https://wiki.owasp.org/api.php?action=feedcontributions&feedformat=atom&user=Jmorehouse 2026-04-20T21:53:35Z User contributions MediaWiki 1.27.2 https://wiki.owasp.org/index.php?title=Tampa&diff=205241 2015-12-15T13:18:39Z

<p>Jmorehouse: /* Presentation Archives */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leaders Jonathan Singer, Brian Beaudry, and Sunny Wear via the above mailing list. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> Our next meeting will be held in 2016. Subscribe to the above mailing list or LinkedIn group for more information.<br /> <br /> == Presentations ==<br /> <br /> TBD.<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com/contact-us/#St._Petersburg GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+106+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 106, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> 2015-Q4 - Secure Session Management - Brian Beaudry - Presentation Slides [http://www.slideshare.net/gpsec/secure-session-management here]<br /> <br /> OWASP Tampa Day 2014 - Shadow IT Does Not Have To Be Shady - Scott VanWart - Presentation Slides [https://www.owasp.org/images/b/b8/OTD_2014_-_Shadow-IT-Shady-FINAL.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Offensive Mobile Forensics - Joey Peloquin - Presentation Slides [https://www.owasp.org/images/0/06/OTD_2014_-_OMF_GPS.pdf here]<br /> <br /> OWASP Tampa Day 2014 - OWASP Top 10 for MVC 4 and Greater - James Davis - Presentation Slides [https://www.owasp.org/images/c/cb/OTD_2014_-_OWASPTop10forMVC.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Application Centric Mobile Application Security Model - Daniel Bender - Presentation Slides [https://www.owasp.org/images/4/42/OTD_2014_-_owasp-mobile.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Intern down for what? - Tony Turner - Presentation Slides [https://www.owasp.org/images/0/05/InternDown4What_edit.pdf here]<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=205239 2015-12-15T13:05:39Z

<p>Jmorehouse: /* Presentations */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leaders Jonathan Singer, Brian Beaudry, and Sunny Wear via the above mailing list. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> Our next meeting will be held in 2016. Subscribe to the above mailing list or LinkedIn group for more information.<br /> <br /> == Presentations ==<br /> <br /> TBD.<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com/contact-us/#St._Petersburg GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+106+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 106, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> OWASP Tampa Day 2014 - Shadow IT Does Not Have To Be Shady - Scott VanWart - Presentation Slides [https://www.owasp.org/images/b/b8/OTD_2014_-_Shadow-IT-Shady-FINAL.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Offensive Mobile Forensics - Joey Peloquin - Presentation Slides [https://www.owasp.org/images/0/06/OTD_2014_-_OMF_GPS.pdf here]<br /> <br /> OWASP Tampa Day 2014 - OWASP Top 10 for MVC 4 and Greater - James Davis - Presentation Slides [https://www.owasp.org/images/c/cb/OTD_2014_-_OWASPTop10forMVC.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Application Centric Mobile Application Security Model - Daniel Bender - Presentation Slides [https://www.owasp.org/images/4/42/OTD_2014_-_owasp-mobile.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Intern down for what? - Tony Turner - Presentation Slides [https://www.owasp.org/images/0/05/InternDown4What_edit.pdf here]<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=205238 2015-12-15T13:04:35Z

<p>Jmorehouse: /* Next Meeting */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leaders Jonathan Singer, Brian Beaudry, and Sunny Wear via the above mailing list. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> Our next meeting will be held in 2016. Subscribe to the above mailing list or LinkedIn group for more information.<br /> <br /> == Presentations ==<br /> <br /> '''Benjamin Watson, Reverse Engineering Android for Pride and Glory'''<br /> <br /> '''Abstract'''<br /> This presentation will serve as an introduction for those who want to dive into the art of reverse engineering Android applications and firmware. We will explore the inner workings of the Android architecture, traverse the landscape of reverse engineering tools and techniques, and propose some practical methodologies and workflows for all your bug hunting needs. <br /> <br /> '''Bio'''<br /> Benjamin Watson has over 7 dedicated years in application and mobile security. Prior to joining GuidePoint Security, Ben has been solving mobile &amp; application security problems for cutting edge companies in the financial services, eCommerce, and medical industries. Often Ben has been sought after for building application security programs from the ground up. This is due to his experience in not only developing testing methodologies, tools, and techniques, but his understanding and perspective around what it requires to build secure products. Ben has managed and lead efforts in large mobile application security service initiatives, and is also an experienced mobile security researcher. He currently focuses his efforts around discovering new exploitable vulnerability patterns in Android and iOS. He also has multiple published zero day vulnerabilities effecting various Android web browsers, and is the creator and curator of the Android assessment toolkit called Lobotomy.<br /> <br /> '''Sunny Wear, Care &amp; Feeding of Programmers: Addressing App Sec Gaps with HTTP Headers'''<br /> <br /> '''Abstract'''<br /> Ever found persistent gaps in your web application despite your programmers BEST efforts to mitigate them? Ever wondered if the seemingly endless list of vulnerabilities in your application would ever stop and how you will ever have all of the time and budget to address them all? Though there are no silver bullets, there may be some simple steps programmers can do to cover some of the inadvertent gaps left behind when addressing application security vulnerabilities. Join us at the OWASP December meeting for the talk entitled “Care and Feeding of Programmers: Addressing App Sec Gaps with HTTP Headers” as we look into possible solutions to address such gaps.<br /> <br /> '''Bio'''<br /> Sunny Wear is an application security architect. Her breadth of experience includes network, data, application and security architecture as well as programming across multiple languages and platforms. In her 20 years of professional experience, she has participated in the design and creation of many enterprise applications as well as the security testing aspects of platforms and services. She is the author of several security-related books including her most recent entitled [http://www.amazon.com/SCFM-Secure-Coding-Manual-Programmers/dp/1508929572 Secure Coding Field Manual: A Programmer's Guide to OWASP Top 10 and CWE/SANS Top 25], which assists programmers in more easily finding mitigations to commonly-identified vulnerabilities within applications. She conducts security talks and classes including “Web App Pentesting using BurpSuite” by ISC2 and is recently been an invited speaker for BSides Tampa.<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com/contact-us/#St._Petersburg GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+106+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 106, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> OWASP Tampa Day 2014 - Shadow IT Does Not Have To Be Shady - Scott VanWart - Presentation Slides [https://www.owasp.org/images/b/b8/OTD_2014_-_Shadow-IT-Shady-FINAL.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Offensive Mobile Forensics - Joey Peloquin - Presentation Slides [https://www.owasp.org/images/0/06/OTD_2014_-_OMF_GPS.pdf here]<br /> <br /> OWASP Tampa Day 2014 - OWASP Top 10 for MVC 4 and Greater - James Davis - Presentation Slides [https://www.owasp.org/images/c/cb/OTD_2014_-_OWASPTop10forMVC.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Application Centric Mobile Application Security Model - Daniel Bender - Presentation Slides [https://www.owasp.org/images/4/42/OTD_2014_-_owasp-mobile.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Intern down for what? - Tony Turner - Presentation Slides [https://www.owasp.org/images/0/05/InternDown4What_edit.pdf here]<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=205237 2015-12-15T13:03:42Z

<p>Jmorehouse: /* Welcome to the OWASP Tampa Local Chapter */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leaders Jonathan Singer, Brian Beaudry, and Sunny Wear via the above mailing list. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> Our next meeting will be held on ''Thursday, December 10th, 2015 from 6PM to 8PM''.<br /> <br /> Our first speaker will be Benjamin Watson from [http://www.guidepointsecurity.com GuidePoint Security]. Benjamin will be presenting '''Reverse Engineering Android for Pride and Glory.''' His abstract and bio are below.<br /> <br /> Our second speaker will be Sunny Wear from [http://www.fisglobal.com FIS Global]. Sunny will be presenting '''Care &amp; Feeding of Programmers: Addressing App Sec Gaps with HTTP Headers.''' Her abstract and bio are below.<br /> <br /> This will be my final Chapter Meeting as Chapter Leader. We will discuss the transition during the meeting as well.<br /> <br /> == Presentations ==<br /> <br /> '''Benjamin Watson, Reverse Engineering Android for Pride and Glory'''<br /> <br /> '''Abstract'''<br /> This presentation will serve as an introduction for those who want to dive into the art of reverse engineering Android applications and firmware. We will explore the inner workings of the Android architecture, traverse the landscape of reverse engineering tools and techniques, and propose some practical methodologies and workflows for all your bug hunting needs. <br /> <br /> '''Bio'''<br /> Benjamin Watson has over 7 dedicated years in application and mobile security. Prior to joining GuidePoint Security, Ben has been solving mobile &amp; application security problems for cutting edge companies in the financial services, eCommerce, and medical industries. Often Ben has been sought after for building application security programs from the ground up. This is due to his experience in not only developing testing methodologies, tools, and techniques, but his understanding and perspective around what it requires to build secure products. Ben has managed and lead efforts in large mobile application security service initiatives, and is also an experienced mobile security researcher. He currently focuses his efforts around discovering new exploitable vulnerability patterns in Android and iOS. He also has multiple published zero day vulnerabilities effecting various Android web browsers, and is the creator and curator of the Android assessment toolkit called Lobotomy.<br /> <br /> '''Sunny Wear, Care &amp; Feeding of Programmers: Addressing App Sec Gaps with HTTP Headers'''<br /> <br /> '''Abstract'''<br /> Ever found persistent gaps in your web application despite your programmers BEST efforts to mitigate them? Ever wondered if the seemingly endless list of vulnerabilities in your application would ever stop and how you will ever have all of the time and budget to address them all? Though there are no silver bullets, there may be some simple steps programmers can do to cover some of the inadvertent gaps left behind when addressing application security vulnerabilities. Join us at the OWASP December meeting for the talk entitled “Care and Feeding of Programmers: Addressing App Sec Gaps with HTTP Headers” as we look into possible solutions to address such gaps.<br /> <br /> '''Bio'''<br /> Sunny Wear is an application security architect. Her breadth of experience includes network, data, application and security architecture as well as programming across multiple languages and platforms. In her 20 years of professional experience, she has participated in the design and creation of many enterprise applications as well as the security testing aspects of platforms and services. She is the author of several security-related books including her most recent entitled [http://www.amazon.com/SCFM-Secure-Coding-Manual-Programmers/dp/1508929572 Secure Coding Field Manual: A Programmer's Guide to OWASP Top 10 and CWE/SANS Top 25], which assists programmers in more easily finding mitigations to commonly-identified vulnerabilities within applications. She conducts security talks and classes including “Web App Pentesting using BurpSuite” by ISC2 and is recently been an invited speaker for BSides Tampa.<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com/contact-us/#St._Petersburg GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+106+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 106, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> OWASP Tampa Day 2014 - Shadow IT Does Not Have To Be Shady - Scott VanWart - Presentation Slides [https://www.owasp.org/images/b/b8/OTD_2014_-_Shadow-IT-Shady-FINAL.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Offensive Mobile Forensics - Joey Peloquin - Presentation Slides [https://www.owasp.org/images/0/06/OTD_2014_-_OMF_GPS.pdf here]<br /> <br /> OWASP Tampa Day 2014 - OWASP Top 10 for MVC 4 and Greater - James Davis - Presentation Slides [https://www.owasp.org/images/c/cb/OTD_2014_-_OWASPTop10forMVC.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Application Centric Mobile Application Security Model - Daniel Bender - Presentation Slides [https://www.owasp.org/images/4/42/OTD_2014_-_owasp-mobile.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Intern down for what? - Tony Turner - Presentation Slides [https://www.owasp.org/images/0/05/InternDown4What_edit.pdf here]<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=203254 2015-11-10T15:14:44Z

<p>Jmorehouse: /* Presentations */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> Our next meeting will be held on ''Thursday, December 10th, 2015 from 6PM to 8PM''.<br /> <br /> Our first speaker will be Benjamin Watson from [http://www.guidepointsecurity.com GuidePoint Security]. Benjamin will be presenting '''Reverse Engineering Android for Pride and Glory.''' His abstract and bio are below.<br /> <br /> Our second speaker will be Sunny Wear from [http://www.fisglobal.com FIS Global]. Sunny will be presenting '''Care &amp; Feeding of Programmers: Addressing App Sec Gaps with HTTP Headers.''' Her abstract and bio are below.<br /> <br /> This will be my final Chapter Meeting as Chapter Leader. We will discuss the transition during the meeting as well.<br /> <br /> == Presentations ==<br /> <br /> '''Benjamin Watson, Reverse Engineering Android for Pride and Glory'''<br /> <br /> '''Abstract'''<br /> This presentation will serve as an introduction for those who want to dive into the art of reverse engineering Android applications and firmware. We will explore the inner workings of the Android architecture, traverse the landscape of reverse engineering tools and techniques, and propose some practical methodologies and workflows for all your bug hunting needs. <br /> <br /> '''Bio'''<br /> Benjamin Watson has over 7 dedicated years in application and mobile security. Prior to joining GuidePoint Security, Ben has been solving mobile &amp; application security problems for cutting edge companies in the financial services, eCommerce, and medical industries. Often Ben has been sought after for building application security programs from the ground up. This is due to his experience in not only developing testing methodologies, tools, and techniques, but his understanding and perspective around what it requires to build secure products. Ben has managed and lead efforts in large mobile application security service initiatives, and is also an experienced mobile security researcher. He currently focuses his efforts around discovering new exploitable vulnerability patterns in Android and iOS. He also has multiple published zero day vulnerabilities effecting various Android web browsers, and is the creator and curator of the Android assessment toolkit called Lobotomy.<br /> <br /> '''Sunny Wear, Care &amp; Feeding of Programmers: Addressing App Sec Gaps with HTTP Headers'''<br /> <br /> '''Abstract'''<br /> Ever found persistent gaps in your web application despite your programmers BEST efforts to mitigate them? Ever wondered if the seemingly endless list of vulnerabilities in your application would ever stop and how you will ever have all of the time and budget to address them all? Though there are no silver bullets, there may be some simple steps programmers can do to cover some of the inadvertent gaps left behind when addressing application security vulnerabilities. Join us at the OWASP December meeting for the talk entitled “Care and Feeding of Programmers: Addressing App Sec Gaps with HTTP Headers” as we look into possible solutions to address such gaps.<br /> <br /> '''Bio'''<br /> Sunny Wear is an application security architect. Her breadth of experience includes network, data, application and security architecture as well as programming across multiple languages and platforms. In her 20 years of professional experience, she has participated in the design and creation of many enterprise applications as well as the security testing aspects of platforms and services. She is the author of several security-related books including her most recent entitled [http://www.amazon.com/SCFM-Secure-Coding-Manual-Programmers/dp/1508929572 Secure Coding Field Manual: A Programmer's Guide to OWASP Top 10 and CWE/SANS Top 25], which assists programmers in more easily finding mitigations to commonly-identified vulnerabilities within applications. She conducts security talks and classes including “Web App Pentesting using BurpSuite” by ISC2 and is recently been an invited speaker for BSides Tampa.<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com/contact-us/#St._Petersburg GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+106+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 106, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> OWASP Tampa Day 2014 - Shadow IT Does Not Have To Be Shady - Scott VanWart - Presentation Slides [https://www.owasp.org/images/b/b8/OTD_2014_-_Shadow-IT-Shady-FINAL.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Offensive Mobile Forensics - Joey Peloquin - Presentation Slides [https://www.owasp.org/images/0/06/OTD_2014_-_OMF_GPS.pdf here]<br /> <br /> OWASP Tampa Day 2014 - OWASP Top 10 for MVC 4 and Greater - James Davis - Presentation Slides [https://www.owasp.org/images/c/cb/OTD_2014_-_OWASPTop10forMVC.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Application Centric Mobile Application Security Model - Daniel Bender - Presentation Slides [https://www.owasp.org/images/4/42/OTD_2014_-_owasp-mobile.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Intern down for what? - Tony Turner - Presentation Slides [https://www.owasp.org/images/0/05/InternDown4What_edit.pdf here]<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=203253 2015-11-10T15:12:41Z

<p>Jmorehouse: /* Next Meeting */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> Our next meeting will be held on ''Thursday, December 10th, 2015 from 6PM to 8PM''.<br /> <br /> Our first speaker will be Benjamin Watson from [http://www.guidepointsecurity.com GuidePoint Security]. Benjamin will be presenting '''Reverse Engineering Android for Pride and Glory.''' His abstract and bio are below.<br /> <br /> Our second speaker will be Sunny Wear from [http://www.fisglobal.com FIS Global]. Sunny will be presenting '''Care &amp; Feeding of Programmers: Addressing App Sec Gaps with HTTP Headers.''' Her abstract and bio are below.<br /> <br /> This will be my final Chapter Meeting as Chapter Leader. We will discuss the transition during the meeting as well.<br /> <br /> == Presentations ==<br /> <br /> '''Abstract'''<br /> This presentation will serve as an introduction for those who want to dive into the art of reverse engineering Android applications and firmware. We will explore the inner workings of the Android architecture, traverse the landscape of reverse engineering tools and techniques, and propose some practical methodologies and workflows for all your bug hunting needs. <br /> <br /> '''Bio'''<br /> Benjamin Watson has over 7 dedicated years in application and mobile security. Prior to joining GuidePoint Security, Ben has been solving mobile &amp; application security problems for cutting edge companies in the financial services, eCommerce, and medical industries. Often Ben has been sought after for building application security programs from the ground up. This is due to his experience in not only developing testing methodologies, tools, and techniques, but his understanding and perspective around what it requires to build secure products. Ben has managed and lead efforts in large mobile application security service initiatives, and is also an experienced mobile security researcher. He currently focuses his efforts around discovering new exploitable vulnerability patterns in Android and iOS. He also has multiple published zero day vulnerabilities effecting various Android web browsers, and is the creator and curator of the Android assessment toolkit called Lobotomy.<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com/contact-us/#St._Petersburg GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+106+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 106, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> OWASP Tampa Day 2014 - Shadow IT Does Not Have To Be Shady - Scott VanWart - Presentation Slides [https://www.owasp.org/images/b/b8/OTD_2014_-_Shadow-IT-Shady-FINAL.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Offensive Mobile Forensics - Joey Peloquin - Presentation Slides [https://www.owasp.org/images/0/06/OTD_2014_-_OMF_GPS.pdf here]<br /> <br /> OWASP Tampa Day 2014 - OWASP Top 10 for MVC 4 and Greater - James Davis - Presentation Slides [https://www.owasp.org/images/c/cb/OTD_2014_-_OWASPTop10forMVC.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Application Centric Mobile Application Security Model - Daniel Bender - Presentation Slides [https://www.owasp.org/images/4/42/OTD_2014_-_owasp-mobile.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Intern down for what? - Tony Turner - Presentation Slides [https://www.owasp.org/images/0/05/InternDown4What_edit.pdf here]<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=203244 2015-11-09T21:40:24Z

<p>Jmorehouse: /* Next Meeting */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> Our next meeting will be held on ''Thursday, December 10th, 2015 from 6PM to 8PM''.<br /> <br /> Our first speaker will be Benjamin Watson from [http://www.guidepointsecurity.com GuidePoint Security]. Benjamin will be presenting '''Reverse Engineering Android for Pride and Glory.''' His abstract and bio are below.<br /> <br /> We are looking for a second speaker. If you are interested, please contact the [http://scr.im/mascasa Chapter Leader]. This will be my final Chapter Meeting as Chapter Leader. We will discuss the transition during the meeting as well.<br /> <br /> == Presentations ==<br /> <br /> '''Abstract'''<br /> This presentation will serve as an introduction for those who want to dive into the art of reverse engineering Android applications and firmware. We will explore the inner workings of the Android architecture, traverse the landscape of reverse engineering tools and techniques, and propose some practical methodologies and workflows for all your bug hunting needs. <br /> <br /> '''Bio'''<br /> Benjamin Watson has over 7 dedicated years in application and mobile security. Prior to joining GuidePoint Security, Ben has been solving mobile &amp; application security problems for cutting edge companies in the financial services, eCommerce, and medical industries. Often Ben has been sought after for building application security programs from the ground up. This is due to his experience in not only developing testing methodologies, tools, and techniques, but his understanding and perspective around what it requires to build secure products. Ben has managed and lead efforts in large mobile application security service initiatives, and is also an experienced mobile security researcher. He currently focuses his efforts around discovering new exploitable vulnerability patterns in Android and iOS. He also has multiple published zero day vulnerabilities effecting various Android web browsers, and is the creator and curator of the Android assessment toolkit called Lobotomy.<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com/contact-us/#St._Petersburg GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+106+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 106, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> OWASP Tampa Day 2014 - Shadow IT Does Not Have To Be Shady - Scott VanWart - Presentation Slides [https://www.owasp.org/images/b/b8/OTD_2014_-_Shadow-IT-Shady-FINAL.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Offensive Mobile Forensics - Joey Peloquin - Presentation Slides [https://www.owasp.org/images/0/06/OTD_2014_-_OMF_GPS.pdf here]<br /> <br /> OWASP Tampa Day 2014 - OWASP Top 10 for MVC 4 and Greater - James Davis - Presentation Slides [https://www.owasp.org/images/c/cb/OTD_2014_-_OWASPTop10forMVC.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Application Centric Mobile Application Security Model - Daniel Bender - Presentation Slides [https://www.owasp.org/images/4/42/OTD_2014_-_owasp-mobile.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Intern down for what? - Tony Turner - Presentation Slides [https://www.owasp.org/images/0/05/InternDown4What_edit.pdf here]<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=203239 2015-11-09T21:38:23Z

<p>Jmorehouse: /* Next Meeting */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> Our next meeting will be held on ''Thursday, December 10th, 2015 from 6PM to 8PM''.<br /> <br /> Our first speaker will be Benjamin Watson from GuidePoint Security. Benjamin will be presenting '''Reverse Engineering Android for Pride and Glory.''' His abstract and bio are below.<br /> <br /> We are looking for a second speaker. If you are interested, please contact the [http://scr.im/mascasa Chapter Leader].<br /> <br /> '''Abstract'''<br /> This presentation will serve as an introduction for those who want to dive into the art of reverse engineering Android applications and firmware. We will explore the inner workings of the Android architecture, traverse the landscape of reverse engineering tools and techniques, and propose some practical methodologies and workflows for all your bug hunting needs. <br /> <br /> '''Bio'''<br /> Benjamin Watson has over 7 dedicated years in application and mobile security. Prior to joining GuidePoint Security, Ben has been solving mobile &amp; application security problems for cutting edge companies in the financial services, eCommerce, and medical industries. Often Ben has been sought after for building application security programs from the ground up. This is due to his experience in not only developing testing methodologies, tools, and techniques, but his understanding and perspective around what it requires to build secure products. Ben has managed and lead efforts in large mobile application security service initiatives, and is also an experienced mobile security researcher. He currently focuses his efforts around discovering new exploitable vulnerability patterns in Android and iOS. He also has multiple published zero day vulnerabilities effecting various Android web browsers, and is the creator and curator of the Android assessment toolkit called Lobotomy.<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com/contact-us/#St._Petersburg GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+106+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 106, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> OWASP Tampa Day 2014 - Shadow IT Does Not Have To Be Shady - Scott VanWart - Presentation Slides [https://www.owasp.org/images/b/b8/OTD_2014_-_Shadow-IT-Shady-FINAL.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Offensive Mobile Forensics - Joey Peloquin - Presentation Slides [https://www.owasp.org/images/0/06/OTD_2014_-_OMF_GPS.pdf here]<br /> <br /> OWASP Tampa Day 2014 - OWASP Top 10 for MVC 4 and Greater - James Davis - Presentation Slides [https://www.owasp.org/images/c/cb/OTD_2014_-_OWASPTop10forMVC.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Application Centric Mobile Application Security Model - Daniel Bender - Presentation Slides [https://www.owasp.org/images/4/42/OTD_2014_-_owasp-mobile.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Intern down for what? - Tony Turner - Presentation Slides [https://www.owasp.org/images/0/05/InternDown4What_edit.pdf here]<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=203234 2015-11-09T21:37:47Z

<p>Jmorehouse: /* Meeting Location */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> Our next meeting will be held on ''Thursday, December 10th, 2015 from 6PM to 8PM''.<br /> <br /> Our first speaker will be Benjamin Watson from GuidePoint Security. Benjamin will be presenting '''Reverse Engineering Android for Pride and Glory.''' His abstract and bio are below.<br /> <br /> We are looking for a second speaker. If you are interested, please contact the Chapter Leader.<br /> <br /> '''Abstract'''<br /> This presentation will serve as an introduction for those who want to dive into the art of reverse engineering Android applications and firmware. We will explore the inner workings of the Android architecture, traverse the landscape of reverse engineering tools and techniques, and propose some practical methodologies and workflows for all your bug hunting needs. <br /> <br /> '''Bio'''<br /> Benjamin Watson has over 7 dedicated years in application and mobile security. Prior to joining GuidePoint Security, Ben has been solving mobile &amp; application security problems for cutting edge companies in the financial services, eCommerce, and medical industries. Often Ben has been sought after for building application security programs from the ground up. This is due to his experience in not only developing testing methodologies, tools, and techniques, but his understanding and perspective around what it requires to build secure products. Ben has managed and lead efforts in large mobile application security service initiatives, and is also an experienced mobile security researcher. He currently focuses his efforts around discovering new exploitable vulnerability patterns in Android and iOS. He also has multiple published zero day vulnerabilities effecting various Android web browsers, and is the creator and curator of the Android assessment toolkit called Lobotomy.<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com/contact-us/#St._Petersburg GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+106+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 106, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> OWASP Tampa Day 2014 - Shadow IT Does Not Have To Be Shady - Scott VanWart - Presentation Slides [https://www.owasp.org/images/b/b8/OTD_2014_-_Shadow-IT-Shady-FINAL.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Offensive Mobile Forensics - Joey Peloquin - Presentation Slides [https://www.owasp.org/images/0/06/OTD_2014_-_OMF_GPS.pdf here]<br /> <br /> OWASP Tampa Day 2014 - OWASP Top 10 for MVC 4 and Greater - James Davis - Presentation Slides [https://www.owasp.org/images/c/cb/OTD_2014_-_OWASPTop10forMVC.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Application Centric Mobile Application Security Model - Daniel Bender - Presentation Slides [https://www.owasp.org/images/4/42/OTD_2014_-_owasp-mobile.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Intern down for what? - Tony Turner - Presentation Slides [https://www.owasp.org/images/0/05/InternDown4What_edit.pdf here]<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=203233 2015-11-09T21:37:26Z

<p>Jmorehouse: /* Next Meeting */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> Our next meeting will be held on ''Thursday, December 10th, 2015 from 6PM to 8PM''.<br /> <br /> Our first speaker will be Benjamin Watson from GuidePoint Security. Benjamin will be presenting '''Reverse Engineering Android for Pride and Glory.''' His abstract and bio are below.<br /> <br /> We are looking for a second speaker. If you are interested, please contact the Chapter Leader.<br /> <br /> '''Abstract'''<br /> This presentation will serve as an introduction for those who want to dive into the art of reverse engineering Android applications and firmware. We will explore the inner workings of the Android architecture, traverse the landscape of reverse engineering tools and techniques, and propose some practical methodologies and workflows for all your bug hunting needs. <br /> <br /> '''Bio'''<br /> Benjamin Watson has over 7 dedicated years in application and mobile security. Prior to joining GuidePoint Security, Ben has been solving mobile &amp; application security problems for cutting edge companies in the financial services, eCommerce, and medical industries. Often Ben has been sought after for building application security programs from the ground up. This is due to his experience in not only developing testing methodologies, tools, and techniques, but his understanding and perspective around what it requires to build secure products. Ben has managed and lead efforts in large mobile application security service initiatives, and is also an experienced mobile security researcher. He currently focuses his efforts around discovering new exploitable vulnerability patterns in Android and iOS. He also has multiple published zero day vulnerabilities effecting various Android web browsers, and is the creator and curator of the Android assessment toolkit called Lobotomy.<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com/contact-us/#St._Petersburg GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+206+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 206, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> OWASP Tampa Day 2014 - Shadow IT Does Not Have To Be Shady - Scott VanWart - Presentation Slides [https://www.owasp.org/images/b/b8/OTD_2014_-_Shadow-IT-Shady-FINAL.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Offensive Mobile Forensics - Joey Peloquin - Presentation Slides [https://www.owasp.org/images/0/06/OTD_2014_-_OMF_GPS.pdf here]<br /> <br /> OWASP Tampa Day 2014 - OWASP Top 10 for MVC 4 and Greater - James Davis - Presentation Slides [https://www.owasp.org/images/c/cb/OTD_2014_-_OWASPTop10forMVC.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Application Centric Mobile Application Security Model - Daniel Bender - Presentation Slides [https://www.owasp.org/images/4/42/OTD_2014_-_owasp-mobile.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Intern down for what? - Tony Turner - Presentation Slides [https://www.owasp.org/images/0/05/InternDown4What_edit.pdf here]<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=191258 2015-03-12T14:51:08Z

<p>Jmorehouse: /* Next Meeting */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> Our next meeting will be held on Thursday, March 19th from 6PM to 8PM.<br /> <br /> Our first speaker will be Jeremy “Howie” Howerton from Checkmarx. Howie will be presenting '''Warning Ahead: Security Storms are Brewing in Your JavaScript.''' His abstract and bio are below.<br /> <br /> '''Abstract'''<br /> JavaScript controls our lives ? we use it to zoom in and out of a map, to automatically schedule doctor appointments and to play online games. But have we ever properly considered the security state of this scripting<br /> language?<br /> <br /> Before dismissing the (in)security posture of JavaScript on the grounds of a client-side problem, consider the impact of JavaScript vulnerability exploitation to the enterprise: from stealing server-side data to infecting users with malware. Hackers are beginning to recognize this new playground and are quickly adding JavaScript exploitation tools to their Web attack arsenal.<br /> <br /> In this talk we explore the vulnerabilities behind JavaScript, including: 1) A new class of vulnerabilities unique only to JavaScript, 2) Vulnerabilities in 3rd-party platforms which are exploited through JavaScript code, 3) HTML5 is considered the NG-JavaScript. In turn, HTML5 introduces a new set of vulnerabilities<br /> <br /> '''Bio'''<br /> Howie is a Senior Application Security Consultant for the award winning SAST solution provider Checkmarx (www.checkmarx.com) In his 15 year career he has worked with some of the largest organizations in the world to define and implement cutting edge security programs within a diverse set of corporate environments. In addition to his application-specific security knowledge, Howie has extensive knowledge and experience at the host, malware, and network security layers. Previous to his current responsibilities at Checkmarx Howie held similar roles with TippingPoint and FireEye. Outside of work, Howie enjoys playing with his two kids and is an avid fan of college basketball (specifically, the Kentucky Wildcats).<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com/contact-us/#St._Petersburg GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+206+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 206, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> OWASP Tampa Day 2014 - Shadow IT Does Not Have To Be Shady - Scott VanWart - Presentation Slides [https://www.owasp.org/images/b/b8/OTD_2014_-_Shadow-IT-Shady-FINAL.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Offensive Mobile Forensics - Joey Peloquin - Presentation Slides [https://www.owasp.org/images/0/06/OTD_2014_-_OMF_GPS.pdf here]<br /> <br /> OWASP Tampa Day 2014 - OWASP Top 10 for MVC 4 and Greater - James Davis - Presentation Slides [https://www.owasp.org/images/c/cb/OTD_2014_-_OWASPTop10forMVC.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Application Centric Mobile Application Security Model - Daniel Bender - Presentation Slides [https://www.owasp.org/images/4/42/OTD_2014_-_owasp-mobile.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Intern down for what? - Tony Turner - Presentation Slides [https://www.owasp.org/images/0/05/InternDown4What_edit.pdf here]<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=191257 2015-03-12T14:50:20Z

<p>Jmorehouse: /* Next Meeting */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> Our next meeting will be held on Thursday, March 19th from 6PM to 8PM.<br /> <br /> Our first speaker will be Jeremy “Howie” Howerton from Checkmarx. Howie will be presenting '''Warning Ahead: Security Storms are Brewing in Your JavaScript.''' His abstract and bio are below.<br /> <br /> '''Abstract'''<br /> JavaScript controls our lives ? we use it to zoom in and out of a map, to automatically schedule doctor appointments and to play online games. But have we ever properly considered the security state of this scripting<br /> language?<br /> <br /> Before dismissing the (in)security posture of JavaScript on the grounds of a client-side problem, consider the impact of JavaScript vulnerability exploitation to the enterprise: from stealing server-side data to infecting users with malware. Hackers are beginning to recognize this new playground and are quickly adding JavaScript exploitation tools to their Web attack arsenal.<br /> <br /> In this talk we explore the vulnerabilities behind JavaScript, including:<br /> - A new class of vulnerabilities unique only to JavaScript<br /> - Vulnerabilities in 3rd-party platforms which are exploited through JavaScript code<br /> - HTML5 is considered the NG-JavaScript. In turn, HTML5 introduces a new set of vulnerabilities<br /> <br /> '''Bio'''<br /> Howie is a Senior Application Security Consultant for the award winning SAST solution provider Checkmarx (www.checkmarx.com) In his 15 year career he has worked with some of the largest organizations in the world to define and implement cutting edge security programs within a diverse set of corporate environments. In addition to his application-specific security knowledge, Howie has extensive knowledge and experience at the host, malware, and network security layers. Previous to his current responsibilities at Checkmarx Howie held similar roles with TippingPoint and FireEye. Outside of work, Howie enjoys playing with his two kids and is an avid fan of college basketball (specifically, the Kentucky Wildcats).<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com/contact-us/#St._Petersburg GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+206+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 206, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> OWASP Tampa Day 2014 - Shadow IT Does Not Have To Be Shady - Scott VanWart - Presentation Slides [https://www.owasp.org/images/b/b8/OTD_2014_-_Shadow-IT-Shady-FINAL.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Offensive Mobile Forensics - Joey Peloquin - Presentation Slides [https://www.owasp.org/images/0/06/OTD_2014_-_OMF_GPS.pdf here]<br /> <br /> OWASP Tampa Day 2014 - OWASP Top 10 for MVC 4 and Greater - James Davis - Presentation Slides [https://www.owasp.org/images/c/cb/OTD_2014_-_OWASPTop10forMVC.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Application Centric Mobile Application Security Model - Daniel Bender - Presentation Slides [https://www.owasp.org/images/4/42/OTD_2014_-_owasp-mobile.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Intern down for what? - Tony Turner - Presentation Slides [https://www.owasp.org/images/0/05/InternDown4What_edit.pdf here]<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=189287 2015-02-09T19:03:44Z

<p>Jmorehouse: /* Next Meeting */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be held on Thursday, March 19th from 6PM to 8PM. We are currently looking for speakers. As always, please email the [http://scr.im/mascasa Chapter Leader] if you would like to present or have any topics you are interested in.<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com/contact-us/#St._Petersburg GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+206+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 206, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> OWASP Tampa Day 2014 - Shadow IT Does Not Have To Be Shady - Scott VanWart - Presentation Slides [https://www.owasp.org/images/b/b8/OTD_2014_-_Shadow-IT-Shady-FINAL.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Offensive Mobile Forensics - Joey Peloquin - Presentation Slides [https://www.owasp.org/images/0/06/OTD_2014_-_OMF_GPS.pdf here]<br /> <br /> OWASP Tampa Day 2014 - OWASP Top 10 for MVC 4 and Greater - James Davis - Presentation Slides [https://www.owasp.org/images/c/cb/OTD_2014_-_OWASPTop10forMVC.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Application Centric Mobile Application Security Model - Daniel Bender - Presentation Slides [https://www.owasp.org/images/4/42/OTD_2014_-_owasp-mobile.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Intern down for what? - Tony Turner - Presentation Slides [https://www.owasp.org/images/0/05/InternDown4What_edit.pdf here]<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=187351 2014-12-26T14:53:43Z

<p>Jmorehouse: /* Presentation Archives */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be held in February or March of 2015. Check back often for an update. As always, please email the [http://scr.im/mascasa Chapter Leader] if you would like to present or have any topics you are interested in.<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com/contact-us/#St._Petersburg GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+206+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 206, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> OWASP Tampa Day 2014 - Shadow IT Does Not Have To Be Shady - Scott VanWart - Presentation Slides [https://www.owasp.org/images/b/b8/OTD_2014_-_Shadow-IT-Shady-FINAL.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Offensive Mobile Forensics - Joey Peloquin - Presentation Slides [https://www.owasp.org/images/0/06/OTD_2014_-_OMF_GPS.pdf here]<br /> <br /> OWASP Tampa Day 2014 - OWASP Top 10 for MVC 4 and Greater - James Davis - Presentation Slides [https://www.owasp.org/images/c/cb/OTD_2014_-_OWASPTop10forMVC.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Application Centric Mobile Application Security Model - Daniel Bender - Presentation Slides [https://www.owasp.org/images/4/42/OTD_2014_-_owasp-mobile.pdf here]<br /> <br /> OWASP Tampa Day 2014 - Intern down for what? - Tony Turner - Presentation Slides [https://www.owasp.org/images/0/05/InternDown4What_edit.pdf here]<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=File:InternDown4What_edit.pdf&diff=187350 2014-12-26T14:49:18Z

<p>Jmorehouse: Presentation given by Tony Turner at OWASP Tampa Day 2014. Most of us have a hard time finding qualified security professionals. Most junior aspiring infosec folks have a hard time proving they are qualified enough for us to hire. This is a huge gap th...</p> <hr /> <div>Presentation given by Tony Turner at OWASP Tampa Day 2014. Most of us have a hard time finding qualified security professionals. Most junior aspiring infosec folks have a hard time proving they are qualified enough for us to hire. This is a huge gap that many of us are struggling to fill. Internships provide a really low risk way for us to evaluate and mentor aspiring professionals. This talk will discuss how you can build an effective internship program at your employer and get involved in the local community to build an engaging pool of enthusiasts with the skills, drive and moral compass to be successful. We will also discuss what comes after the internship, and how to retain the interest of interns and help them meet their own goals. Stronger communities are infectious and breed amazing opportunities not only for organizations drawing from these talent pools but also for the next generation of professionals looking for ways to break in to the industry. Do interesting work and engage!</div>

Jmorehouse https://wiki.owasp.org/index.php?title=File:OTD_2014_-_Shadow-IT-Shady-FINAL.pdf&diff=187330 2014-12-24T16:34:28Z

<p>Jmorehouse: Presentation given by Joey Peloquin (Standing in for Scott VanWart) at OWASP Tampa Day 2014. Learn how to eliminate the catch-22 between being agile and being secure and compliant by providing complete visibility, enforcing sophisticated policies, and...</p> <hr /> <div>Presentation given by Joey Peloquin (Standing in for Scott VanWart) at OWASP Tampa Day 2014. Learn how to eliminate the catch-22 between being agile and being secure and compliant by providing complete visibility, enforcing sophisticated policies, and protecting data in cloud apps.</div>

Jmorehouse https://wiki.owasp.org/index.php?title=File:OTD_2014_-_OWASPTop10forMVC.pdf&diff=187329 2014-12-24T16:30:52Z

<p>Jmorehouse: Presentation given by James Davis at OWASP Tampa Day 2014. Showing how MVC, .NET and IIS can solve the low hanging fruit of the OWASP Top 10.</p> <hr /> <div>Presentation given by James Davis at OWASP Tampa Day 2014. Showing how MVC, .NET and IIS can solve the low hanging fruit of the OWASP Top 10.</div>

Jmorehouse https://wiki.owasp.org/index.php?title=File:OTD_2014_-_owasp-mobile.pdf&diff=187328 2014-12-24T16:29:58Z

<p>Jmorehouse: Presentation given by Daniel Bender at OWASP Tampa Day 2014. The mobile application eco-system presents numerous challenges to organizations that seek to apply access control or authorization models to applications. These challenges include the volume...</p> <hr /> <div>Presentation given by Daniel Bender at OWASP Tampa Day 2014. The mobile application eco-system presents numerous challenges to organizations that seek to apply access control or authorization models to applications. These challenges include the volume of applications, the complexity of the applications, the limitations of the mobile operating system, the limitations on mobile device management solutions, and the rich interactions that mobile applications have with network based services. When presented with the overwhelming desire to do something, organizations may implement rudimentary blacklists of applications; however, as this presentation will discuss, this approach is not scalable and vastly underestimates the complexity of the mobile eco-system. This presentation will cite examples of organizations that are applying a variety of solutions to this problem and present questions that security professionals should consider when designing solutions.</div>

Jmorehouse https://wiki.owasp.org/index.php?title=File:OTD_2014_-_OMF_GPS.pdf&diff=187327 2014-12-24T16:27:23Z

<p>Jmorehouse: Presentation given by Joey Peloquin at OWASP Tampa Day 2014. This talk will educate attendees on some of the tools that can be used for this type of review, the storage location on the device for the most interesting data, and examples of data leakage...</p> <hr /> <div>Presentation given by Joey Peloquin at OWASP Tampa Day 2014. This talk will educate attendees on some of the tools that can be used for this type of review, the storage location on the device for the most interesting data, and examples of data leakage from actual analysis.</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=187066 2014-12-15T19:11:28Z

<p>Jmorehouse: </p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be held in February or March of 2015. Check back often for an update. As always, please email the [http://scr.im/mascasa Chapter Leader] if you would like to present or have any topics you are interested in.<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com/contact-us/#St._Petersburg GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+206+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 206, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=187065 2014-12-15T19:10:55Z

<p>Jmorehouse: </p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be held in February or March of 2015. Check back often for an update. As always, please email the [http://scr.im/mascasa Chapter Leader] if you would like to present or have any topics you are interested in.<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com/contact-us/#Saint GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+206+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 206, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=187064 2014-12-15T19:08:46Z

<p>Jmorehouse: /* Next Meeting */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be held in February or March of 2015. Check back often for an update. As always, please email the [http://scr.im/mascasa Chapter Leader] if you would like to present or have any topics you are interested in.<br /> <br /> == Meeting Location ==<br /> <br /> OWASP Tampa Day 2014 will be held at [http://www.wellcare.com WellCare Health Plans Inc] located at [https://www.google.com/maps/search/WellCare+Health+Plans+Inc+-+8745+Henderson+Rd+Tampa,+FL+33634/@28.030946,-82.5489735,17z/data=!3m1!4b1 8745 Henderson Road, Renaissance Centre, Tampa, FL 33634]. Parking is free if you park in any unmarked spots in the garage at the north end of the complex.<br /> <br /> == Presentation Archives ==<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=183404 2014-10-07T14:33:26Z

<p>Jmorehouse: /* Meeting Location */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be the annual OWASP Tampa Day for 2014. It will be held on Monday, November 3, 2014 from 10AM EDT to 4PM EDT at [http://www.wellcare.com WellCare Health Plans Inc.]. Registration is free and tickets are available from [https://www.eventbrite.com/e/owasp-tampa-day-2014-tickets-13541995473 here].<br /> <br /> This year we are doing a formal Call For Papers (CFP) for the presentations. If you are interested in presenting this year, please complete the CFP form located [http://bit.ly/owasptd2014cfp here].<br /> <br /> == Meeting Location ==<br /> <br /> OWASP Tampa Day 2014 will be held at [http://www.wellcare.com WellCare Health Plans Inc] located at [https://www.google.com/maps/search/WellCare+Health+Plans+Inc+-+8745+Henderson+Rd+Tampa,+FL+33634/@28.030946,-82.5489735,17z/data=!3m1!4b1 8745 Henderson Road, Renaissance Centre, Tampa, FL 33634]. Parking is free if you park in any unmarked spots in the garage at the north end of the complex.<br /> <br /> == Presentation Archives ==<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=183403 2014-10-07T14:32:27Z

<p>Jmorehouse: /* Meeting Location */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be the annual OWASP Tampa Day for 2014. It will be held on Monday, November 3, 2014 from 10AM EDT to 4PM EDT at [http://www.wellcare.com WellCare Health Plans Inc.]. Registration is free and tickets are available from [https://www.eventbrite.com/e/owasp-tampa-day-2014-tickets-13541995473 here].<br /> <br /> This year we are doing a formal Call For Papers (CFP) for the presentations. If you are interested in presenting this year, please complete the CFP form located [http://bit.ly/owasptd2014cfp here].<br /> <br /> == Meeting Location ==<br /> <br /> OWASP Tampa Day 2014 will be held at [http://www.wellcare.com WellCare Health Plans Inc] located at [https://www.google.com/maps/place/WellCare+Health+Plans+Inc/@28.030092,-82.549432,17z/data=!3m1!4b1!4m2!3m1!1s0x88c2c1c2be3b9ebb:0xb6bb4a2efb2518fd 8745 Henderson Road, Renaissance Centre, Tampa, FL 33634]. Parking is free if you park in any unmarked spots in the garage at the north end of the complex.<br /> <br /> == Presentation Archives ==<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=183375 2014-10-07T01:48:40Z

<p>Jmorehouse: /* Meeting Location */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be the annual OWASP Tampa Day for 2014. It will be held on Monday, November 3, 2014 from 10AM EDT to 4PM EDT at [http://www.wellcare.com WellCare Health Plans Inc.]. Registration is free and tickets are available from [https://www.eventbrite.com/e/owasp-tampa-day-2014-tickets-13541995473 here].<br /> <br /> This year we are doing a formal Call For Papers (CFP) for the presentations. If you are interested in presenting this year, please complete the CFP form located [http://bit.ly/owasptd2014cfp here].<br /> <br /> == Meeting Location ==<br /> <br /> OWASP Tampa Day 2014 will be held at [http://www.wellcare.com WellCare Health Plans Inc] located at [https://www.google.com/maps/place/WellCare+Health+Plans+Inc/@28.030092,-82.549432,17z/data=!3m1!4b1!4m2!3m1!1s0x88c2c1c2be3b9ebb:0xb6bb4a2efb2518fd 8725 Henderson Road, Renaissance Centre, Tampa, FL 33634]. Parking is free and you park in any unmarked spots in the garage at the north end of the complex.<br /> <br /> == Presentation Archives ==<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=183370 2014-10-07T01:17:01Z

<p>Jmorehouse: /* Meeting Location */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be the annual OWASP Tampa Day for 2014. It will be held on Monday, November 3, 2014 from 10AM EDT to 4PM EDT at [http://www.wellcare.com WellCare Health Plans Inc.]. Registration is free and tickets are available from [https://www.eventbrite.com/e/owasp-tampa-day-2014-tickets-13541995473 here].<br /> <br /> This year we are doing a formal Call For Papers (CFP) for the presentations. If you are interested in presenting this year, please complete the CFP form located [http://bit.ly/owasptd2014cfp here].<br /> <br /> == Meeting Location ==<br /> <br /> OWASP Tampa Day 2014 will be held at [http://www.wellcare.com WellCare Health Plans Inc] located at [https://www.google.com/maps/place/WellCare+Health+Plans+Inc/@28.030092,-82.549432,17z/data=!3m1!4b1!4m2!3m1!1s0x88c2c1c2be3b9ebb:0xb6bb4a2efb2518fd 8725 Henderson Rd Tampa, FL 33634]. Parking is free and you park in any unmarked spots in the garage at the north end of the complex.<br /> <br /> == Presentation Archives ==<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=183369 2014-10-07T01:16:43Z

<p>Jmorehouse: /* Next Meeting */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be the annual OWASP Tampa Day for 2014. It will be held on Monday, November 3, 2014 from 10AM EDT to 4PM EDT at [http://www.wellcare.com WellCare Health Plans Inc.]. Registration is free and tickets are available from [https://www.eventbrite.com/e/owasp-tampa-day-2014-tickets-13541995473 here].<br /> <br /> This year we are doing a formal Call For Papers (CFP) for the presentations. If you are interested in presenting this year, please complete the CFP form located [http://bit.ly/owasptd2014cfp here].<br /> <br /> == Meeting Location ==<br /> <br /> OWASP Tampa Day 2014 will be held at [http://www.wellcare.com WellCare Health Plans Inc] located at [https://www.google.com/maps/place/WellCare+Health+Plans+Inc/@28.030092,-82.549432,17z/data=!3m1!4b1!4m2!3m1!1s0x88c2c1c2be3b9ebb:0xb6bb4a2efb2518fd 8725 Henderson Rd Tampa, FL 33634]. Parking is free and you park in any unsigned spots in the garage at the north end of the complex.<br /> <br /> == Presentation Archives ==<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=183368 2014-10-07T01:00:19Z

<p>Jmorehouse: /* Meeting Location */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be the annual OWASP Tampa Day for 2014. It will be held on Monday, November 3, 2014 from 10AM EDT to 4PM EDT at [http://www.wellcare.com WellCare Health Plans Inc.]. Registration is free and tickets are available from here.<br /> <br /> This year we are doing a formal Call For Papers (CFP) for the presentations. If you are interested in presenting this year, please complete the CFP form located [http://bit.ly/owasptd2014cfp here].<br /> <br /> == Meeting Location ==<br /> <br /> OWASP Tampa Day 2014 will be held at [http://www.wellcare.com WellCare Health Plans Inc] located at [https://www.google.com/maps/place/WellCare+Health+Plans+Inc/@28.030092,-82.549432,17z/data=!3m1!4b1!4m2!3m1!1s0x88c2c1c2be3b9ebb:0xb6bb4a2efb2518fd 8725 Henderson Rd Tampa, FL 33634]. Parking is free and you park in any unsigned spots in the garage at the north end of the complex.<br /> <br /> == Presentation Archives ==<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=183367 2014-10-07T00:59:42Z

<p>Jmorehouse: /* Meeting Location */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be the annual OWASP Tampa Day for 2014. It will be held on Monday, November 3, 2014 from 10AM EDT to 4PM EDT at [http://www.wellcare.com WellCare Health Plans Inc.]. Registration is free and tickets are available from here.<br /> <br /> This year we are doing a formal Call For Papers (CFP) for the presentations. If you are interested in presenting this year, please complete the CFP form located [http://bit.ly/owasptd2014cfp here].<br /> <br /> == Meeting Location ==<br /> <br /> OWASP Tampa Day 2014 will be held at [http://www.wellcare.com WellCare Health Plans Inc] located at [https://www.google.com/maps/place/WellCare+Health+Plans+Inc/@28.030092,-82.549432,17z/data=!3m1!4b1!4m2!3m1!1s0x88c2c1c2be3b9ebb:0xb6bb4a2efb2518fd 8725 Henderson Rd Tampa, FL 33634]. You can park anywhere in the garage at the north end of the complex.<br /> <br /> == Presentation Archives ==<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=183366 2014-10-07T00:57:00Z

<p>Jmorehouse: /* Next Meeting */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be the annual OWASP Tampa Day for 2014. It will be held on Monday, November 3, 2014 from 10AM EDT to 4PM EDT at [http://www.wellcare.com WellCare Health Plans Inc.]. Registration is free and tickets are available from here.<br /> <br /> This year we are doing a formal Call For Papers (CFP) for the presentations. If you are interested in presenting this year, please complete the CFP form located [http://bit.ly/owasptd2014cfp here].<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+206+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 206, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=183365 2014-10-07T00:53:39Z

<p>Jmorehouse: /* Next Meeting */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be the annual OWASP Tampa Day for 2014. It will be held on Monday, November 3, 2014 from 10AM EDT to 4PM EDT at WellCare. Registration is free and tickets are available from here.<br /> <br /> This year we are doing a formal Call For Papers (CFP) for the presentations. If you are interested in presenting this year, please complete the CFP form located [http://bit.ly/owasptd2014cfp here].<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+206+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 206, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=183120 2014-09-30T23:26:17Z

<p>Jmorehouse: /* Next Meeting */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting with be in 2014-Q4 and will be the annual OWASP Tampa day event. Check back here often for updates!<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+206+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 206, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=183119 2014-09-30T23:25:34Z

<p>Jmorehouse: /* Presentation Archives */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will on Tuesday, September 30, 2014 from 6pm to 8pm. Jonathan Singer, Security Consultant @ GuidePoint Security, will be presenting &quot;Do we really know the Top 10?&quot; Following Jon's presentation, we will have a planning session for OWASP Tampa Day 2014.<br /> <br /> The following is an agenda for our next meeting:<br /> &lt;UL&gt;<br /> &lt;LI&gt;5:45 PM to 6:00 PM - Check-in<br /> &lt;LI&gt;6:00 PM to 7:00 PM - Do we really know the Top 10? - Jonathan Singer<br /> &lt;LI&gt;7:00 PM to 7:15 PM - Break<br /> &lt;LI&gt;7:15 PM to 8:00 PM - OWASP Tampa Day 2014 Planning Session<br /> &lt;/UL&gt;<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+206+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 206, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> 2014-Q3 - Do we really know the OWASP Top 10? - Jon Singer - Presentation Slides [https://www.owasp.org/images/3/34/Do_we_really_know_the_OWASP_Top_10.pdf here]<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=File:Do_we_really_know_the_OWASP_Top_10.pdf&diff=183118 2014-09-30T23:24:48Z

<p>Jmorehouse: Jon Singer's presentation from OWASP Tampa on September 30, 2014 on 'Do we really know the OWASP Top 10.'</p> <hr /> <div>Jon Singer's presentation from OWASP Tampa on September 30, 2014 on 'Do we really know the OWASP Top 10.'</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=182762 2014-09-23T18:06:29Z

<p>Jmorehouse: /* Next Meeting */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will on Tuesday, September 30, 2014 from 6pm to 8pm. Jonathan Singer, Security Consultant @ GuidePoint Security, will be presenting &quot;Do we really know the Top 10?&quot; Following Jon's presentation, we will have a planning session for OWASP Tampa Day 2014.<br /> <br /> The following is an agenda for our next meeting:<br /> &lt;UL&gt;<br /> &lt;LI&gt;5:45 PM to 6:00 PM - Check-in<br /> &lt;LI&gt;6:00 PM to 7:00 PM - Do we really know the Top 10? - Jonathan Singer<br /> &lt;LI&gt;7:00 PM to 7:15 PM - Break<br /> &lt;LI&gt;7:15 PM to 8:00 PM - OWASP Tampa Day 2014 Planning Session<br /> &lt;/UL&gt;<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+206+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 206, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=182761 2014-09-23T18:05:39Z

<p>Jmorehouse: /* Next Meeting */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will on Thursday, June 5, 2013 from 6pm to 8pm. Jonathan Singer, Security Consultant @ GuidePoint Security, will be presenting &quot;Do we really know the Top 10?&quot; Following Jon's presentation, we will have a planning session for OWASP Tampa Day 2014.<br /> <br /> The following is an agenda for our next meeting:<br /> &lt;UL&gt;<br /> &lt;LI&gt;5:45 PM to 6:00 PM - Check-in<br /> &lt;LI&gt;6:00 PM to 7:00 PM - Do we really know the Top 10? - Jonathan Singer<br /> &lt;LI&gt;7:00 PM to 7:15 PM - Break<br /> &lt;LI&gt;7:15 PM to 8:00 PM - OWASP Tampa Day 2014 Planning Session<br /> &lt;/UL&gt;<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+206+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 206, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=174704 2014-05-10T15:56:55Z

<p>Jmorehouse: /* Next Meeting */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will on Thursday, June 5, 2013 from 6pm to 8pm. Check back often for an update on the speakers and presentations.<br /> <br /> The following is an agenda for our next meeting:<br /> &lt;UL&gt;<br /> &lt;LI&gt;5:45 PM to 6:00 PM - Check-in<br /> &lt;LI&gt;6:00 PM to 7:00 PM - Presentation<br /> &lt;LI&gt;7:00 PM to 7:15 PM - Break<br /> &lt;LI&gt;7:15 PM to 8:00 PM - Presentation<br /> &lt;/UL&gt;<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+206+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 206, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=170230 2014-03-16T14:37:10Z

<p>Jmorehouse: /* Next Meeting */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be held in early June. Check back often for an update.<br /> <br /> The following is an agenda for our next meeting:<br /> &lt;UL&gt;<br /> &lt;LI&gt;5:45 PM to 6:00 PM - Check-in<br /> &lt;LI&gt;6:00 PM to 7:00 PM - Presentation<br /> &lt;LI&gt;7:00 PM to 7:15 PM - Break<br /> &lt;LI&gt;7:15 PM to 8:00 PM - Presentation<br /> &lt;/UL&gt;<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+206+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 206, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=170229 2014-03-16T14:33:44Z

<p>Jmorehouse: /* Presentation Archives */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be held on Wednesday, March 12 from 6 PM to 8 PM at GuidePoint Security in Downtown Saint Petersburg. We will have two presentations. The first, from Carl Brothers of F5 Networks is entitled ''Herding Cats''. The second, from Ramece Cave of Solutionary is entitled ''The Enemy Within''. Information on both presenters and their presentations is below.<br /> <br /> The following is an agenda for our next meeting:<br /> &lt;UL&gt;<br /> &lt;LI&gt;5:45 PM to 6:00 PM - Check-in<br /> &lt;LI&gt;6:00 PM to 7:00 PM - Presentation<br /> &lt;LI&gt;7:00 PM to 7:15 PM - Break<br /> &lt;LI&gt;7:15 PM to 8:00 PM - Presentation<br /> &lt;/UL&gt;<br /> <br /> '''Herding Cats - Carl Brothers, F5 Networks'''<br /> Ensuring that we can provide security and availability for on premise apps and cloud based apps, that are increasingly being accessed from uncontrolled devices feels like a never ending struggle to keep the cats in the corral. Let’s discuss the tools and approaches we can use to ensure that security &lt;&gt; decreased performance, revenue or customer satisfaction.<br /> <br /> '''Carl Brother Biography'''<br /> Carl Brothers joined F5 as a Field Systems Engineer after many years of being an F5 customer. Carl's previous roles have ranged from operations to systems engineering at a top 30 e-tailer and a global manufacturing company. Carl has considerable experience with web-based and virtualization technologies, including Citrix, Microsoft and VMware.<br /> <br /> '''The Enemy Within - Ramece Cave, Solutionary'''<br /> Web Server Intel Correlation (might change the name). The presentation will discuss how and why web servers play a role in intelligence gathering and threat correlation. It will go over previous hacking campaigns and how data was leveraged for exploitation or exfiltration, and how compromised servers are being used.<br /> <br /> '''Ramece Cave Biography'''<br /> Began working in information security in the Internet Abuse department at UUNET in 1999. Over the past 10 years have been focusing on forensics, reverse engineering, and malware analysis; in various incident response and SOC positions. Currently work as Research Analyst at Solutionary.<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+206+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 206, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> 2014-Q1 - Herding Cats - Carl Brothers - Presentation Slides [https://www.owasp.org/images/f/fc/Herding_Cats_-_OWASP%2C_Tampa_3-12-2014.pdf here]<br /> <br /> 2014-Q1 - The Enemy Within - Ramece Cave - Presentation Slides [https://www.owasp.org/images/c/c2/TheEnemyWithin.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=File:TheEnemyWithin.pdf&diff=170228 2014-03-16T14:32:30Z

<p>Jmorehouse: The Enemy Within - Ramece Cave, Solutionary Web Server Intel Correlation (might change the name). The presentation will discuss how and why web servers play a role in intelligence gathering and threat correlation. It will go over previous hacking campa...</p> <hr /> <div>The Enemy Within - Ramece Cave, Solutionary Web Server Intel Correlation (might change the name). The presentation will discuss how and why web servers play a role in intelligence gathering and threat correlation. It will go over previous hacking campaigns and how data was leveraged for exploitation or exfiltration, and how compromised servers are being used.</div>

Jmorehouse https://wiki.owasp.org/index.php?title=File:Herding_Cats_-_OWASP,_Tampa_3-12-2014.pdf&diff=170227 2014-03-16T14:32:06Z

<p>Jmorehouse: Herding Cats - Carl Brothers, F5 Networks Ensuring that we can provide security and availability for on premise apps and cloud based apps, that are increasingly being accessed from uncontrolled devices feels like a never ending struggle to keep the cat...</p> <hr /> <div>Herding Cats - Carl Brothers, F5 Networks Ensuring that we can provide security and availability for on premise apps and cloud based apps, that are increasingly being accessed from uncontrolled devices feels like a never ending struggle to keep the cats in the corral. Let’s discuss the tools and approaches we can use to ensure that security &lt;&gt; decreased performance, revenue or customer satisfaction.</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=169215 2014-03-02T02:19:23Z

<p>Jmorehouse: /* Next Meeting */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be held on Wednesday, March 12 from 6 PM to 8 PM at GuidePoint Security in Downtown Saint Petersburg. We will have two presentations. The first, from Carl Brothers of F5 Networks is entitled ''Herding Cats''. The second, from Ramece Cave of Solutionary is entitled ''The Enemy Within''. Information on both presenters and their presentations is below.<br /> <br /> The following is an agenda for our next meeting:<br /> &lt;UL&gt;<br /> &lt;LI&gt;5:45 PM to 6:00 PM - Check-in<br /> &lt;LI&gt;6:00 PM to 7:00 PM - Presentation<br /> &lt;LI&gt;7:00 PM to 7:15 PM - Break<br /> &lt;LI&gt;7:15 PM to 8:00 PM - Presentation<br /> &lt;/UL&gt;<br /> <br /> '''Herding Cats - Carl Brothers, F5 Networks'''<br /> Ensuring that we can provide security and availability for on premise apps and cloud based apps, that are increasingly being accessed from uncontrolled devices feels like a never ending struggle to keep the cats in the corral. Let’s discuss the tools and approaches we can use to ensure that security &lt;&gt; decreased performance, revenue or customer satisfaction.<br /> <br /> '''Carl Brother Biography'''<br /> Carl Brothers joined F5 as a Field Systems Engineer after many years of being an F5 customer. Carl's previous roles have ranged from operations to systems engineering at a top 30 e-tailer and a global manufacturing company. Carl has considerable experience with web-based and virtualization technologies, including Citrix, Microsoft and VMware.<br /> <br /> '''The Enemy Within - Ramece Cave, Solutionary'''<br /> Web Server Intel Correlation (might change the name). The presentation will discuss how and why web servers play a role in intelligence gathering and threat correlation. It will go over previous hacking campaigns and how data was leveraged for exploitation or exfiltration, and how compromised servers are being used.<br /> <br /> '''Ramece Cave Biography'''<br /> Began working in information security in the Internet Abuse department at UUNET in 1999. Over the past 10 years have been focusing on forensics, reverse engineering, and malware analysis; in various incident response and SOC positions. Currently work as Research Analyst at Solutionary.<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+206+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 206, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=169214 2014-03-02T02:18:48Z

<p>Jmorehouse: /* Next Meeting */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be held on Wednesday, March 12 from 6 PM to 8 PM at GuidePoint Security in Downtown Saint Petersburg. We will have two presentations. The first, from Carl Brothers of F5 Networks is entitled ''Herding Cats''. The second, from Ramece Cave of Solutionary is entitled ''The Enemy Within''. Information on both presenters and their presentations is below.<br /> <br /> The following is an agenda for our next meeting:<br /> &lt;UL&gt;<br /> &lt;LI&gt;5:45 PM to 6:00 PM - Check-in<br /> &lt;LI&gt;6:00 PM to 7:00 PM - Presentation<br /> &lt;LI&gt;7:00 PM to 7:15 PM - Break<br /> &lt;LI&gt;7:15 PM to 8:00 PM - Presentation<br /> &lt;/UL&gt;<br /> <br /> '''Herding Cats - Carl Brothers, F5 Networks'''<br /> Ensuring that we can provide security and availability for on premise apps and cloud based apps, that are increasingly being accessed from uncontrolled devices feels like a never ending struggle to keep the cats in the corral. Let’s discuss the tools and approaches we can use to ensure that security &lt;&gt; decreased performance, revenue or customer satisfaction.<br /> <br /> '''Carl Brother Biography'''<br /> Carl Brothers joined F5 as a Field Systems Engineer after many years of being an F5 customer. Carl's previous roles have ranged from operations to systems engineering at a top 30 e-tailer and a global manufacturing company. Carl has considerable experience with web-based and virtualization technologies, including Citrix, Microsoft and VMware.<br /> <br /> '''The Enemy Within - Ramece Cave, Solutionary''<br /> Web Server Intel Correlation (might change the name). The presentation will discuss how and why web servers play a role in intelligence gathering and threat correlation. It will go over previous hacking campaigns and how data was leveraged for exploitation or exfiltration, and how compromised servers are being used.<br /> <br /> '''Ramece Cave Biography'''<br /> Began working in information security in the Internet Abuse department at UUNET in 1999. Over the past 10 years have been focusing on forensics, reverse engineering, and malware analysis; in various incident response and SOC positions. Currently work as Research Analyst at Solutionary.<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+206+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 206, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=168496 2014-02-19T21:48:45Z

<p>Jmorehouse: /* Next Meeting */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be held on Wednesday, March 12 from 6 PM to 8 PM at GuidePoint Security in Downtown Saint Petersburg. We will have two presentations. The first, from Carl Brothers of F5 Networks is entitled ''Herding Cats''. '''We are still looking for a second speaker.''' Information on Carl's presentation is below.<br /> <br /> The following is an agenda for our next meeting:<br /> &lt;UL&gt;<br /> &lt;LI&gt;5:45 PM to 6:00 PM - Check-in<br /> &lt;LI&gt;6:00 PM to 7:00 PM - Presentation<br /> &lt;LI&gt;7:00 PM to 7:15 PM - Break<br /> &lt;LI&gt;7:15 PM to 8:00 PM - Presentation<br /> &lt;/UL&gt;<br /> <br /> '''Herding Cats - Carl Brothers, F5 Networks'''<br /> Ensuring that we can provide security and availability for on premise apps and cloud based apps, that are increasingly being accessed from uncontrolled devices feels like a never ending struggle to keep the cats in the corral. Let’s discuss the tools and approaches we can use to ensure that security &lt;&gt; decreased performance, revenue or customer satisfaction.<br /> <br /> '''Carl Brother Biography'''<br /> Carl Brothers joined F5 as a Field Systems Engineer after many years of being an F5 customer. Carl's previous roles have ranged from operations to systems engineering at a top 30 e-tailer and a global manufacturing company. Carl has considerable experience with web-based and virtualization technologies, including Citrix, Microsoft and VMware.<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+206+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 206, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=166619 2014-01-24T22:58:44Z

<p>Jmorehouse: /* Next Meeting */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be held on Wednesday, March 12 from 6 PM to 8 PM at GuidePoint Security in Downtown Saint Petersburg. '''We are currently looking for presenters, so please email me if you are interested in presenting.''' Otherwise, we will have an open discussion forum.<br /> <br /> The following is an agenda for our next meeting:<br /> &lt;UL&gt;<br /> &lt;LI&gt;5:45 PM to 6:00 PM - Check-in<br /> &lt;LI&gt;6:00 PM to 7:00 PM - Presentation<br /> &lt;LI&gt;7:00 PM to 7:15 PM - Break<br /> &lt;LI&gt;7:15 PM to 8:00 PM - Presentation<br /> &lt;/UL&gt;<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+206+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 206, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=166618 2014-01-24T22:55:47Z

<p>Jmorehouse: /* Meeting Location */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be held on Thursday, December 5 from 6 PM to 8 PM at Kforce in Ybor. '''We are currently looking for presenters, so please email me if you are interested in presenting.''' Otherwise, we will have an open discussion forum.<br /> <br /> The following is an agenda for our next meeting:<br /> &lt;UL&gt;<br /> &lt;LI&gt;5:45 PM to 6:00 PM - Check-in<br /> &lt;LI&gt;6:00 PM to 7:00 PM - Presentation<br /> &lt;LI&gt;7:00 PM to 7:15 PM - Break<br /> &lt;LI&gt;7:15 PM to 8:00 PM - Presentation<br /> &lt;/UL&gt;<br /> <br /> Please RSVP to the [http://scr.im/mascasa Chapter Leader] BEFORE 12/6 so that you can be added to the security list.<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [https://maps.google.com/maps?q=146+2nd+Street+North+Suite+206+Saint+Petersburg,+FL+33701&amp;ie=UTF8&amp;hq=&amp;hnear=146+2nd+St+N+%23206,+St+Petersburg,+Florida+33701&amp;gl=us&amp;t=m&amp;z=14&amp;ll=27.773124,-82.635867&amp;source=embed 146 2nd Street North, Suite 206, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=166617 2014-01-24T22:55:15Z

<p>Jmorehouse: /* Meeting Location */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be held on Thursday, December 5 from 6 PM to 8 PM at Kforce in Ybor. '''We are currently looking for presenters, so please email me if you are interested in presenting.''' Otherwise, we will have an open discussion forum.<br /> <br /> The following is an agenda for our next meeting:<br /> &lt;UL&gt;<br /> &lt;LI&gt;5:45 PM to 6:00 PM - Check-in<br /> &lt;LI&gt;6:00 PM to 7:00 PM - Presentation<br /> &lt;LI&gt;7:00 PM to 7:15 PM - Break<br /> &lt;LI&gt;7:15 PM to 8:00 PM - Presentation<br /> &lt;/UL&gt;<br /> <br /> Please RSVP to the [http://scr.im/mascasa Chapter Leader] BEFORE 12/6 so that you can be added to the security list.<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [http://www.guidepointsecurity.com/contact-us/#Saint 146 2nd Street North, Suite 206, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=166616 2014-01-24T22:54:47Z

<p>Jmorehouse: /* Meeting Location */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be held on Thursday, December 5 from 6 PM to 8 PM at Kforce in Ybor. '''We are currently looking for presenters, so please email me if you are interested in presenting.''' Otherwise, we will have an open discussion forum.<br /> <br /> The following is an agenda for our next meeting:<br /> &lt;UL&gt;<br /> &lt;LI&gt;5:45 PM to 6:00 PM - Check-in<br /> &lt;LI&gt;6:00 PM to 7:00 PM - Presentation<br /> &lt;LI&gt;7:00 PM to 7:15 PM - Break<br /> &lt;LI&gt;7:15 PM to 8:00 PM - Presentation<br /> &lt;/UL&gt;<br /> <br /> Please RSVP to the [http://scr.im/mascasa Chapter Leader] BEFORE 12/6 so that you can be added to the security list.<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.guidepointsecurity.com GuidePoint Security] office in Downtown Saint Petersburg. The address is:<br /> <br /> [http://www.guidepointsecurity.com/contact-us/#Saint Petersburg 146 2nd Street North, Suite 206, Saint Petersburg, FL 33701]<br /> <br /> Cash only parking is available across the street in the Muvico parking lot.<br /> <br /> == Presentation Archives ==<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=163148 2013-11-13T14:40:12Z

<p>Jmorehouse: /* Next Meeting */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be held on Thursday, December 5 from 6 PM to 8 PM at Kforce in Ybor. '''We are currently looking for presenters, so please email me if you are interested in presenting.''' Otherwise, we will have an open discussion forum.<br /> <br /> The following is an agenda for our next meeting:<br /> &lt;UL&gt;<br /> &lt;LI&gt;5:45 PM to 6:00 PM - Check-in<br /> &lt;LI&gt;6:00 PM to 7:00 PM - Presentation<br /> &lt;LI&gt;7:00 PM to 7:15 PM - Break<br /> &lt;LI&gt;7:15 PM to 8:00 PM - Presentation<br /> &lt;/UL&gt;<br /> <br /> Please RSVP to the [http://scr.im/mascasa Chapter Leader] BEFORE 12/6 so that you can be added to the security list.<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.kforce.com Kforce] building in Ybor. The address is:<br /> <br /> [http://maps.google.com/maps?q=1001+East+Palm+Ave.+Tampa,+FL+33605&amp;ll=27.962452,-82.449324&amp;spn=0.008908,0.01929&amp;oe=UTF-8&amp;fb=1&amp;gl=us&amp;cid=0,0,7292050205277130420&amp;z=16&amp;iwloc=A 1001 East Palm Ave. Tampa, FL 33605]<br /> <br /> Park in the Visitor spaces in the main parking lot that is off of East Palm Avenue. You will need to identify yourself at the security desk and ask how to get to Training Room B.<br /> <br /> == Presentation Archives ==<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse https://wiki.owasp.org/index.php?title=Tampa&diff=163147 2013-11-13T14:38:38Z

<p>Jmorehouse: /* Welcome to the OWASP Tampa Local Chapter */</p> <hr /> <div>== Welcome to the OWASP Tampa Local Chapter ==<br /> <br /> <br /> <br /> Anyone in our area interested in information security is welcome to attend. Our meetings are informal and encourage open discussion of all aspects of application security. We invite attendees to give short presentations about specific topics. <br /> <br /> We have a mailing list at: https://lists.owasp.org/mailman/listinfo/owasp-tampa <br /> <br /> If you have any questions about the Tampa chapter, please send an email to the chapter leader [http://scr.im/mascasa Justin Morehouse]. <br /> <br /> The Tampa chapter is sponsored by [http://www.guidepointsecurity.com GuidePoint Security] and [http://isc2.org ISC2].<br /> <br /> Join the OWASP Tampa LinkedIn group [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro here]. <br /> <br /> A reminder that CISSPs can earn 1 CPE credit for every hour of attendance at OWASP meetings.<br /> <br /> == Next Meeting ==<br /> <br /> Our next meeting will be held in Q4 at Kforce in Ybor. Check back here often to learn about the specific dates and presentation. Alternatively, join our [https://lists.owasp.org/mailman/listinfo/owasp-tampa mailing list] and [http://www.linkedin.com/groups?about=&amp;gid=2897535&amp;trk=anet_ug_grppro LinkedIn] group.<br /> <br /> The following is an agenda for our next meeting:<br /> &lt;UL&gt;<br /> &lt;LI&gt;5:45 PM to 6:00 PM - Check-in<br /> &lt;LI&gt;6:00 PM to 7:00 PM - Presentation<br /> &lt;LI&gt;7:00 PM to 7:15 PM - Break<br /> &lt;LI&gt;7:15 PM to 8:00 PM - Presentation<br /> &lt;/UL&gt;<br /> <br /> == Meeting Location ==<br /> <br /> Our next meeting will be held at the [http://www.kforce.com Kforce] building in Ybor. The address is:<br /> <br /> [http://maps.google.com/maps?q=1001+East+Palm+Ave.+Tampa,+FL+33605&amp;ll=27.962452,-82.449324&amp;spn=0.008908,0.01929&amp;oe=UTF-8&amp;fb=1&amp;gl=us&amp;cid=0,0,7292050205277130420&amp;z=16&amp;iwloc=A 1001 East Palm Ave. Tampa, FL 33605]<br /> <br /> Park in the Visitor spaces in the main parking lot that is off of East Palm Avenue. You will need to identify yourself at the security desk and ask how to get to Training Room B.<br /> <br /> == Presentation Archives ==<br /> <br /> OWASP Tampa Day 2013 - Securing Your Applications' Data With Web Application Firewalls - Dennis K. Usle - Presentation Slides [https://www.owasp.org/images/b/b7/Securing_your_Applications_%26_Data_With_Web_Application_Firewalls.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Bring Your Own Service - Doug Maul - Presentation Slides [https://www.owasp.org/images/e/e2/Bring_Your_Own_Service.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Design Consideration &amp; Guiding Principles for Implementing Cloud Security - Bill Sterns - Presentation Slides [https://www.owasp.org/images/4/47/Design_considerations_and_Guiding_Principles_for_Implementing_Cloud_Security.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Let's Get Right To The Endpoint - Mel Pless - Presentation Slides [https://www.owasp.org/images/e/e5/Let%E2%80%99s_Get_Right_To_The_Endpoint.pdf here]<br /> <br /> OWASP Tampa Day 2013 - Vulnerability Management That Works - Tony Turner - Presentation Slides [https://www.owasp.org/images/2/2f/Vulnerability_Management_That_Works.pdf here]<br /> <br /> 2012-Q3 - Taming the B.E.A.S.T. - Richard Newman - Presentation Slides [https://www.owasp.org/images/1/10/Taming_the_B.E.A.S.T..pdf here]<br /> <br /> OWASP Tampa Day 2012 - Changing the Game - Jason Kent - Presentation Slides [https://www.owasp.org/images/0/04/OWASP_Changing_the_Game_-_Jason_Kent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - MDM Technical Presentation - Keith Katz - Presentation Slides [https://www.owasp.org/images/a/a4/Zenprise_Technical_Presentation_-_Keith_Katz.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Federated Identities in the Real World - Nathan Sargent - Presentation Slides [https://www.owasp.org/images/7/78/Federated_Identities_in_the_Real_World_-_Nathan_Sargent.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Define and Optimize Your Approach to Application Security - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/8/8a/Define_and_Optimize_Your_Approach_to_Application_Security_-_Bruce_Jenkins.pdf here]<br /> <br /> OWASP Tampa Day 2012 - Anonymous: Lessons Learned - Bill Church - Presentation Slides [https://www.owasp.org/images/a/a1/Anonymous_-_Lessons_Learned_-_Bill_Church.pdf here]<br /> <br /> 2012-Q1 - Protecting Against SQLi in Real-Time - Stuart Hancock - Presentation Slides [https://www.owasp.org/index.php/File:DBN-OWASP_Presentation.pdf here]<br /> <br /> 2011-Q4 - How Not to Build Android Apps - Jack Mannino - Presentation Slides [https://www.owasp.org/images/8/86/HowNotToBuildAndroidApps2.pdf here]<br /> <br /> 2011-Q4 - Behind Enemy Lines: Practical &amp; Triage Approaches to Mobile Security Abroad - Justin Morehouse - Presentation Slides [http://www.slideshare.net/mascasa/behind-enemy-lines-practical-triage-approaches-to-mobile-security-abroad here] <br /> <br /> 2011-Q3 - Hiding in Plain Sight - Ramece Cave - Presentation Slides [https://www.owasp.org/images/2/28/Hiding_in_Plain_Sight.pdf here] <br /> <br /> 2011-Q3 - PCI Compliance 2.0 - Kate Mullin - Presentation Slides [https://www.owasp.org/images/6/67/PCI_Compliance_9_2011.pdf here] <br /> <br /> OWASP Tampa Day 2011 - PCI for Developers: Lessons from the Real World - Trevor Hawthorn - Presentation Slides [https://www.owasp.org/images/f/f7/OTD2011-TH.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Top Website Vulnerabilities: Trends, Business Effects and How to Fight Them - Rinaldi Rampen - Presentation Slides [https://www.owasp.org/images/a/aa/OTD2011-RR.pdf here] <br /> <br /> OWASP Tampa Day 2011 - How to Defend the Universe from Evil-doers: A Guide for Software Developers and Security Teams - Bruce Jenkins - Presentation Slides [https://www.owasp.org/images/1/12/OTD2011-BJ.pdf here] <br /> <br /> OWASP Tampa Day 2011 - Analysis of Deadly Combination of XSS and CSRF - Sherif Koussa - Presentation Slides [https://www.owasp.org/images/8/8c/OTD2011-SK.pdf here] <br /> <br /> 2011-Q1 - Real Lessons of Deploying Static Analysis in Development Groups - Jeff LoSapio - Presentation Slides [http://www.owasp.org/images/3/3b/TampaOWASP_March2011.pdf here] <br /> <br /> 2011-Q1 - Intelligence Gathering for Penetration Testers: Opening Doors with Metadata - Chris Patten - Presentation Slides [http://www.owasp.org/images/a/ae/Intel_pen_owasp_Q1_2011.pdf here] <br /> <br /> 2011-Q1 - Vulnerability Management in an IPv6 World - Richard Newman &amp;amp; Brett McKinney - Presentation Slides [http://www.owasp.org/images/f/fa/Vulnerability_Scanning_in_an_IPv6_World.pdf here] <br /> <br /> 2010-Q4 - Nessus Bridge for Metasploit - Zate Berg - Presentation Slides [http://www.scribd.com/doc/41173753/Nessus-Bridge-for-Metasploit here] <br /> <br /> 2010-Q2 - Stealing Guests...The VMware Way - Justin Morehouse &amp;amp; Tony Flick - Presentation slides [http://www.fyrmassociates.com/pdfs/Stealing_Guests_The_VMware_Way-ShmooCon2010.pdf here] <br /> <br /> 2010-Q1 - The New World of Smartphone Security - Trevor Hawthorn - Presentation slides [http://www.stratumsec.net/sites/default/files/Stratum%20Security-The%20New%20World%20of%20Smartphone%20Security-Shmoocon%202010.pdf here] <br /> <br /> 2009-Q3 - Hacking the Smart Grid - Tony Flick - Presentation slides [http://www.owasp.org/images/d/df/HackingTheSmartGrid-OWASP_Tampa.pdf here] <br /> <br /> 2009-Q2 - Open SAMM - Zate Berg - Presentation slides [https://www.owasp.org/images/c/c3/Software_Assurance_Maturity_Model.pdf here] <br /> <br /> 2009-Q1 - XSS Anonymous Browser - Matt Flick - Presentation slides [https://www.owasp.org/images/b/bb/BlackHat-DC-09-Flick-XAB_Slides.pdf here] <br /> <br /> 2008-Q4 - Google Code Search&amp;nbsp;: The pitfalls of Copy/Paste - Tony Flick - Presentation slides [https://www.owasp.org/images/5/5b/GoogleCodeSearch.pdf here] <br /> <br /> [[Category:OWASP_Chapter]] [[Category:Florida]]</div>

Jmorehouse