OWASP - User contributions [en]

Salt Lake City

2018-08-02T03:52:51Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday February 1st, 2018 in conjunction with UtahSec */

Welcome to the Salt Lake chapter homepage. The chapter leader is [Mailto:dmitry.dessiatnikov@gmail.com Dmitry Dessiatnikov]

'''[http://lists.owasp.org/mailman/listinfo/owasp-salt_lake Click here] to join the local chapter mailing list.'''

== ''The next meeting is scheduled for Thursday August 2nd, 2018 in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' Thursday August 2, 2018'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

'''801 labs 353 east 200 south suite #B'''

'''Salt Lake City, UT'''

'''''Meeting Agenda:'''''

Richard Ullrich - Cybersecurity Career Developmen

Alan Jex - will also be talking about careers in Cybersecurity

'''''Everyone is welcome to join us at our chapter meetings'''''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software Assurance Maturity Model.pptx|here.]]


[[Category:Utah]]

Salt Lake City

2018-02-01T05:35:32Z

Dmitry Dessiatnikov: /* Past Meetings */

Welcome to the Salt Lake chapter homepage. The chapter leader is [Mailto:dmitry.dessiatnikov@gmail.com Dmitry Dessiatnikov]

'''[http://lists.owasp.org/mailman/listinfo/owasp-salt_lake Click here] to join the local chapter mailing list.'''

== ''The next meeting is scheduled for Thursday February 1st, 2018 in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' Thursday February 1st, 2018'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

'''801 labs 353 east 200 south suite #B'''

'''Salt Lake City, UT'''

'''''Meeting Agenda:'''''

'''- Chris Hopkins (Hydroplane):'''

'''- Packet Squirrel (Hands On)'''

'''- Dean Sapp: Next-Gen Endpoint Security'''

'''''Everyone is welcome to join us at our chapter meetings'''''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software Assurance Maturity Model.pptx|here.]]


[[Category:Utah]]

Salt Lake City

2017-05-23T04:42:11Z

Dmitry Dessiatnikov:

== ''The next meeting is scheduled for Thursday June 1st, 2017 in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' Thursday June 1st, 2017'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

'''CB106 on the UVU campus in Orem'''

'''''Presentation:'''''

'''Dmitry Dessiatnikov from Security Aim will present on the topic: "What’s new in 2017 OWASP Top 10 Application Security Risks – a view from the tranches".'''

'''We will discuss the changes in the proposed 2017 OWASP Top 10 risks list and how they reflect the constantly changing threat landscape of applications as seen from the perspective of an application penetration tester.'''

''Everyone is welcome to join us at our chapter meetings'''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]


[[Category:Utah]]

Salt Lake City

2017-05-03T02:51:06Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday January 5th, 2017 in conjunction with UtahSec */

== ''The next meeting is scheduled for Thursday May 4th, 2017 in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' Thursday May 4th, 2017'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

'''801 Labs'''

'''353 East 200 South Suite #B'''

'''Salt Lake City, UT 84111'''

'''''Presentations:'''''

'''''"Jon Jarvis from SecureUtah.org will be presenting on data privacy and surveillance capitalism.'''''"

'''''"Presenter from 801 Labs"'''''

''Everyone is welcome to join us at our chapter meetings'''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]


[[Category:Utah]]

Salt Lake City

2017-01-02T02:21:33Z

Dmitry Dessiatnikov:

== ''The next meeting is scheduled for Thursday January 5th, 2017 in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' Thursday January 5th, 2017'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

'''LDS Riverton Office Building'''

'''3740 W 13400 S'''

'''Riverton, UT 84065'''

'''(Inform security guard at the front desk that you are attending OWASP)'''

'''''Presentations:'''''

'''''"ISACA is presenting first.'''''"

'''''"Followed by OWASP: How to integrate security into Agile SDLC using OWASP Application Security Verification Standard and how data is exfiltrated out of your web applications "'''''

'''By Dmitry Dessiatnikov of Security Aim'''

'''''Agenda: '''''

OWASP Top 10 awareness document debuted in 2003, but it only covers top 10 risks, what about #11? Now in 2017 meet OWASP Application Security Verification Standard (ASVS) v.3.0.1.

This is an introductory presentation about what OWASP ASVS is and how to use it to integrate security into the aspects of Agile software development process. Such activities as definition of security-focused user stories, both functional and non-functional requirements will be discussed. The presentation will cover how to inject security and privacy considerations into the early phases of the Agile software development process to address the risks of security bugs pushed to production during frequent releases.

As a bonus we will discuss a Same Origin Policy bypass that allows data exfultration that most applications are not protected from.

''Everyone is welcome to join us at our chapter meetings'''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]



[[Category:Utah]]

Salt Lake City

2016-12-01T02:46:15Z

Dmitry Dessiatnikov:

== ''The next meeting is scheduled for Thursday December 1, 2016 in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' Thursday December 1, 2016'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

''801Labs Hackerspace @ 353 East 200 South Suite #B Salt Lake City, UT 84111"

'''''Agenda: First we’ll hear from Justin Searle, and then we’ll plan out the meeting schedule for 2017.'''

''Everyone is welcome to join us at our chapter meetings'''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]



[[Category:Utah]]

Salt Lake City

2016-12-01T02:45:58Z

Dmitry Dessiatnikov:

== ''The next meeting is scheduled for Thursday December 1, 2016 in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' Thursday December 1, 2016'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

''801Labs Hackerspace @ 353 East 200 South Suite #B Salt Lake City, UT 84111"

'''''Agenda: First we’ll hear from Justin Searle, and then we’ll plan out the meeting schedule for 2017.''''

''Everyone is welcome to join us at our chapter meetings'''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]



[[Category:Utah]]

Salt Lake City

2016-12-01T02:45:08Z

Dmitry Dessiatnikov:

== ''The next meeting is scheduled for Thursday December 1, 2016 in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' Thursday December 1, 2016'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

''801Labs Hackerspace @ 353 East 200 South Suite #B Salt Lake City, UT 84111"

'''''Agenda: First we’ll hear from Justin Searle, and then we’ll plan out the meeting schedule for 2017.''''"

''Everyone is welcome to join us at our chapter meetings'''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]



[[Category:Utah]]

Salt Lake City

2016-11-03T08:49:16Z

Dmitry Dessiatnikov:

== ''The next meeting is scheduled for Thursday November 3, 2016 in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' Thursday November 3, 2016'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

''UVU, in room CB 106. Parking is free after 5, and there should be parking in L3/L4/L5/L6.''

'''''Agenda: Troy Jessop of UtahSaint and SaintCon fame will be our first presenter. We’ll then have a presenter representing DC801'''''

'''Everyone is welcome to join us at our chapter meetings'''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]



[[Category:Utah]]

Salt Lake City

2016-09-01T03:19:52Z

Dmitry Dessiatnikov:

== ''The next meeting is scheduled for Thursday September 1, 2016 in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' Thursday September 1, 2016'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

''801 Labs
353 East 200 South Suite #B
Salt Lake City, UT 84111''

'''''Agenda: machine learning applied to cyber security'''''

'''''Presenter: Justin Searle, UtiliSec'''''

'''Everyone is welcome to join us at our chapter meetings'''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]



[[Category:Utah]]

Salt Lake City

2016-08-10T23:05:14Z

Dmitry Dessiatnikov:

== ''The next meeting is scheduled for Thursday August 11, 2016 in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' Thursday August 11, 2016'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

''10876 S River Front Pkwy #500, South Jordan, UT 84095''

"Enter the main lobby, and take the elevator to the fifth floor. Enter
the glass doors and head up the stairs. At the top of the stairs,
head straight past the cubicles and offices. You’ll see the open area
where we’ll be meeting. Signs will be put up to help out as well."

'''''Agenda: Recap of BlackHat and DEFCON'''''

'''''Presenter: Justin Searle, UtiliSec'''''

'''Everyone is welcome to join us at our chapter meetings'''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]



[[Category:Utah]]

Salt Lake City

2016-07-11T05:07:47Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday August 11, 2016 in conjunction with UtahSec */

== ''The next meeting is scheduled for Thursday August 11, 2016 in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' Thursday August 11, 2016'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

''Workfront, 3301 N Thanksgiving Way #100, Lehi, UT 84043''

'''''Agenda: Beyond OWASP Top 10, meet OWASP Top 155 or Application Security Verification Standard (ASVS) and how to integrate it into Agile SDLC'''''

'''''Presenter: Dmitry Dessiatnikov, Security Aim'''''

'''''Abstract:

OWASP Top 10 awareness document debuted in 2003 and since then has been widely adopted as a standard. It is a great introductory resource, but only covers top 10 risks, what about #11? Now in 2016 meet OWASP Application Security Verification Standard (ASVS) v.3.0.1.

This is an introductory presentation about what OWASP ASVS is and how to use it to integrate security into the aspects of Agile software development process. Such activities as definition of security-focused user stories, both functional and non-functional requirements will be discussed. The presentation will cover how to inject security and privacy considerations into the early phases of the Agile software development process to address the risks of security bugs pushed to production during frequent releases.'''

'''Everyone is welcome to join us at our chapter meetings'''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]



[[Category:Utah]]

Salt Lake City

2016-07-11T05:06:32Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday August 11, 2016 in conjunction with UtahSec */

== ''The next meeting is scheduled for Thursday August 11, 2016 in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' Thursday August 11, 2016'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

''Workfront, 3301 N Thanksgiving Way #100, Lehi, UT 84043''

'''''Agenda: Beyond OWASP Top 10, meet OWASP Top 155 or Application Security Verification Standard (ASVS) and how to integrate it into Agile SDLC'''''

'''''Presenter: Dmitry Dessiatnikov, Security Aim'''''

'''''Abstract:

OWASP Top 10 awareness document debuted in 2003 and since then has been widely adopted as a standard. It is a great introductory resource, but only covers top 10 risks, what about #11? Now in 2016 meet OWASP Application Security Verification Standard (ASVS) v.3.0.1.

This is an introductory presentation about what OWASP ASVS is and how to use it to integrate security into the aspects of Agile software development process. Such activities as definition of security-focused user stories, both functional and non-functional requirements will be discussed. The presentation will cover how to inject security and privacy considerations into early phases of the Agile software development process to address the risks of security bugs pushed to production during frequent releases.'''

'''Everyone is welcome to join us at our chapter meetings'''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]



[[Category:Utah]]

Salt Lake City

2016-07-11T04:58:30Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday August 11, 2016 in conjunction with UtahSec */

== ''The next meeting is scheduled for Thursday August 11, 2016 in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' Thursday August 11, 2016'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

''Workfront, 3301 N Thanksgiving Way #100, Lehi, UT 84043''

'''''Agenda: Beyond OWASP Top 10, meet OWASP Top 155 or Application Security Verification Standard (ASVS) and how to integrate it into Agile SDLC'''''

'''''Presenter: Dmitry Dessiatnikov, Security Aim'''''

'''''Abstract:

OWASP Top 10 awareness document debuted in 2003 and since then has been widely adopted as a standard. It is a great introductory resource, but only covers top 10 risks, what about #11? Now in 2016 meet OWASP Application Security Verification Standard (ASVS) v.3.0.1.

This is introductory presentation about integrating security in the aspects of Agile software development process by utilizing OWASP ASVS. Such activities as definition of security-focused epics, user stories and both functional and non-functional requirements will be discussed. The presentation will cover how to inject security and privacy considerations into early phases of the Agile software development process with the goal of defending applications and data.'''''

'''Everyone is welcome to join us at our chapter meetings'''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]



[[Category:Utah]]

Salt Lake City

2016-07-11T04:58:15Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday August 11, 2016 in conjunction with UtahSec */

== ''The next meeting is scheduled for Thursday August 11, 2016 in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' Thursday August 11, 2016'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

''Workfront, 3301 N Thanksgiving Way #100, Lehi, UT 84043''

'''''Agenda: Beyond OWASP Top 10, meet OWASP Top 155 or Application Security Verification Standard (ASVS) and how to integrate it into Agile SDLC'''''

'''''Presenter: Dmitry Dessiatnikov of Security Aim'''''

'''''Abstract:

OWASP Top 10 awareness document debuted in 2003 and since then has been widely adopted as a standard. It is a great introductory resource, but only covers top 10 risks, what about #11? Now in 2016 meet OWASP Application Security Verification Standard (ASVS) v.3.0.1.

This is introductory presentation about integrating security in the aspects of Agile software development process by utilizing OWASP ASVS. Such activities as definition of security-focused epics, user stories and both functional and non-functional requirements will be discussed. The presentation will cover how to inject security and privacy considerations into early phases of the Agile software development process with the goal of defending applications and data.'''''

'''Everyone is welcome to join us at our chapter meetings'''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]



[[Category:Utah]]

Salt Lake City

2016-07-11T04:56:18Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday August 11, 2016 in conjunction with UtahSec */

== ''The next meeting is scheduled for Thursday August 11, 2016 in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' Thursday August 11, 2016'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

''Workfront, 3301 N Thanksgiving Way #100, Lehi, UT 84043''

'''''Agenda: Beyond OWASP Top 10, meet OWASP Top 155 or Application Security Verification Standard (ASVS) and how to integrate it into Agile SDLC'''''

'''''Presenter: Dmitry Dessiatnikov'''''

'''''Abstract:

OWASP Top 10 awareness document debuted in 2003 and since then has been widely adopted as a standard. It is a great introductory resource, but only covers top 10 risks, what about #11? Now in 2016 meet OWASP Application Security Verification Standard (ASVS) v.3.0.1.

This is introductory presentation about integrating security in the aspects of Agile software development process by utilizing OWASP ASVS. Such activities as definition of security-focused epics, user stories and both functional and non-functional requirements will be discussed. The presentation will cover how to inject security and privacy considerations into early phases of the Agile software development process with the goal of defending applications and data.'''''

'''Everyone is welcome to join us at our chapter meetings'''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]



[[Category:Utah]]

Salt Lake City

2016-07-11T04:53:40Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday August 11, 2016 in conjunction with UtahSec */

== ''The next meeting is scheduled for Thursday August 11, 2016 in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' Thursday August 11, 2016'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

''Workfront, 3301 N Thanksgiving Way #100, Lehi, UT 84043''

'''''Agenda: Beyond OWASP Top 10, meet OWASP Top 155 or Application Security Verification Standard (ASVS) and how to integrate it into Agile SDLC'''''

'''''Presenter: Dmitry Dessiatnikov'''''

'''''Abstract:

OWASP Top 10 awareness document debuted in 2003 and since then has been widely adopted as a standard. It is a great introductory resource, but only covers top 10 risks, what about #11? Meet OWASP Application Security Verification Standard (ASVS).

This is introductory presentation about integrating security in the aspects of Agile software development process by utilizing OWASP ASVS. Such activities as definition of security-focused epics, user stories and both functional and non-functional requirements will be discussed. The presentation will cover how to inject security and privacy considerations into early phases of the Agile software development process with the goal of defending applications and data.'''''

'''Everyone is welcome to join us at our chapter meetings'''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]



[[Category:Utah]]

Salt Lake City

2016-07-11T04:42:20Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday June 2nd, 2016 in conjunction with UtahSec */

Salt Lake City

2016-06-01T14:14:23Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday June 2nd, 2016 in conjunction with UtahSec */

== ''The next meeting is scheduled for Thursday June 2nd, 2016 in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' Thursday June 2nd, 2016'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

''801Labs, 353 E 200 S, Salt Lake City, UT 84111''

'''''Agenda: Lawrence Davis will be representing ISACA and will present on SQLi. '''''

'''Everyone is welcome to join us at our chapter meetings'''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]



[[Category:Utah]]

Salt Lake City

2016-06-01T14:14:06Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday April 7th in conjunction with UtahSec */

== ''The next meeting is scheduled for Thursday June 2nd, 2016 in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' Thursday June 2nd, 2016'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

'''801Labs, 353 E 200 S, Salt Lake City, UT 84111''

'''''Agenda: Lawrence Davis will be representing ISACA and will present on SQLi. '''''

'''Everyone is welcome to join us at our chapter meetings'''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]



[[Category:Utah]]

Salt Lake City

2016-06-01T14:13:46Z

Dmitry Dessiatnikov:

== ''The next meeting is scheduled for Thursday April 7th in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' Thursday June 2nd, 2016'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

'''801Labs, 353 E 200 S, Salt Lake City, UT 84111''

'''''Agenda: Lawrence Davis will be representing ISACA and will present on SQLi. '''''

'''Everyone is welcome to join us at our chapter meetings'''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]



[[Category:Utah]]

Salt Lake City

2016-04-05T08:08:47Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday April 7th in conjunction with UtahSec */

== ''The next meeting is scheduled for Thursday April 7th in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' Thursday April 7th, 2016'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

'''LDS Riverton office: 3740 W Market Center Dr, Riverton, UT 84065'''

'''''Agenda: Lawrence Davis will be representing ISACA and will present on SQLi, and Cameron Morris will represent OWASP and will present on OAuth and OpenID services. '''''

'''Everyone is welcome to join us at our chapter meetings'''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]



[[Category:Utah]]

Salt Lake City

2016-04-05T08:08:02Z

Dmitry Dessiatnikov:

== ''The next meeting is scheduled for Thursday April 7th in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' Thursday April 7th, 2016'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

'''LDS Riverton office: 3740 W Market Center Dr, Riverton, UT 84065'''

'''''Agenda: Lawrence Davis will be representing ISACA and will present on SQLi, and Cameron Morris will represent OWASP and will present on OAuth and OpenID services. '''''

'''Everyone is welcome to join us at our chapter meetings'''

'''''Agenda: Lance Buttars (Nemus) presenting on Web Application Firewalls and mod_security '''''

'''Everyone is welcome to join us at our chapter meetings'''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]



[[Category:Utah]]

Salt Lake City

2016-03-02T03:53:20Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday, Thursday March 3rd in conjunction with UtahSec */

Salt Lake City

2016-03-02T03:52:02Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday, February 4th in conjunction with UtahSec */

Salt Lake City

2016-01-31T18:39:06Z

Dmitry Dessiatnikov:

Salt Lake City

2016-01-05T04:20:44Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday, January 7th in conjunction with UtahSec */

Salt Lake City

2016-01-03T18:42:45Z

Dmitry Dessiatnikov:

Salt Lake City

2015-11-03T07:27:11Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday, November 5th in conjunction with UtahSec */

Salt Lake City

2015-11-03T07:26:24Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday, Sep 3rd in conjunction with UtahSec */

Salt Lake City

2015-09-04T02:24:41Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday, Sep 3rd in conjunction with UtahSec */

Salt Lake City

2015-08-13T03:47:02Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday, August 13th in conjunction with UtahSec */

Salt Lake City

2015-05-05T02:55:09Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday, May 7th in conjunction with UtahSec */

Salt Lake City

2015-05-05T02:54:46Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday, May 7th in conjunction with UtahSec */

Salt Lake City

2015-05-05T02:53:38Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday, January 8th in conjunction with UtahSec */

Salt Lake City

2015-01-06T23:22:20Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday, January 8th in conjunction with UtahSec */

Salt Lake City

2015-01-05T03:38:29Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday, January 8th in conjunction with UtahSec */

Salt Lake City

2015-01-05T03:37:28Z

Dmitry Dessiatnikov: /* The next meeting is scheduled for Thursday, January 8th in conjunction with UtahSec */

Salt Lake City

2014-07-02T03:30:07Z

Dmitry Dessiatnikov:

Salt Lake City

2014-06-04T03:07:09Z

Dmitry Dessiatnikov:

Salt Lake City

2014-06-04T03:01:21Z

Dmitry Dessiatnikov:

Salt Lake City

2014-06-04T03:00:29Z

Dmitry Dessiatnikov:

{{Chapter Template|chaptername=Salt_Lake|extra=The chapter leader is [mailto:dmitry.dessiatnikov@gmail.com Dmitry Dessiatnikov]

|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-Salt_Lake|emailarchives=http://lists.owasp.org/pipermail/owasp-Salt_Lake}}

== Local News ==

== ''The next meeting is scheduled for Thursday, June 5th in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' June 5th, 2014'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

'''1275 West, 1600 North, Orem Utah'''

'''Introductions/Announcements: Dmitry Dessiatnikov'''

'''Presenter #1: John Overbaugh'''
'''Topic: Achievable Security: Building Security into the Development Lifecycle'''
'''Summary:''' You simply cannot test security into your web applications; it must be part and parcel to the development effort. Sadly, few teams approach with a complete “security first” perspective. The good news is, it isn’t much more costly to build secure applications as it is to build insecure applications; it just takes tools, skills, and a little process. This presentation examines these tools, skills, and processes necessary for building increasingly secure code – even in Agile environments.
'''Bio: ''' John Overbaugh is managing director of security services at Caliber Security Partners. He has nearly 20 years of experience building robust, secure software – from consumer desktop applications to enterprise web applications and everything in between. He is a CISSP, GWAPT, GSLC and GCIH and has training and expertise in mobile security. John has been leading secure development efforts since 1999, when he led the first application after Windows to undergo the “Secure Windows Initiative” at Microsoft. He is a frequent presenter and a passionate technology geek.

'''Presenter #2: Aaron Willis'''
'''Topic: Unconventional Defense Against WebScraping and Data Theft Attacks'''
'''Summary:''' Website data can be a valuable asset for a business and data thieves are relentless in their efforts to harvest data for their own personal use or for resale. Many times this is not an issue when the proliferation of the data is in the best interest of the business, but for others it is critical to protect data from being harvested by or sold to competitors. This presentation examines methods, techniques and case studies for protecting website data from automated web scraping attacks.
'''Bio:''' Aaron Willis is a Senior Forensic Analyst at SecurityMetrics. He is also the owner of ScrapeGoat, Inc., a local data analytics and web scraping company. He has over 15 years of experience in web scraping and anti-web scraping methods and technologies. Aaron has also taught Information Security and Forensic classes at Utah Valley University for over 5 years. He graduated from UVU with a bachelor of science in Information Technology and will finish a masters program in Digital Forensics this summer. He has been with SecurityMetrics almost 4 years and has completed over 50 investigations.

'''Food Sponsor: SecurityMetrics'''

'''Everyone is welcome to join us at our chapter meetings'''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]



[[Category:Utah]]

Salt Lake City

2014-06-04T02:59:51Z

Dmitry Dessiatnikov:

{{Chapter Template|chaptername=Salt_Lake|extra=The chapter leader is [mailto:dmitry.dessiatnikov@gmail.com Dmitry Dessiatnikov]

|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-Salt_Lake|emailarchives=http://lists.owasp.org/pipermail/owasp-Salt_Lake}}

== Local News ==

== ''The next meeting is scheduled for Thursday, June 5th in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' June 5th, 2014'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

'''1275 West, 1600 North, Orem Utah'''

‘’’Introductions/Announcements: Dmitry Dessiatnikov'''

'''Presenter #1: John Overbaugh'''
'''Topic: Achievable Security: Building Security into the Development Lifecycle'''
'''Summary:''' You simply cannot test security into your web applications; it must be part and parcel to the development effort. Sadly, few teams approach with a complete “security first” perspective. The good news is, it isn’t much more costly to build secure applications as it is to build insecure applications; it just takes tools, skills, and a little process. This presentation examines these tools, skills, and processes necessary for building increasingly secure code – even in Agile environments.
'''Bio: ''' John Overbaugh is managing director of security services at Caliber Security Partners. He has nearly 20 years of experience building robust, secure software – from consumer desktop applications to enterprise web applications and everything in between. He is a CISSP, GWAPT, GSLC and GCIH and has training and expertise in mobile security. John has been leading secure development efforts since 1999, when he led the first application after Windows to undergo the “Secure Windows Initiative” at Microsoft. He is a frequent presenter and a passionate technology geek.

'''Presenter #2: Aaron Willis'''
'''Topic: Unconventional Defense Against WebScraping and Data Theft Attacks'''
'''Summary:''' Website data can be a valuable asset for a business and data thieves are relentless in their efforts to harvest data for their own personal use or for resale. Many times this is not an issue when the proliferation of the data is in the best interest of the business, but for others it is critical to protect data from being harvested by or sold to competitors. This presentation examines methods, techniques and case studies for protecting website data from automated web scraping attacks.
'''Bio:''' Aaron Willis is a Senior Forensic Analyst at SecurityMetrics. He is also the owner of ScrapeGoat, Inc., a local data analytics and web scraping company. He has over 15 years of experience in web scraping and anti-web scraping methods and technologies. Aaron has also taught Information Security and Forensic classes at Utah Valley University for over 5 years. He graduated from UVU with a bachelor of science in Information Technology and will finish a masters program in Digital Forensics this summer. He has been with SecurityMetrics almost 4 years and has completed over 50 investigations.

'''Food Sponsor: SecurityMetrics'''

'''Everyone is welcome to join us at our chapter meetings'''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]



[[Category:Utah]]

Salt Lake City

2014-06-04T02:58:59Z

Dmitry Dessiatnikov:

Salt Lake City

2014-06-04T02:58:08Z

Dmitry Dessiatnikov:

Salt Lake City

2014-06-04T02:56:32Z

Dmitry Dessiatnikov:

{{Chapter Template|chaptername=Salt_Lake|extra=The chapter leader is [mailto:dmitry.dessiatnikov@gmail.com Dmitry Dessiatnikov]

|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-Salt_Lake|emailarchives=http://lists.owasp.org/pipermail/owasp-Salt_Lake}}

== Local News ==

== ''The next meeting is scheduled for Thursday, June 5th in conjunction with [http://www.utahsec.org UtahSec]'' ==

'''''Date:'''''

''' June 5th, 2014'''

'''''Time:'''''

'''6 - 8 pm'''

'''''Meeting location:'''''

'''1275 West, 1600 North, Orem Utah'''

Introductions/Announcements: Dmitry Dessiatnikov

Presenter #1: John Overbaugh
Topic: Achievable Security: Building Security into the Development Lifecycle
Summary: You simply cannot test security into your web applications; it must be part and parcel to the development effort. Sadly, few teams approach with a complete “security first” perspective. The good news is, it isn’t much more costly to build secure applications as it is to build insecure applications; it just takes tools, skills, and a little process. This presentation examines these tools, skills, and processes necessary for building increasingly secure code – even in Agile environments.
Bio: John Overbaugh is managing director of security services at Caliber Security Partners. He has nearly 20 years of experience building robust, secure software – from consumer desktop applications to enterprise web applications and everything in between. He is a CISSP, GWAPT, GSLC and GCIH and has training and expertise in mobile security. John has been leading secure development efforts since 1999, when he led the first application after Windows to undergo the “Secure Windows Initiative” at Microsoft. He is a frequent presenter and a passionate technology geek.

Presenter #2: Aaron Willis
Topic: Unconventional Defense Against WebScraping and Data Theft Attacks
Summary: Website data can be a valuable asset for a business and data thieves are relentless in their efforts to harvest data for their own personal use or for resale. Many times this is not an issue when the proliferation of the data is in the best interest of the business, but for others it is critical to protect data from being harvested by or sold to competitors. This presentation examines methods, techniques and case studies for protecting website data from automated web scraping attacks.
Bio: Aaron Willis is a Senior Forensic Analyst at SecurityMetrics. He is also the owner of ScrapeGoat, Inc., a local data analytics and web scraping company. He has over 15 years of experience in web scraping and anti-web scraping methods and technologies. Aaron has also taught Information Security and Forensic classes at Utah Valley University for over 5 years. He graduated from UVU with a bachelor of science in Information Technology and will finish a masters program in Digital Forensics this summer. He has been with SecurityMetrics almost 4 years and has completed over 50 investigations.

'''Food Sponsor: SecurityMetrics'''

'''Everyone is welcome to join us at our chapter meetings'''

== Past Meetings ==
=== OpenSAMM Project - Alan Jex - 3 Jan 2013 ===

Alan discussed the Open Security Assurance Maturity Model (OpenSAMM) including his success at leveraging it to do a successful crawl/walk/run expansion of AppSec at his day job. HP hosted and served food (thanks!).
Slides are available by clicking [[media:UtahSec-Software_Assurance_Maturity_Model.pptx|here.]]



[[Category:Utah]]

Salt Lake City

2014-04-02T01:11:01Z

Dmitry Dessiatnikov:

Salt Lake City

2014-03-05T20:48:24Z

Dmitry Dessiatnikov:

Salt Lake City

2014-01-13T00:36:48Z

Dmitry Dessiatnikov:

Salt Lake City

2014-01-13T00:34:43Z

Dmitry Dessiatnikov: