__NOTOC__

==== About ====

{| cellspacing="0" cellpadding="15" border="0" class="FCK__ShowTableBorders"
|-
| width="200" | [[Image:Banner OWASP Training page.gif|border|center|362x247px]]
|
=== OWASP Training - OWASP Projects and Resources you can use TODAY! ===

The main goal of '''OWASP Training''' is to support Local Chapters' training activities in a way that allows us to use a model that, despite specific and punctual adjustments, can be easily replicated and become the main frame for all Chapter-led training events.

Furthermore, we will use the concept “'''OWASP projects and resources you can use TODAY!'''”

In a nutshell, we are proposing a '''Chapter’s driven model with Local Chapter organization''' in which:

* The courses are '''free for OWASP members''' - being that by the time of the training event anyone may become a member if they desire to do so;
* The contents are '''OWASP projects focused''' – to promote the awareness of our Projects and the understanding of how they fit into an Enterprise's security ecosystem or in its Web Application Development Life-cycle;
* The '''costs''' are '''supported by a mix of funding''' - local chapter budget, external sponsorship, trainers sponsorship (i.e. trip and/or accommodation paid by themselves) and local chapter members’ sponsorship (i.e. taking trainers in as guests).

|-
| valign="top" colspan="2" |
'''If you would like to organize a training event of this sort''', please contact me after gathering the following information which will be our starting point:
* Date of the event;
* Venue and directions;
* Course’s details - with regard to the contents, we would suggest that the focus falls into the OWASP Projects with the most quality and Projects being developed by members of your local Chapter.

'''The role of the Local Chapters in reinforcing visibility of OWASP Projects within the local corporate communities and, by that, in encouraging the use and understanding of our tools and documentation is absolutely invaluable – do get involved!'''

If you are interested in '''being part of OWASP's pool of Trainers''', check our '''[http://www.owasp.org/index.php/OWASP_Training#tab=Trainers_Database_-_Call_for_Trainers.21 CALL FOR TRAINERS tab]''' and add your name!
|}

==== '''Trainers Database - Call for Trainers!''' ====

{| cellspacing="0" cellpadding="15" border="0" class="FCK__ShowTableBorders"
|-
| width="200" | [[Image:Banner OWASP Training page.gif|border|center|362x247px]]
| valign="top" |

=== '''CALL FOR TRAINERS - Trainers drive's goal''' ===

'''OWASP is looking for trainers''' to deliver training under the flag “OWASP projects and resources you can use today”. This is a model of training which is '''free for OWASP members''', '''delivered by OWASP Leaders''' (with only travel expenses paid) and '''covering OWASP modules and/or projects'''.

'''If you are an OWASP Leader and would like to be included in OWASP's pool of trainers, this is your chance - add your name and info to the OWASP Trainers / Volunteers Table and be counted!'''

The role of the Local Chapters in reinforcing visibility of OWASP Projects within the local corporate communities and, by that, in encouraging the use and understanding of our tools and documentation is absolutely invaluable. In this context, the OWASP Training appears as an excellent vehicle to spread the knowledge and the word and that is why this is one of the areas we want to strongly focus on.

'''Click [[OWASP Trainers Database Conditions|here]] for rules and conditions.'''

|}

=== OWASP Trainers Database ===
{{Template:OWASP_Trainers_Volunteers/Columns}}
{{:OWASP_Trainers/Volunteer_0 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_1 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_2 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_3 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_4 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_5 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_6 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_7 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_8 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_9 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_10 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_11 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_12 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_14 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_15 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_16 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_17 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_18 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_19 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_20 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_21 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_22 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_23 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_24 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_25 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_26 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_27 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_28 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_29 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_30 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_31 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_32 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_33 | OWASP_Trainers_Volunteers/Row}}

|}

==== Videos & Pictures ====

=== IBWAS'10 Training Day, 16 Dec 2010 ===

{{:IBWAS10 Videos and Pictures}}

==== Modules and Materials ====

{| cellspacing="0" cellpadding="15" border="0" class="FCK__ShowTableBorders"
|-
| width="200" | [[Image:Banner OWASP Training page.gif|border|center|362x247px]]
| valign="top" |
=== Training Modules ===

* [[OWASP/Training/OWASP AppSensor Project|OWASP AppSensor Project]]

* [[OWASP/Training/OWASP Code Crawler Project|OWASP Code Crawler Project]]

* [[OWASP/Training/OWASP Code Review Project|OWASP Code Review Project]]

* [[OWASP/Training/OWASP DirBuster Project|OWASP DirBuster Project]]

* [[OWASP/Training/OWASP ESAPI|OWASP ESAPI]]

* [[OWASP/Training/Guided tour of OWASP Projects|Guided tour of OWASP Projects]]

* [[OWASP/Training/OWASP O2 Platform|OWASP O2 Platform]]

* [[OWASP/Training/OWASP Secure Coding Practices - Quick Reference Guide|OWASP Secure Coding Practices - Quick Reference Guide]]

* [[OWASP/Training/OWASP Software Assurance Maturity Model|OWASP Software Assurance Maturity Model (SAMM)]]

* [[OWASP/Training/OWASP Testing Guide|OWASP Testing Guide]]

* [[OWASP/Training/Threat Risk Modeling|OWASP Threat Risk Modeling]]

* [[OWASP/Training/OWASP Top 10|OWASP Top 10]]

* [[OWASP/Training/OWASP WebGoat Project|OWASP WebGoat Project]]

* [[OWASP/Training/OWASP WebScarab Project|OWASP WebScarab Project]]

* [[OWASP/Training/OWASP Webslayer Project|OWASP Webslayer Project]]

* [[OWASP/Training/Implementation of Enigform for Wordpress|OWASP Enigform (and Jify)]]

*[[OWASP/Training/OWASP Application Security Verification Standard (ASVS)|OWASP Application Security Verification Standard (ASVS)]]

|-

| valign="top" colspan="2" |
=== OWASP Appsec Tutorial Series, by [[user:Jerryhoff|Jerry Hoff]] ===

* [http://www.youtube.com/watch?v=CDbWvEwBBxo Episode 1: Appsec Basics]
*[http://www.youtube.com/watch?v=pypTYPaU7mM Episode 2: Injection Attacks]

=== Other Training Materials ===

* [http://code.google.com/p/owasp-training/downloads/detail?name=OWASP%20Default%20Training.zip&can=2&q= OWASP Default Training]

* [http://code.google.com/p/owasp-training/downloads/detail?name=London%20Training%20May%2028th%202010.zip&can=2&q= London Training May 28th 2010]

* [http://code.google.com/p/owasp-training/downloads/detail?name=London%20Training%20April%2016th%202010.zip&can=2&q= London Training April 16th 2010]

* [http://www.owasp.org/index.php/File:Developing_Compliant_Applications.pdf Developing Compliant Applications (pdf)]

* [http://www.owasp.org/index.php/File:Developing_Secure_Applications_with_OWASP.pdf Developing Secure Applications with OWASP (pdf)]

=== Videos ===

'''IBWAS'10 Training Day sessions, 16th Dec 2010, Lisbon'''

{{:IBWAS10 Training Day Sessions}}

|}

==== Library of Links ====

{| cellspacing="0" cellpadding="15" border="0" class="FCK__ShowTableBorders"
|-
| width="200" | [[Image:Banner OWASP Training page.gif|border|center|362x247px]]
|
* Access to the collection of all pages associated to the [[:Category:OWASP Training|'''OWASP Training''']].
|}

==== Training Templates ====

{| cellspacing="0" cellpadding="15" border="0" class="FCK__ShowTableBorders"
|-
| width="200" | [[Image:Banner OWASP Training page.gif|border|center|362x247px]]
|
* If you want to organize an OWASP Free Training event, please check out the [[:Category:OWASP Free Training Templates|'''Training Templates''']].
|}

==== Training Logos ====

{{Template:OWASP Training Pictures }}

{{Template:OWASP_Training_Pictures_View
| Media_File1 = '''PROPOSAL 1A'''[[Image:Logo 1A.JPG]]
| Media_File2 = '''PROPOSAL 1B - Approved Version'''[[Image:Logo 1B.JPG]]
}}

{{Template:OWASP_Training_Pictures_View
| Media_File1 = '''PROPOSAL 2'''[[Image:Logo 2.JPG]]
| Media_File2 = '''PROPOSAL 3'''[[Image:Logo 3.JPG]]
}}

{{Template:OWASP_Training_Pictures_View
| Media_File1 = '''PROPOSAL 4'''[[Image:Logo 4.JPG]]
| Media_File2 =

}}

|}

<headertabs />

[[Category:OWASP_Training|Training]]

OWASP Training

2019-10-02T18:10:07Z

Gustavo.Arreaza: /* OWASP Trainers Database */

__NOTOC__

==== About ====

{| cellspacing="0" cellpadding="15" border="0" class="FCK__ShowTableBorders"
|-
| width="200" | [[Image:Banner OWASP Training page.gif|border|center|362x247px]]
|
=== OWASP Training - OWASP Projects and Resources you can use TODAY! ===

The main goal of '''OWASP Training''' is to support Local Chapters' training activities in a way that allows us to use a model that, despite specific and punctual adjustments, can be easily replicated and become the main frame for all Chapter-led training events.

Furthermore, we will use the concept “'''OWASP projects and resources you can use TODAY!'''”

In a nutshell, we are proposing a '''Chapter’s driven model with Local Chapter organization''' in which:

* The courses are '''free for OWASP members''' - being that by the time of the training event anyone may become a member if they desire to do so;
* The contents are '''OWASP projects focused''' – to promote the awareness of our Projects and the understanding of how they fit into an Enterprise's security ecosystem or in its Web Application Development Life-cycle;
* The '''costs''' are '''supported by a mix of funding''' - local chapter budget, external sponsorship, trainers sponsorship (i.e. trip and/or accommodation paid by themselves) and local chapter members’ sponsorship (i.e. taking trainers in as guests).

|-
| valign="top" colspan="2" |
'''If you would like to organize a training event of this sort''', please contact me after gathering the following information which will be our starting point:
* Date of the event;
* Venue and directions;
* Course’s details - with regard to the contents, we would suggest that the focus falls into the OWASP Projects with the most quality and Projects being developed by members of your local Chapter.

'''The role of the Local Chapters in reinforcing visibility of OWASP Projects within the local corporate communities and, by that, in encouraging the use and understanding of our tools and documentation is absolutely invaluable – do get involved!'''

If you are interested in '''being part of OWASP's pool of Trainers''', check our '''[http://www.owasp.org/index.php/OWASP_Training#tab=Trainers_Database_-_Call_for_Trainers.21 CALL FOR TRAINERS tab]''' and add your name!
|}

==== '''Trainers Database - Call for Trainers!''' ====

{| cellspacing="0" cellpadding="15" border="0" class="FCK__ShowTableBorders"
|-
| width="200" | [[Image:Banner OWASP Training page.gif|border|center|362x247px]]
| valign="top" |

=== '''CALL FOR TRAINERS - Trainers drive's goal''' ===

'''OWASP is looking for trainers''' to deliver training under the flag “OWASP projects and resources you can use today”. This is a model of training which is '''free for OWASP members''', '''delivered by OWASP Leaders''' (with only travel expenses paid) and '''covering OWASP modules and/or projects'''.

'''If you are an OWASP Leader and would like to be included in OWASP's pool of trainers, this is your chance - add your name and info to the OWASP Trainers / Volunteers Table and be counted!'''

The role of the Local Chapters in reinforcing visibility of OWASP Projects within the local corporate communities and, by that, in encouraging the use and understanding of our tools and documentation is absolutely invaluable. In this context, the OWASP Training appears as an excellent vehicle to spread the knowledge and the word and that is why this is one of the areas we want to strongly focus on.

'''Click [[OWASP Trainers Database Conditions|here]] for rules and conditions.'''

|}

=== OWASP Trainers Database ===
{{Template:OWASP_Trainers_Volunteers/Columns}}
{{:OWASP_Trainers/Volunteer_0 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_1 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_2 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_3 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_4 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_5 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_6 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_7 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_8 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_9 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_10 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_11 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_12 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_14 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_15 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_16 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_17 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_18 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_19 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_20 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_21 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_22 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_23 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_24 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_25 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_26 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_27 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_28 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_29 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_30 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_31 | OWASP_Trainers_Volunteers/Row}}
{{:OWASP_Trainers/Volunteer_32 | OWASP_Trainers_Volunteers/Row}}

|}

==== Videos & Pictures ====

=== IBWAS'10 Training Day, 16 Dec 2010 ===

{{:IBWAS10 Videos and Pictures}}

==== Modules and Materials ====

{| cellspacing="0" cellpadding="15" border="0" class="FCK__ShowTableBorders"
|-
| width="200" | [[Image:Banner OWASP Training page.gif|border|center|362x247px]]
| valign="top" |
=== Training Modules ===

* [[OWASP/Training/OWASP AppSensor Project|OWASP AppSensor Project]]

* [[OWASP/Training/OWASP Code Crawler Project|OWASP Code Crawler Project]]

* [[OWASP/Training/OWASP Code Review Project|OWASP Code Review Project]]

* [[OWASP/Training/OWASP DirBuster Project|OWASP DirBuster Project]]

* [[OWASP/Training/OWASP ESAPI|OWASP ESAPI]]

* [[OWASP/Training/Guided tour of OWASP Projects|Guided tour of OWASP Projects]]

* [[OWASP/Training/OWASP O2 Platform|OWASP O2 Platform]]

* [[OWASP/Training/OWASP Secure Coding Practices - Quick Reference Guide|OWASP Secure Coding Practices - Quick Reference Guide]]

* [[OWASP/Training/OWASP Software Assurance Maturity Model|OWASP Software Assurance Maturity Model (SAMM)]]

* [[OWASP/Training/OWASP Testing Guide|OWASP Testing Guide]]

* [[OWASP/Training/Threat Risk Modeling|OWASP Threat Risk Modeling]]

* [[OWASP/Training/OWASP Top 10|OWASP Top 10]]

* [[OWASP/Training/OWASP WebGoat Project|OWASP WebGoat Project]]

* [[OWASP/Training/OWASP WebScarab Project|OWASP WebScarab Project]]

* [[OWASP/Training/OWASP Webslayer Project|OWASP Webslayer Project]]

* [[OWASP/Training/Implementation of Enigform for Wordpress|OWASP Enigform (and Jify)]]

*[[OWASP/Training/OWASP Application Security Verification Standard (ASVS)|OWASP Application Security Verification Standard (ASVS)]]

|-

| valign="top" colspan="2" |
=== OWASP Appsec Tutorial Series, by [[user:Jerryhoff|Jerry Hoff]] ===

* [http://www.youtube.com/watch?v=CDbWvEwBBxo Episode 1: Appsec Basics]
*[http://www.youtube.com/watch?v=pypTYPaU7mM Episode 2: Injection Attacks]

=== Other Training Materials ===

* [http://code.google.com/p/owasp-training/downloads/detail?name=OWASP%20Default%20Training.zip&can=2&q= OWASP Default Training]

* [http://code.google.com/p/owasp-training/downloads/detail?name=London%20Training%20May%2028th%202010.zip&can=2&q= London Training May 28th 2010]

* [http://code.google.com/p/owasp-training/downloads/detail?name=London%20Training%20April%2016th%202010.zip&can=2&q= London Training April 16th 2010]

* [http://www.owasp.org/index.php/File:Developing_Compliant_Applications.pdf Developing Compliant Applications (pdf)]

* [http://www.owasp.org/index.php/File:Developing_Secure_Applications_with_OWASP.pdf Developing Secure Applications with OWASP (pdf)]

=== Videos ===

'''IBWAS'10 Training Day sessions, 16th Dec 2010, Lisbon'''

{{:IBWAS10 Training Day Sessions}}

|}

==== Library of Links ====

{| cellspacing="0" cellpadding="15" border="0" class="FCK__ShowTableBorders"
|-
| width="200" | [[Image:Banner OWASP Training page.gif|border|center|362x247px]]
|
* Access to the collection of all pages associated to the [[:Category:OWASP Training|'''OWASP Training''']].
|}

==== Training Templates ====

{| cellspacing="0" cellpadding="15" border="0" class="FCK__ShowTableBorders"
|-
| width="200" | [[Image:Banner OWASP Training page.gif|border|center|362x247px]]
|
* If you want to organize an OWASP Free Training event, please check out the [[:Category:OWASP Free Training Templates|'''Training Templates''']].
|}

==== Training Logos ====

{{Template:OWASP Training Pictures }}

{{Template:OWASP_Training_Pictures_View
| Media_File1 = '''PROPOSAL 1A'''[[Image:Logo 1A.JPG]]
| Media_File2 = '''PROPOSAL 1B - Approved Version'''[[Image:Logo 1B.JPG]]
}}

{{Template:OWASP_Training_Pictures_View
| Media_File1 = '''PROPOSAL 2'''[[Image:Logo 2.JPG]]
| Media_File2 = '''PROPOSAL 3'''[[Image:Logo 3.JPG]]
}}

{{Template:OWASP_Training_Pictures_View
| Media_File1 = '''PROPOSAL 4'''[[Image:Logo 4.JPG]]
| Media_File2 =

}}

|}

<headertabs />

[[Category:OWASP_Training|Training]]

2019-06-07T13:28:09Z

Gustavo.Arreaza:

File:1er evento-2.jpg

2019-06-07T13:25:59Z

Gustavo.Arreaza:

File:1er evento.jpg

2019-06-07T13:24:56Z

Gustavo.Arreaza:

Vina del Mar

2019-06-07T13:18:13Z

Gustavo.Arreaza: /* EVENTOS PASADOS */

{{Chapter Template|chaptername=Appsec Chile Viña|extra=The chapter leader is [mailto:gustavo.nievesarreaza@owasp.org Gustavo Nieves Arreaza].
|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-vinadelmar|emailarchives=http://lists.owasp.org/pipermail/owasp-vinadelmar
[linkedin:https://www.linkedin.com/in/gustavo-nieves-arreaza/]}}

''' Participation'''
OWASP Foundation (Overview Slides) is a professional association of global members and is open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.

= '''Nuestro Capítulo'''=
[[File:Logodef png (2).png|right|frameless]]
'''Owasp Viña del Mar''' nace en Abril 2019 como respuesta a la necesidad de evolución y desarrollo tecnológico a la región de Valparaíso, la cual comprende una de las áreas urbanas más importantes del país: la conurbación Valparaíso-Viña del Mar. Además de ello, posee dos importantes puertos de embarque de diversos tipos de productos chilenos de exportación: Valparaíso y San Antonio. y como si fuese poco en la ciudad de Valparaíso se encuentra la sede del Poder Legislativo: el Congreso Nacional.

Nuestro compromiso es aportar es compartir conocimiento y contribuir al desarrollo de la región, fomentando la utilización de OWASP con la finalidad de garantizar el software seguro, creando así nuevos espacios de integración entre la comunidad estudiantil, corporativa y gubernamental que permitan el crecimiento y el desarrollo de conocimiento.

== '''El Equipo''' ==
*Líder: '''[mailto:gustavo.nievesarreaza@owasp.org Gustavo Nieves Arreaza']''', ''' Gustavo Nieves Arreaza [https://www.linkedin.com/in/gustavo-nieves-arreaza/ Linkedin]'''
*Líder: coming soon !!!!
*Secretaria: '''[mailto:katrynvelasco@gmail.com Katryn Velasco']''', ''' Katryn Velasco [https://www.linkedin.com/in/katrynvelascomaldonado/ Linkedin]'''
*Community manager: '''Genesis Medina ,[https://www.linkedin.com/in/genesis-medina-622505183/ Linkedin]'''
*Colaborador Técnico :'''Julio Moreno''' ,'''[https://www.linkedin.com/in/julio-moreno-a3329515/ Linkedin]'''
*Colaboradores: '''Freddy Macho''', [https://cl.linkedin.com/in/freddymacho '''Linkedin''']
<blockquote></blockquote><blockquote>¡'''''Los colaboradores siempre son bienvenidos y tú puedes ser uno de ellos, Ayúdanos!'''''</blockquote>

=='''PRÓXIMOS EVENTOS'''==

==='''''Cyberseguridad, un entorno para quien?'''''===

Ya nos encontramos trabajando para traer a este espacio a expertos reconocidos que marcaran la diferencia compartiendo con todos los interesados en diferentes temas de seguridad, pronto le estaremos anunciando detalles de este evento.

=='''EVENTOS PASADOS'''==

=== Seguridad en Código Libre ===
Con el objetivo de potenciar las áreas de Seguridad informática de las empresas,persuadir a los estudiantes a incursionar en el área de seguridad informática, el pasado 11 y 12 de abrill del 2019, se llevo en colaboración con '''ISACA''' y la '''Universidad Andrés Bello - UNAB''' el evento Seguridad en Código Libre donde se convocó a más de 150 asistentes del área de TI, especialmente del área de seguridad informática como estudiantes de informática, los cuales mostraron su entusiasmo ante las charlas de exponentes que nos acompañaron desde Argentina, Venezuela,Canadá,Costa Rica y Chile.

El evento se realizó en dos sedes en simultaneo:
* Universidad Andrés Bello - UNAB, Antonio varas 807, subterraneo, Providencia
* HUB de Providencia, Av. Manuel Montt 101, Providencia

==== AGENDA DE CHARLAS ====
{| class="wikitable"
|'''Fecha'''
|'''Expositor'''
|'''Título'''
|'''Descripción'''
|-
|Jueves
11 de abril de 2019
|'''[https://www.linkedin.com/in/aiacobellisec/ Alejandro Iacobelli]''' – Argentina
Application Security Manager at Mercado Libre

'''[https://www.linkedin.com/in/rodrigo-fernandez-apas-240a26142/ Rodrigo Apas]''' – Argentina
Application Security Engineer at Mercado Libre
|Usando la mentalidad para cambiar el curso de la empresa.
Implementando el Red Teaming
|El enfoque que proponemos es al revés y creemos que la formación de Red Teaming es una buena manera de lograr este objetivo.
Compartir la experiencia obtenida formando Red Teaming, como influye en la cultura de los equipos de desarrolladores y cómo manejamos el pentesting externo entre otras cosas.
|-
|Jueves
11 de abril de 2019
|'''[https://www.linkedin.com/in/rtorresve/ Rafael Torres]''' – Venezuela
Experiencia en web scrappingpara probar las OWASP Top 10
|Usando Web scrapping para probar las OWASP Top 10
|Demostración del uso de un set de herramientas para realizar algunos test de seguridad sobre aplicaciones web (Docker, Selenium, Python)
|-
|Jueves
11 de abril de 2019
|'''[https://www.linkedin.com/in/gustavo-nieves-arreaza/ Gustavo Nieves]''' – Venezuela/Chile
Presidente capítulo de Owasp Viña del Mar
|Auditar un sitio web sin ser detectado (usando sitios web y plugins)
|Actualmente la mayoría de las compañías filtran la peticiones de los proxys como Burp,Owasp Zap y Accunetix, pero qué pasa si haces una auditoría solo haciendo consultas en sitios web y utilizando plugins gratuitos de los navegadores, demostraremos que las mayores fallas de una aplicación son como son configuradas, por eso llegaremos a mostrar lo importante que es desarrollar el modelo de amenazas, con tu ayuda, contra vectores de ataque conocidos.
|-
|Jueves
11 de abril de 2019
|'''[https://www.linkedin.com/in/tanya-janca-60ab0998/ Tanya Janca] - Canada'''Senior cloud advocate for Microsoft, specializing in application security
|Pushing Left Like a Boss
|With incident response and penetration testing currently receiving most of our application security dollars, it would appear that industry has decided to treat the symptom instead of the disease. “Pushing left” refers to starting security earlier in the SDLC; addressing the problem throughout the process. From scanning your code with a vulnerability scanner to red team exercises, developer education programs and bug bounties, this talk will show you how to ‘push left', like a boss.
|-
|Jueves
11 de abril de 2019
|'''[https://www.linkedin.com/in/danieliturrietagodoy/ Daniel Iturrieta]''' – Chile
Jefe de proyectos de Seguridad Senior en Redbanc
|La unidad hace la fuerza, la importancia de colaborar en tiempos de ciberamenaza
|En pleno auge de las cibertecnologias, plataformas cloud, planes de concientización, planes de continuidad operacional, etc, es de vital importancia entender que la unión hace la fuerza, este es el lema que se pretende imprimir en el ADN de las organizaciones y en los equipos de ciberseguridad hoy en día. La tendencia mundial es compartir en tiempo real la información de los ataques sufridos o descubiertos por las organizaciones, hoy ya existen tecnologías que permiten tanto a profesionales como organizaciones ser parte de esta visión de colaboración en pos de una internet más segura.
|-
|Viernes
12 de abril de 2019
|'''[https://www.linkedin.com/in/nahumdeavila/ Nahum Deavila]''' - Colombia
Instructor de Ethical hacking e investigador con enfoque al análisis de malware. Fundador del iSecurity Summit Colombia y el Chief Technology Officer de Netsat.
|Resiliencia y Ciberseguridad: una convergencia necesaria
|A diario las empresas sufren ciberataques que afectan directamente la integridad de la información y diferentes factores los cuales al final del día terminan por comprometer la continuidad de un negocio. Sin embargo, ser resilientes y estar preparados para levantarnos después de la tormenta es la principal necesidad que toda organización que ha sido comprometida por un atacante. Entender que sucedió, y como reaccionar es el rumbo que deberá tomar el grupo de personas encargadas de atender el incidente de seguridad.
|-
|Viernes
12 de abril de 2019
|'''[https://www.linkedin.com/in/bertin-b-9a8735126/ Bertin Bervis]''' – Costa Rica
Speaker en conferencias técnicas de seguridad informática por sus investigaciones en el campo ICS/OT.
|javascript y protocolos industriales : mala combinación
|caso de estudio practico sobre vulnerabilidades en aplicaciones web de equipos industriales que se pueden explotar gracias a la interacción de un protocolo industrial con propiedades específicas que convive e intercambia datos con la aplicación web del dispositivo industrial.
|-
|Viernes
12 de abril de 2019
|'''[https://www.linkedin.com/in/rudypinochet/ Rudy Pinochet]''' – Chile
Director de membresías académicas ISACA, al duo en seguridad en código de Mercado Libre
|Como testear Apache SSL y los más usados CMS (WordPress / Drupal / Joomla)
|Como usando herramientas gratuitas que nos ayuden a mitigar y identificar cómo los riesgos de seguridad en CMS.
|}

===OWASP Latam Tour 2019===
[[File:20190524 131413.jpg|center|thumb|Todos Juntos como la comunidad que somos: Expositores,Colaboradores y Participantes]]
[[File:20190524 130041.jpg|thumb]]
Este año Viña del Mar se sumó al OWASP Latam Tour 2019, y fue toda una experiencia llena de entusiasmo y desafíos constantes que logramos superar con éxito, nada de esto hubiese sido posible sin el apoyo de La Universidad Andrés Bello, al Senador Kenneth Pugh, a todos nuestros expositores quienes dieron lo mejor de si en cada una de sus charlas, y en especial a los asistentes, a todos ustedes queremos decirle Muchas Gracias por su apoyo, esperamos seguir creciendo en comunidad y contar con ustedes en los próximos eventos.

El evento se llevo a cabo el 24 de mayo, teniendo dos sedes en simultáneo:
* INACAP Sede Valparaiso, Auditorio Principal, Av. España 2255, Valparaiso
* Centros de Transmisión Simultanea UNAB, Piso 1, Auditorio 5, Santiago

==== AGENDA DE CHARLAS ====
{| class="wikitable"
|'''Fecha'''
|'''Expositor'''
|'''Título'''
|'''Descripción'''
|-
|24 de mayo 10:00 a 10:45 Hrs
|'''Philippe Delteil''' - Chile
Profesor en Universidad Abierta de Recoleta.'''[https://www.linkedin.com/in/philippe-delteil/ Linkedin]'''

'''Expositor de taller técnico en la DEFCON China 2019.'''
|Historias macabras de un Hacker en salud pública chilena.
|En el sector de salud pública con más de 14 millones de pacientes no tiene expertos en ciberseguridad cómo me fue posible obtener más de 3 millones de archivos de pacientes.
|-
|24 de mayo
11:00 a 11:45 Hrs
|'''Freddy Macho Nuñez''' - Venezuela
Ingeniero en Informática'''. [https://www.linkedin.com/in/freddymacho/ Linkedin]'''

'''Certificaciones: JSSP, JSSN, JSSAD, LAM 27001, LAM 22301, Lead Cybersecurity Manager ISO 27032, ITIL v3.'''
|Rompiendo el Portal SAP Vulnerabilidades que amenazan la seguridad de nuestros datos.
|
* Casos Fraude con SAP: Transacciones falsas Modificación de datos maestros.
* Sabotaje: Negación de servicio Modificación de informes financieros. Acceso a la red tecnológica (SCADA) por relaciones de confianza.
* Espionaje Robo de información financiera Robo de secretos corporativos. Robo de listas de proveedores y clientes Robo de datos de recursos humanos
|-
|24 de mayo
12:00 a 12:45 Hrs
|'''''Invitado Especial:'''''
'''Kenneth Pugh Olavarría''' - Chile

Senador por la 6ª Circunscripción, Región de Valparaíso. Integrante de las comisiones permanentes de Defensa Nacional e Intereses Marítimos, Pesca y Acuicultura
|Desafíos Legislativos Chilenos en Ciberseguridad
|Análisis critico de situación legislativa nacional y propuestas para abordar desafío.
|-
|24 de abril
13:00 a 14:30 Hrs
| colspan="3" |'''Break'''
|-
|24 de mayo
14:30 a 15:15 Hrs
|'''Gabrielle Botbol''' - Francia '''[https://www.linkedin.com/in/gabrielle-botbol-1bba1177/ Linkedin]'''
'''Cybersecurity blogger / Junior pentester / Leader of #WoSEC Paris chapter / Co-founder LRCCN'''
|Learn how training- En ingles Webinar
|How to set up a free self training in infosec with online resources (and other things).
|-
|24 de mayo
15:30 a 16:15 Hrs
|'''Alberto Daniel Hill''' - Uruguay
Ingeniero en Informática'''.[https://www.linkedin.com/in/nofear75/ Linkedin]'''

'''Hacker, Writer, Bitcoin, Blockchain consultant. Information Security Expert @Encrybit. Chief Security Officer @EraSwap.'''
|Nuevo deporte riesgoso: Hackeo de Criptomonedas.-Charla Webinar
|Explicando nuevo objetivo que más apetito causa en el cibercrimen.¿
La explosión de ataques exitosos para robar criptomonedas, fortunas obtenidas pero…. Unos cuantos a prison!
|-
|24 de mayo
16:30 a 17:15 Hrs
|'''Mikel Rufián Albarrán''' - España. '''[https://www.linkedin.com/in/mikelrufian/ Linkedin]'''
Managing Director – Head of Global Cyber Security & Intelligence Lead. Detective y Director de Seguridad del Ministerio del Interior Español.
'''Especializado en Esports, Ciberseguridad, Ciberinteligencia, Cibercriminología, Seguridad Inteligencia, Criminología.'''
|Ciberinteligencia Hiperconvergente: Nuevos retos IT/OT
|Con la globalización, la digitalización y la conectividad organizaciones de todo tipo de sectores se enfrentan al reto de identificar y aprovechar las oportunidades que ofrece el salto al mundo digital. El auge de la hiperconvergencia representa la combinación de componentes virtuales y físicos, entre los sistemas de información (IT) y redes de operaciones (OT) que interconectan los distintos elementos de producción y los sistemas de información corporativos (IT) la industria plantea nuevos retos de dependencia tecnológica para el desarrollo normal de las actividades de las organizaciones, lo que ha abierto una ventana hacia ciberriesgos y ciberamenazas hasta ahora desconocida. Es un pilar fundamental aplicar las medidas de Ciberinteligencia.
|}

=== TALLERES ===
Estaremos realizando dos talleres prácticos de 6 horas cada uno donde podrás aprender herramientas que te ayudarán a proteger aplicaciones web.

==== UBICACIÓN ====
Pendiente por confirmar en nueva fecha.

==== INFORMACIÓN IMPORTANTE ====
Debido a la toma que se lleva a cabo en la UNAB por parte los estudiantes, hemos sido notificados que los talleres dispuestos para el día sábado 25 de mayo no podrán realizarse, les pedimos nuestras disculpas y estar atentos a la nueva locación y fecha. Si ud. realizó el pago y desea la devolución por favor déjenos saber a través del correo electrónico: '''gustavo.nievesarreaza@owasp.org'''

==== AGENDA DE TALLERES ====
{| class="wikitable"
|'''Fecha/Duracion'''
|'''Instructor'''
|'''Título'''
|'''Descripción'''
|-
|Por Informar
|Gustavo Nieves Arreaza [https://www.linkedin.com/in/gustavo-nieves-arreaza/ '''Linkedin''']
'''Conferencias en la IEEE'''
|Taller:Desarrollo Seguro para Programadores con Owasp Esapi (Libreria de codigo utilizado para enseñar a como mitigar vulnerabilidades)
|
* Que es un Vector de Ataque
* Como hacer una auditoria Web y de Web Services.
* Descargar y Implementar las librerías Esapi en el IDE de Desarrollo
* Inventario de las Funciones del Owasp Esapi
* Usar las funciones de las librerías Esapi para mitigar vulnerabilidades del Owasp top Ten
|-
|'''Fecha/Duracion'''
|'''Instructor'''
|'''Título'''
|'''Descripción'''
|-
|Por Informar
|Bertin Bervis [https://www.linkedin.com/in/bertin-b-9a8735126/ '''Linkedin''']
'''Conferencista en la Defcon'''
|Taller:Seguridad Informática Industrial
|
* Introducción a la Cyber Seguridad industrial
* Historia y análisis de incidentes previos registrados
* Equipo industrial (PLCs,HMIs,equipo de red)
* Protocolos industriales
* Conceptos , recomendaciones de configuración de la red industrial
* Reconocimiento y detección de equipo industrial en la red
* Vulnerabilidades de equipos industriales en aplicaciones web Caso de estudio practico RCE, XSS Persistente .
|}

==== REGISTRO ====
Inscripción de talleres: h[https://www.eventbrite.com/e/taller-de-desarrollo-seguro-con-owasp-esapi-tickets-60936976136 ttps://www.eventbrite.com/e/taller-de-desarrollo-seguro-con-owasp-esapi-tickets-60936976136]

Los talleres tienen un valor de:
* Profesionales: $ 80.000 clp
* Estudiantes: $ 60.000 clp
Para pagos escribir al siguiente correo '''gustavo.nievesarreaza@owasp.org''' en el detalle del pago colocar Owasp Viña del Mar taller: (Indique nombre del taller: Desarrollo Seguro o Seguridad Industrial).

.
= Chapter Sponsors =

This chapter's yearly activity is being supported by the generous sponsorship of the following companies:

[[Category:Latin America]]

Vina del Mar

2019-05-31T14:36:50Z

Gustavo.Arreaza: /* OWASP Latam Tour 2019 */

File:20190524 151002.jpg

2019-05-31T14:35:08Z

Gustavo.Arreaza:

LatamTour2019-Viñadelmar3