anton Rager: Advanced XSS]]<br /> <br /> [[Denver August 2009 meeting|August 27th 2009: Jon Rose: Security in the Clouds]]<br /> <br /> [[Denver May 2009 meeting|May 2009: Dr. Joseph McComb &amp; and Daniel Weiske: Compliance and application security testing]]<br /> <br /> [[Front_Range_OWASP_Conference_2009|March 2009: Front Range OWASP Conference (SnowFROC)]]<br /> <br /> [[Denver January 2009 meeting|January 2009: David Campbell &amp; Eric Duprey: Guided Tour: AppSec NYC '08 CTF]]<br /> <br /> [[Denver October 2008 meeting|October 2008: Alex Smolen: The OWASP ASP .NET ESAPI]]<br /> <br /> [[Denver September 2008 meeting|September 2008: John Dickson: Black Box vs. White Box: Different App Testing Strategies]]<br /> <br /> [[Denver August 2008 meeting|August 2008: Dan Cornell: Static Analysis]]<br /> <br /> [[Denver July 2008 meeting|July 2008: David Byrne &amp; Eric Duprey: Grendel-Scan]]<br /> <br /> [[Front Range OWASP Conference|June 2008: Front Range OWASP Conference: Jeremiah Grossman, Robert Hansen, and more!]]<br /> <br /> [[Denver May 2008 meeting|May 2008: David Campbell &amp; Eric Duprey: XSS Attacks &amp; Defenses]]<br /> <br /> [[Denver April 2008 meeting|April 2008: Ryan Barnett: Virtual Patching with ModSecurity]]<br /> <br /> [[Denver February 2008 meeting|February 2008: Michael Sutton: SQL Injection Revisited]]<br /> <br /> [[Denver June 2007 meeting|June 2007]]<br /> <br /> [[Denver April 2007 meeting|April 2007]]<br /> <br /> [[Denver February 2007 meeting|February 2007]]<br /> <br /> [[Denver January 2007 meeting|January 2007]]<br /> <br /> [[Denver November 2006 meeting|November 2006]]<br /> <br /> ==[[Related_Organizations|Local Organizations of Interest]]==<br /> <br /> ==== Mailing List ====<br /> Join the [http://lists.owasp.org/mailman/listinfo/owasp-denver OWASP Denver Mailing List] to receive meeting notifications via email<br /> <br /> ==== Twitter Feed @owasp303 ====<br /> Denver OWASP has created a [http://twitter.com/owasp303 Twitter feed @owasp303] to keep you in the loop. Whilst the mailing list is primarily intended to be low-traffic and only provide updates regarding the times, locations, and topics for chapter meetings, the Twitter feed will also provide noteworthy appsec updates.<br /> <br /> {|<br /> |-<br /> | style=&quot;border: 1px solid rgb(204, 204, 204); width: 100%; font-size: 95%; color: rgb(0, 0, 0); background-color: rgb(236, 236, 236);&quot; | <br /> <br /> '''@OWASP303 Twitter Feed ([http://twitter.com/OWASP303 follow us on Twitter!])'''<br /> &lt;twitter&gt;55021150&lt;/twitter&gt; <br /> <br /> | style=&quot;width: 110px; font-size: 95%; color: rgb(0, 0, 0);&quot; | <br /> |}<br /> <br /> <br /> <br /> ====Resources====<br /> <br /> =====Denver OWASP Chapter Leaders=====<br /> *Andy Lewis, Denver OWASP: alewis 'at' owasp.org<br /> <br /> =====Key OWASP Resources=====<br /> * http://www.owasp.org/images/4/41/ASVS_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/3/31/ESAPI_One_Page_Handout.pdf<br /> * http://www.owasp.org/images/a/a1/Legal_One_Page_Handout.pdf<br /> * <br /> * http://www.owasp.org/images/a/a3/How_ESAPI_Works.pdf<br /> * http://www.owasp.org/images/a/ac/LAMP_Should_be_Spelled_LAMPE.pdf<br /> * http://www.owasp.org/images/0/01/Getting_started_designing_for_a_level_of_assurance.pdf<br /> * <br /> * http://www.owasp.org/index.php/Agile_Software_Development:_Don%27t_Forget_EVIL_User_Stories<br /> * http://www.owasp.org/index.php/Man_vs._Code<br /> * <br /> * http://www.owasp.org/images/4/4e/OWASP_ASVS_2009_Web_App_Std_Release.pdf<br /> * <br /> * http://www.owasp.org/images/c/cd/PHP-ESAPI_1.0a_install.pdf<br /> * http://www.owasp.org/images/6/67/PHP-ESAPI_1.0a_ReleaseNotes.pdf<br /> <br /> =====Chapter Management Links=====<br /> &lt;!-- [[Pizza|Best pizza in Centennial]] --&gt;<br /> [[Chapter SOPs|Denver OWASP Chapter SOPs]]<br /> __NOTOC__<br /> &lt;headertabs/&gt;<br /> [[Category:OWASP Chapter]]<br /> [[Category:Colorado]]</div>

Craig Klosterman https://wiki.owasp.org/index.php?title=Denver_Feb_2012_meeting&diff=123244 2012-01-25T21:55:45Z

<p>Craig Klosterman: </p> <hr /> <div>=Denver OWASP Meeting Feb 2012=<br /> February's topic is a walkthrough of key OWASP projects:<br /> <br /> #Intro to OWASP Projects<br /> * How do they work?<br /> * How do I participate? If something's missing, can I add it?<br /> * What if I want to start one?<br /> <br /> # Life Cycle (of particular value to Architects, Managers, and Project Managers)<br /> * [https://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API ESAPIs]<br /> * [https://www.owasp.org/index.php/Category:Software_Assurance_Maturity_Model Software Assurance Maturity Model]<br /> * [https://www.owasp.org/index.php/Category:OWASP_Source_Code_Review_OWASP_Projects_Project Source Code Review Project]<br /> * [https://www.owasp.org/index.php/Category:OWASP_AppSec_FAQ_Project AppSec FAQ Project]<br /> * [https://www.owasp.org/index.php/Category:OWASP_Legal_Project OWASP Legal Project] (Outsourcing/offshoring?)<br /> <br /> <br /> # Noteworthy Projects for Testers/QA teams<br /> * [https://www.owasp.org/index.php/Category:OWASP_WebGoat_Project WEBGOAT!]<br /> * [https://www.owasp.org/index.php/Category:OWASP_Testing_Project OWASP Testing Project]<br /> * [https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project OWASP Zed Attack Proxy Project]<br /> <br /> # Noteworthy Projects for DEFENDING your apps<br /> <br /> Return to [https://www.owasp.org/index.php/Denver Denver OWASP main page]</div>

Craig Klosterman