[[How to Join a Committee|Click here to return to 'How to Join a Committee' page]]

----

{| style="width:100%" border="0" align="center"
|-
! colspan="2" align="center" style="background:#4058A0; color:white" | '''COMMITTEE APPLICATION FORM'''
|-
| style="width:25%; background:#7B8ABD" align="center" | '''Applicant's Name'''
| colspan="1" style="width:85%; background:#cccccc" align="left" | Robert Hansen
|-
| style="width:25%; background:#7B8ABD" align="center" | '''Current and past OWASP Roles'''
| colspan="1" style="width:85%; background:#cccccc" align="left" | List here.
|-
| style="width:25%; background:#7B8ABD" align="center" | '''Committee Applying for'''
| colspan="1" style="width:85%; background:#cccccc" align="left" | OWASP Connection Committee
|}

----

 

----

Please be aware that for an application to be considered by the board, '''you MUST have 5 recommendations'''. An incomplete application will not be considered for vote.

----

 

----

{| style="width:100%" border="0" align="center"
|-
! colspan="8" align="center" style="background:#4058A0; color:white" | '''COMMITTEE RECOMMENDATIONS'''
|-
! align="center" style="background:white; color:white" | 
! align="center" style="background:#7B8ABD; color:white" | '''Who Recommends/Name'''
! align="center" style="background:#7B8ABD; color:white" | '''Role in OWASP'''
! align="center" style="background:#7B8ABD; color:white" | '''Recommendation Content'''
|-
| style="width:3%; background:#cccccc" align="center" | '''1'''
| style="width:20%; background:#cccccc" align="center" | Mano Paul
| style="width:20%; background:#cccccc" align="center" | Global Education Committee, OWASP
| style="width:57%; background:#cccccc" align="center" | Robert Hansen (RSnake) needs no introduction to those in the web application security world. His contributions to the world of security is commendable and for him to be part of the OWASP Connection Committee is a natural fit, one that I believe will be mutually beneficial. His background will undoubtedly be a value add to achieving the goals and objectives of the OWASP Connections committee. RSnake has my highest recommendation. 
|-
| style="width:3%; background:#cccccc" align="center" | '''1'''
| style="width:20%; background:#cccccc" align="center" | James Wickett
| style="width:20%; background:#cccccc" align="center" | Chapter President, Austin OWASP
| style="width:57%; background:#cccccc" align="center" | Robert has been a valuable asset to the Austin OWASP chapter and would be a great person to be on the OWASP Connection Committee.  He has been instrumental in helping our chapter implement new events that help build community and integrate people socially in the group. 
|-
| style="width:3%; background:#cccccc" align="center"|'''2'''
| style="width:20%; background:#cccccc" align="center"|Josh Sokol
| style="width:20%; background:#cccccc" align="center"|Chapter President, Austin OWASP
| style="width:57%; background:#cccccc" align="center"|Robert has been working with the Austin OWASP Chapter board members for the past couple of years and has provided immeasurable assistance to the chapter in drumming up membership, getting top-notch presenters, and generally supporting our activities. He is a stand up person and is amongst the smartest security people I know. I think he would be an excellent fit for the OWASP Connections Committee role and he has my highest recommendation for this position.
|-
| style="width:3%; background:#cccccc" align="center" | '''3'''
| style="width:20%; background:#cccccc" align="center" |
| style="width:20%; background:#cccccc" align="center" |
| style="width:57%; background:#cccccc" align="center" |
|-
| style="width:3%; background:#cccccc" align="center" | '''4'''
| style="width:20%; background:#cccccc" align="center" |
| style="width:20%; background:#cccccc" align="center" |
| style="width:57%; background:#cccccc" align="center" |
|-
| style="width:3%; background:#cccccc" align="center" | '''5'''
| style="width:20%; background:#cccccc" align="center" |
| style="width:20%; background:#cccccc" align="center" |
| style="width:57%; background:#cccccc" align="center" |
|}

----

2009-01-28T21:28:06Z

Manopaul: /* Train the trainers (Teach the teachers) */

[[Category:OWASP Project]]

= About the Global Education Committee =
'''The Global Education Committee was created during the OWASP EU Summit in Portugal 2008. The primary purpose of the Global Education Committee is: to work with the [https://www.owasp.org/index.php/Category:OWASP_Education_Project OWASP Education Project] to provide educational materials for both internal and external users, develop liaisons with educational institutions worldwide.'''

== Mission ==
Provide awareness, training and educational services to corporate,
government and educational institutions on application security.

== Vision ==
Make OWASP educational material globally available as a well known resource
in easily consumable form mapped to a framework tied specifically to user
roles and responsibilities

== Committee Members ==
Education Committee (Board Member Rep: [mailto:seba@owasp.org Seba])

• [mailto:martin.knobloch@owasp.org Martin Knobloch] (Netherlands)

• [mailto:mano.paul@securisksolutions.com Mano Paul] (U.S.)

• [mailto:eduardo.neves@owasp.org Eduardo Neves] (Brazil)

• [mailto:kuai.hinojosa@owasp.org Kuai Hinjosa] (U.S.)

• [mailto:cecil.su@GRANTTHORNTON.COM.SG Cecil Su] (Singapore)

• [mailto:fabio.e.cerullo@aib.ie Fabio Cerullo] (Ireland)

• [mailto:andrzej.targosz@proidea.org.pl Andrzej Targosz] (Poland)

[https://www.owasp.org/index.php/How_to_Join_a_Committee How to join this committee]

[https://lists.owasp.org/mailman/listinfo/global_education_committee Join our mailing list]

== Scheduled Meetings ==
<pre>
The Global Education Committee Meetings take place via Skype, see below for the local time:
3:30 p.m. @ Austin, Texas
4:30 p.m. @ New York
7:30 p.m. @ Brasil
22:30 a.m. @ Netherlands
5:30 a.m. @ Singapore (following day)
</pre>
Next meeting(s) scheduled for:
* '''February 29th 2009'''

= Agenda / Timeline '''(DRAFT)''' =

== Tasks ==
''' 60 days to make a proposal '''
* ''' December 20th ''' - first draft of the proposal
* ''' January 16th ''' - submit

== Targets '''(DRAFT)''' ==
Below you can find the timeline, what has to be achieved by when.
All tasks must be SMART!

{| class="prettytable"
! Task
! Deadline
! Type
! Status
! Description
! Who
|-
| [[Categorize (Organization) of educational materials]]
| '''TBD'''
| Message
| Status
| Categorize / Organization of the educational materials for audiance by roles and responsibilities/technologies and use the summit workshop notes.
| Martin
|-
| [[Train the trainers (Teach the teachers)]]
| '''TBD'''
| Delivery
| Status
| Create a training toolkit with pre-built presentation and training materials, assessments etc.
| Mano
|-
| [[Create an online training and assessment portal]]
| '''TBD'''
| Delivery
| Status
| Description
| Mano
|-
| [[OWASP Boot Camp Project]]
| '''Proposal:''' February 2009 '''Final:''' Oktober 2009 at OWASP AppSec US 2009
| Delivery
| started
| OWASP Boot Camp about the OWASP projects, to deliver a Boot Camp presentation should be one of the criteria to get an alpha status as project
| Martin
|-
| [[OWASP CTF event]]
| OWASP AppSec Denver 2009
| Delivery
| Status
| Description
| Martin
|-
| [[Speakers Bureau Project]]
| '''TBD'''
| Delivery
| '''started'''
| List of speakers, Name, Bio, Topics, History 
Speakers in conferences (OOTM ask for funds on this)/summit
| Martin
|-
| [[Marketing efforts]]
| '''TBD (discussion with other members)'''
| Awareness Services
| Status
| Flyers or Brochures of OWASP Top 10, Testing Guide.
| Eduardo
|-
| [[Internationalization of the training materials]]
| '''TBD (discussion with Juan)'''
| Awareness Services
| Status
| Liaise with Juan Calderon for translation services for highly spoken languages
| Eduardo
|-
| [[Education material]]
| '''TBD'''
| Training & Educational Services
| Status
| All projects should be summoned to create educational material (training service)
1) Each Projects --> Documents (help), Tool, Training; Live CD (Portable)
| Martin
|-
| [[Educational Services]]
| '''TBD'''
| Training & Educational Services
|

3 Universities already in contact with and planning OWASP events to participate in.

| Incorporate OWASP into the following top 5 Universities, within the next 12 months by introducing OWASP training and education resources at University's events.

1) New York University
2) Cornell University
3) Princeton University
4) University of Minnesota
5) Columbia University

As a result of these initiative we would hope to see:

1) Confirming participation at arranged events
2) Asking Universities to recognize they are using our resources by allowing us to place their names in wiki pages such as http://www.owasp.org/index.php/OWASP_Top_Ten_Project
3) University faculty, staff and students participate in local and international events/meetings
4) University faculty, staff and students contribute to OWASP projects

|Kuai Hinojosa
|}

= Proposal '''(DRAFT)''' =
== Categorize (Organization) of educational materials ==
Categorize / Organization of the educational materials for audiance by roles and responsibilities/technologies and use the summit workshop notes.
== Train the trainers (Teach the teachers) ==
Objective:
Develop a train the trainer program that will train trainers to deliver training on OWASP related material.

Activities/Deadline
1. Develop a criteria to identify trainers / Q1 2009
2. Identify pertinent OWASP related material that will be included in the training kit / Q2 2009. This is dependent on the education project organizing material.
3. Create a training toolkit with pre-built presentation and training materials, assessments etc. / Q3 2009
4. Conduct train the trainer sessions (remote or in-person) / Q4 2009

Contact Information: mano.paul@owasp.org

== Create an online training and assessment portal ==
== OWASP Boot Camp Project ==
OWASP Boot Camp about the OWASP projects, to deliver a Boot Camp presentation should be one of the criteria to get an alpha status as project
== OWASP CTF event ==
== Speakers Bureau Project ==
List of speakers, Name, Bio, Topics, History
Speakers in conferences (OOTM ask for funds on this)/summit
== Marketing efforts ==
== Internationalization of the training materials ==
== Education material ==
yers or Brochures of OWASP Top 10, Testing Guide.
== Educational Services ==
''' Contact university - build a university list'''
Incorporate OWASP into the following top 5 Universities, within the next 12 months by introducing OWASP training and education resources at University's events.
1) New York University 2) Cornell University 3) Princeton University 4) University of Minnesota 5) Columbia University

As a result of these initiative we would hope to see:

1) Confirming participation at arranged events 2) Asking Universities to recognize they are using our resources by allowing us to place their names in wiki pages such as http://www.owasp.org/index.php/OWASP_Top_Ten_Project 3) University faculty, staff and students participate in local and international events/meetings 4) University faculty, staff and students contribute to OWASP projects

Global Education Committee

2009-01-28T21:19:25Z

Manopaul: /* Train the trainers (Teach the teachers) */

Manoranjan (Mano) Paul

2009-01-28T21:06:45Z

Manopaul:

[[Image:Mano_Paul.jpg|thumb|10px|frame|left|Mano Paul]]
Mano Paul (CSSLP, CISSP, AMBCI, MCSD, MCAD, CompTIA Network+, ECSA) is the Founder and CEO at [http://www.securisksolutions.com SecuRisk Solutions] and [http://www.expresscertifications.com Express Certifications]. Based out of Austin, Texas in the USA, SecuRisk Solutions specializes in three areas of information security solutions - Product Development, Consulting and Awareness, Training & Education while Express Certifications focuses on professional certifications like the CISSP and SSCP.

Before SecuRisk Solutions, Mano played several roles from software developer, quality assurance tester, logistics manager, technical architect, IT strategist and Security Engineer/Program Manager/Strategist at Dell Inc. His security experience includes designing and developing software security programs from Compliance-to-Coding, application security risk management, security strategy & management, and conducting security awareness training and education.

Mano is He is a member and chair of the OWASP Global Education Committee and actively participates in OWASP speaking, training and leadership events. He is also appointed the Software Assurance Advisor for (ISC)2, representing and advising the organization on software assurance strategy, training, education and certification. His information security and software assurance experience includes designing and developing security programs from compliance-to-coding, security in the SDLC, writing secure code, risk management, security strategy, and security awareness training and education. Mano started his career as a shark researcher in the Bimini Biological Field Station, Bahamas. His educational pursuit took him to the University of Oklahoma where he received his Business Administration degree in Management Information Systems (MIS) with various accolades and the coveted 4.0 GPA. Before Express Certifications and SecuRisk Solutions, Mano played several roles from software developer, quality assurance engineer, logistics manager, technical architect, IT strategist and security engineer/program manager/strategist at Dell Inc. Mano is an appointed faculty member and industry representative of the Capitol of Texas Information System Security Association (ISSA) chapter. He is a contributing author for the Information Security Management Handbook, writes periodically for the Certification magazine and has contributed to several security topics for the Microsoft Solutions Developer Network (MSDN).

Mano has been featured in various domestic and international security conferences and is an invited speaker and panelist, delivering talks and keynotes in conferences such as the OWASP, CSI, Burton Group Catalyst, TRISC and SC World Congress conferences. He is a contributing author for the Information Security Management Handbook, writes periodically for the Certification Magazine and has contributed to several security topics for the Microsoft Solutions Developer Network.

Mano holds the following professional certifications - CSSLP, CISSP, AMBCI, Microsoft Certified Solutions Developer (MCSD), Microsoft Certified Application Developer (MCAD), CompTIA Network+, and ECSA certification.

Manoranjan (Mano) Paul

2009-01-28T20:51:19Z

Manopaul:

Manoranjan (Mano) Paul

2009-01-28T20:50:15Z

Manopaul:

2008-08-13T09:24:11Z

Manopaul: /* Day Two [Trainings/Workshops]: Thursday 21st August, 2008 */

[[Image:OWASP_India-mhnew.gif]]
= OWASP AppSec India Conference 2008 - August 20th-21st 2008 =
Delhi Chapter invites you to (1) day of Conferences with theme as "Application Security - Trends and Challenges" and Technology from the world's most regarded application security leaders and experts, (1) day of extensive multi-tracked workshop, all to be held at [http://www.indiahabitat.org/locate.htm India Habitat Center, New Delhi.] [https://www.owasp.org/images/e/e3/OWASPAppsecIndiacon08-Brochure.pdf Click here to download event brochure]. 

Event Fees: INR. 5,000 (approx. USD 125) for 1 day of conference INR. 10,000 (approx. USD 250) for 1-day training/workshop.
 
<center>[http://www.eventavenue.com/attReglogin.do?eventId=EVT1667 https://www.owasp.org/images/f/f9/Green_bl.gif][https://www.eventavenue.com/attReglogin.do?eventId=EVT1667 https://www.owasp.org/images/7/7f/Register.gif]</center>

 [http://204.2.106.79/cme/owasp/register.php Click here for off-line registrations] 

Discounts on combined package for both the days: 
Discounts available for: Academics | Government Employees | OWASP/ISC2 members.
 Group Discounts are also available 

 * Only one discount option will be applicable to each delegate.
 
Registration inquiries: 
Mr. Nitin Saxena 
CyberMedia Events 
Mobile: 9811675559 
email :nitins@cybermedia.co.in 

Ms. Vijitha P D'Souza 
CyberMedia Events 
email: vijithap@cybermedia.co.in 
<hr>
 
<center>[[Image:ninja.gif]]</center> 

= Event Sponsors =
<center>
Diamond Sponsor 
[https://h10078.www1.hp.com/cda/hpms/display/main/hpms_content.jsp?zn=bto&cp=1-11-201_4000_100 https://www.owasp.org/images/d/d2/Hp1.JPG]
</center>
 
<center>
Associate Sponsors 
[http://www.paladion.net https://www.owasp.org/images/8/86/Paladion.jpg]
[http://www.securematrix.in https://www.owasp.org/images/8/8f/Secure-matrix.jpg]
[http://www.torridnet.com https://www.owasp.org/images/5/5a/Torrid.jpg]
[http://www.sdgc.com https://www.owasp.org/images/3/39/SDG.jpg]
</center>
 
To sponsor OWASP AppSec India Conference 2008, please download the [https://www.owasp.org/images/e/ef/OWASP_Appsec_India_Conference_2008-Sponsorship.pdf Sponsorship Form] and contact: 
Mr. Vilas Hegde 
Associate Vice President 
CyberMedia Events 
email :vilash@cybermedia.co.in 
== Official Event Supporters/Partners ==
<center>
[http://www.isc2.org https://www.owasp.org/images/b/bf/ISC2_main_logo-small.jpg] [http://www.eventavenue.com https://www.owasp.org/images/7/76/Eventav_logo_tech_partner.jpg]
[http://www.biztech2.com/ https://www.owasp.org/images/9/9b/Biztech.jpg]
</center>
 

= OWASP AppSec India Conference 2008 Schedule – August 20th - August 21st =
==Day One [Conference Program]: Wednesday 20th August, 2008==
{| style="width:80%" border="0" align="center"
! colspan="4" align="center" style="background:#4F81BD; color:white" |

|-
| align="center" style="width:33%; background:#4F81BD; color:white" | '''TIME''' || style="width:33%; background:#4F81BD; color:white" align="center" | '''SESSION'''
| style="width:33%; background:#4F81BD; color:white" align="center" | '''SPEAKER'''

|-
| align="center" style="width:20%; background:#4F81BD; color:white" | '''08:15 hrs - 9:00 hrs''' || colspan="3" style="width:80%; background:#4F81BD; color:white" align="center" | '''Registrations and Welcome Tea / Coffee'''

|-
| align="center" style="width:20%; background:#4F81BD; color:white" | '''09:00 hrs - 10:00 hrs''' || style="width:30%; background:#A7BFDE" align="center" | ''' Welcome Address About OWASP Foundation– The story so far and beyond. Key note “ Application Security Trends & Challenges” Vote of Thanks '''
| style="width:40%; background:#EEF0F7; color:#4A4AFF" align="center" | '''Welcome address by OWASP Delhi Chapter Board Dinis Cruz, Chief OWASP Evangelist OWASP Foundation USA Dr. Gulshan Rai, Director, CERT-In, Department of Information Technology, Government of India Dr. Kamlesh Bajaj, CEO, DSCI (A NASSCOM Initiative) Mano Paul, Software Assurance Advisor, (ISC)2 OWASP Delhi Board Members'''
|-

| align="center" style="width:20%; background:#4F81BD; color:white" | '''10:00 hrs – 10:30 hrs''' || colspan="3" style="width:80%; background:#4F81BD; color:white" align="center" | '''Networking Tea / Coffee Break'''
|-

| align="center" style="width:20%; background:#4F81BD; color:white" | '''10:30 hrs - 11:30 hrs''' || style="width:30%; background:#A7BFDE" align="center" | '''Tour of OWASP projects & The Moral Ecology of OWASP'''
| style="width:40%; background:#EEF0F7; color:#4A4AFF" align="center" | ''' Dinis Cruz, Chief OWASP Evangelist OWASP Foundation USA '''
|-

| align="center" style="width:20%; background:#4F81BD; color:white" | '''11:30 hrs - 12:30 hrs''' || style="width:30%; background:#A7BFDE" align="center" | '''[https://www.owasp.org/index.php/OWASP_AppSec_India_Conference_2008_Web_2.0_Attacks Web 2.0 Attacks - Next Generation Threats on the Rise]'''
| style="width:40%; background:#EEF0F7; color:#4A4AFF" align="center" | ''' [https://www.owasp.org/index.php/OWASP_AppSec_India_Conference_2008_Speaker_-_Shreeraj_Shah Shreeraj Shah, Founder & Director,] [http://www.blueinfy.com BlueInfy] '''
|-

| align="center" style="width:20%; background:#4F81BD; color:white" | '''14:30 hrs - 15:30 hrs''' || style="width:30%; background:#A7BFDE" align="center" | '''[https://www.owasp.org/index.php/OWASP_AppSec_India_Conference_2008_Business_Case_for_AppSec The Business Case for Application Security]'''
| style="width:40%; background:#EEF0F7; color:#4A4AFF" align="center" | ''' [https://www.owasp.org/index.php/OWASP_AppSec_India_Conference_2008_Speaker_-_Rajesh_Nayak Rajesh Nayak ] [https://h10078.www1.hp.com/cda/hpms/display/main/hpms_home.jsp?zn=bto&cp=1_4011_308__&jumpid=go/btosoftware HP Software] '''
|-

| align="center" style="width:20%; background:#4F81BD; color:white" | '''13:30 hrs - 14:30 hrs''' || colspan="3" style="width:80%; background:#4F81BD; color:white" align="center" | '''Networking Lunch'''
|-

| align="center" style="width:20%; background:#4F81BD; color:white" | '''12:30 hrs - 13:30 hrs''' || style="width:30%; background:#A7BFDE" align="center" | '''[https://www.owasp.org/index.php/OWASP_AppSec_India_Conference_2008_Building_Enterprise_AppSec_program Building an enterprise application security program]'''
| style="width:40%; background:#EEF0F7; color:#4A4AFF" align="center" | ''' [https://www.owasp.org/index.php/OWASP_AppSec_India_Conference_2008_Speaker_-_Nishchal_Bhalla Nishchal Bhalla, CEO,] [http://www.securitycompass.com Security Compass], USA '''
|-

| align="center" style="width:20%; background:#4F81BD; color:white" | '''15:30 hrs - 16:30 hrs''' || style="width:30%; background:#A7BFDE" align="center" | '''[https://www.owasp.org/index.php/OWASP_AppSec_India_Conference_2008_Case_Study Case Study: Testing 200+ applications in a $10 Billion Enterprise]'''
| style="width:40%; background:#EEF0F7; color:#4A4AFF" align="center" | ''' [https://www.owasp.org/index.php/OWASP_AppSec_India_Conference_2008_Speaker_-_Roshen_Chandran Roshen Chandran Director of Paladion's Application Security Practice,] [http://www.paladion.net/ Paladion] '''
|-

| align="center" style="width:20%; background:#4F81BD; color:white" | '''16:30 hrs - 17:00 hrs''' || colspan="3" style="width:80%; background:#4F81BD; color:white" align="center" | '''Networking Tea / Coffee Break'''
|-

| align="center" style="width:20%; background:#4F81BD; color:white" | '''17:00 hrs - 18:00 hrs''' || style="width:30%; background:#A7BFDE" align="center" | '''[https://www.owasp.org/index.php/OWASP_AppSec_India_Conference_2008_OWASP_AntiSamy_Project OWASP AntiSamy Project]'''
| style="width:40%; background:#EEF0F7; color:black" align="center" | ''' [https://www.owasp.org/index.php/OWASP_AppSec_India_Conference_2008_Speaker_-_Jason_Li Jason Li, Senior Application Security Engineer,] [http://www.aspectsecurity.com Aspect Security Inc., USA] '''
|-

| align="center" style="width:20%; background:#4F81BD; color:white" | '''18:00 hrs - 18:30 hrs''' || style="width:30%; background:#A7BFDE" align="center" | '''Vote of Thanks'''
| style="width:40%; background:#4F81BD; color:white" align="center" | ''' OWASP Delhi Chapter Board Members '''
|-

|}
 

==Day Two [Trainings/Workshops]: Thursday 21st August, 2008==
{| style="width:80%" border="0" align="center"
! colspan="4" align="center" style="background:#4F81BD; color:white" |

|-
| align="center" style="width:33%; background:#4F81BD; color:white" | '''TIME''' || style="width:33%; background:#4F81BD; color:white" align="center" | '''TRAINING/WORKSHOP TRACK'''
| style="width:33%; background:#4F81BD; color:white" align="center" | '''TRAINING PROVIDER'''

|-
| align="center" style="width:20%; background:#4F81BD; color:white" | '''08:15 hrs - 9:00 hrs''' || colspan="3" style="width:80%; background:#4F81BD; color:white" align="center" | '''Registrations and Welcome Tea / Coffee'''

|-

| align="center" style="width:20%; background:#4F81BD; color:white" | '''09:00 hrs - 13:30 hrs''' || style="width:30%; background:#A7BFDE" align="center" | ''' [https://www.owasp.org/index.php/OWASP_AppSec_India_Conference_2008_Application_Security_Assessment_(Threats_And_Exploits) Application Security Assessment (Threats and Exploits)] Hall Appsec-1 '''

| style="width:40%; background:#EEF0F7; color:#4A4AFF" align="center" |
''' [https://www.owasp.org/index.php/OWASP_AppSec_India_Conference_2008_Speaker_-_Shreeraj_Shah Shreeraj Shah, Founder & Director,] [http://www.blueinfy.com https://www.owasp.org/images/a/a1/BlueInfy.JPG] '''
|-

| align="center" style="width:20%; background:#4F81BD; color:white" | '''09:00 hrs - 13:30 hrs''' || style="width:30%; background:#A7BFDE" align="center" | ''' [https://www.owasp.org/index.php/OWASP_AppSec_India_Conference_2008_Advanced_Threat_Modeling Advanced Threat Modeling] Hall Appsec-2 '''

| style="width:40%; background:#EEF0F7; color:#4A4AFF" align="center" |
''' [http://www.securisksolutions.com/company/execmgt.aspx Mano Paul, CEO, SecuRisk Solutions, USA] [http://www.securisksolutions.com/Default.aspx http://www.securisksolutions.com/Images/Logos/SRSLogo_100x100.png] '''
|-

| align="center" style="width:20%; background:#4F81BD; color:white" | '''11:15 hrs - 11:30 hrs''' || colspan="3" style="width:80%; background:#4F81BD; color:white" align="center" | '''Networking Tea / Coffee Break'''
|-
| align="center" style="width:20%; background:#4F81BD; color:white" | '''09:00 hrs - 13:30 hrs''' || style="width:30%; background:#A7BFDE" align="center" | ''' [https://www.owasp.org/index.php/OWASP_AppSec_India_Conference_2008 Writing Secure Code - Java/J2EE & .Net] Hall Appsec-3 '''
| style="width:40%; background:#EEF0F7; color:#4A4AFF" align="center" | ''' [https://h10078.www1.hp.com/cda/hpms/display/main/hpms_content.jsp?zn=bto&cp=1-11-201_4000_100 https://www.owasp.org/images/d/d2/Hp1.JPG] '''
|-
| align="center" style="width:20%; background:#4F81BD; color:white" | '''13:30 hrs - 14:30 hrs''' || colspan="3" style="width:80%; background:#4F81BD; color:white" align="center" | '''Networking Lunch'''
|-

| align="center" style="width:20%; background:#4F81BD; color:white" | '''14:30 hrs - 19:00 hrs''' || style="width:30%; background:#A7BFDE" align="center" | ''' [https://www.owasp.org/index.php/OWASP_AppSec_India_Conference_2008_Web_2.0_Security Web 2.0 Security] Hall Appsec-1 '''
| style="width:40%; background:#EEF0F7; color:black" align="center" | ''' [https://www.owasp.org/index.php/OWASP_AppSec_India_Conference_2008_Speaker_-_Jason_Li Jason Li, Senior Application Security Engineer,] [http://www.aspectsecurity.com http://www.owasp.org/images/d/d1/Aspect_logo.gif] '''

|-
| align="center" style="width:20%; background:#4F81BD; color:white" | '''14:30 hrs - 19:00 hrs''' || style="width:30%; background:#A7BFDE" align="center" | ''' [https://www.owasp.org/index.php/OWASP_AppSec_India_Conference_2008_AppSec_For_Managers Application Security for Managers] Hall Appsec-2 '''
| style="width:40%; background:#EEF0F7; color:#4A4AFF" align="center" | ''' [https://www.owasp.org/index.php/OWASP_AppSec_India_Conference_2008_Speaker_-_Nishchal_Bhalla Nishchal Bhalla, CEO,] [http://www.securitycompass.com https://www.owasp.org/images/f/f3/SecurityCompass.JPG] '''
|-
| align="center" style="width:20%; background:#4F81BD; color:white" | '''16:30 hrs - 16:45 hrs''' || colspan="3" style="width:80%; background:#4F81BD; color:white" align="center" | '''Networking Tea / Coffee Break'''
|-
| align="center" style="width:20%; background:#4F81BD; color:white" | '''14:30 hrs - 19:00 hrs''' || style="width:30%; background:#A7BFDE" align="center" | ''' Application Security Code Review Hall Appsec-3 '''
| style="width:40%; background:#EEF0F7; color:#4A4AFF" align="center" |
'''Dinis Cruz, Director of Advanced Technologies, [http://www.ouncelabs.com https://www.owasp.org/images/6/6e/OunceLabs_logo.jpg]'''
|-
|}

*Delegates attending Trainings are requested to bring their Wi-Fi enabled Laptops for the class- Preferably with VMWare Loaded*
*ISC2 Members earn 1 CPE per hour of attendance to this event*
*Speakers / topics / Training sessions are subject to change*
*Registration for a specific class will depend on the availability of seats*

Kindly visit the conference pages for the latest updates on the event. 

= TRAVEL/HOTELS =

*Delhi Tourism: http://delhitourism.nic.in/index.aspx 
*Delhi Map: http://www.mapsofindia.com/maps/delhi/delhi.htm 
*[http://www.indiahabitat.org/locate.htm Directions to Venue]
 
*NOTE: We have negotiated special discounts for the participants of OWASP AppSec India Conference 2008. Kindly contact our Travel Partners to get quick bookings on flights/cabs/hotels at discounted price:

= Queries =
 Travel/Hotel: Mr. Jitin Batra
 Manager, Dreamz Travel
 Mobile: +91-981-055-8569
 LandLine: +91-11-41586401-402
 email: info@dreamztravel.net
 
Registrations: 
Mr. Nitin Saxena 
CyberMedia Events 
email :nitins@cybermedia.co.in 
Mobile: 09811675559 

 
Sponsorship: 
Mr. Vilas Hedge 
Associate Vice President 
CyberMedia Events 
email :vilash@cybermedia.co.in

File:SecuRiskSolutions.jpg

2008-08-13T09:03:28Z

Manopaul: uploaded a new version of "Image:SecuRiskSolutions.jpg"

File:SecuRiskSolutions.jpg

2008-08-13T09:01:21Z

Manopaul:

OWASP AppSec India Conference 2008 Advanced Threat Modeling

2008-08-06T16:29:03Z

Manopaul: /* Advanced Threat Modeling */

== Advanced Threat Modeling ==

To secure your home, you will first need to know how the thief could possibly enter and exit and where you should store your valuables. The same is true of your web applications. Unless you know what the vulnerabilities and threats of your web applications are, and what security measures you should take to protect them, ev1L h@x0rS or the enemy within (insider) could take advantage of the vulnerabilities.

Threat Modeling is a technique that you can use to identify ATVS (attacks, threats, vulnerabilities and safeguards) that could affect your web applications. Threat Modeling helps in designing your application securely from a confidentiality, integrity, availability, authentication, authorization and auditing perspective. It is an essential activity to be undertaken during the design stage of your SDLC and helps mitigate and minimize overall risk.

Come for a '''fun, hands-on, interactive''' session that will cover the '''basic and advanced elements of threat modeling''', filled with '''exercises for the attendees to participate'''.

'''Session Coverage''' 
The session will cover the following topics 
Introduction to Threat Modeling 
Threat Modeling Process 
Tools, Techniques and Templates 
Demos and Hands-On Exercises 
and more ...

'''Who should Attend?''' 
This session is for '''Management, Technical''' (Developer, QA, Security ...) and '''Operational professionals''' and any stakeholder that needs to understand how threat modeling can benefit their organizations/companies in designing secure web applications. Whether you are a novice or an expert apropos threat modeling, you will all leave learning something new to design the next generation of hack-resilient web applications.

'''Come and Win exciting Prizes (possibly an iPod)''' 
First Prize - A FREE voucher to the official (ISC)2 CISSP® self-assessments (approx. $300 value) (or) 
Second Prize - A FREE voucher to the official (ISC)2 SSCP® self-assessments (approx. $110 value) 
Third Prize - An iPod Shuffle 

(ISC)2 self-assessments are made possible due to courtesy of ''[https://www.expresscertifications.com/isc2 Express Certifications]'' 
iPod is a registered trademark of Apple Inc.

== About Instructor ==
[[Image:Mano_Paul.jpg|thumb|10px|frame|left|Mano Paul]]
Mano Paul (CISSP, MCSD, MCAD, CompTIA Network+, ECSA) is the Founder and CEO at SecuRisk Solutions. Based out of Austin, Texas in the USA, SecuRisk Solutions specializes in three areas of information security solutions - Product Development, Consulting and Awareness, Training & Education.

Before SecuRisk Solutions, Mano played several roles from software developer, quality assurance tester, logistics manager, technical architect, IT strategist and Security Engineer/Program Manager/Strategist at Dell Inc. His security experience includes designing and developing software security programs from Compliance-to-Coding, application security risk management, security strategy & management, and conducting security awareness training and education.

Mano is (ISC)2's Software Assurance Advisor and an appointed Industry representative of Information Systems Security Association (ISSA) Capitol of Texas chapter. He also serves as a faculty member for the ISSA security course at the local university.

Mano has been featured in various domestic and international security conferences, contributed to and published various security articles and is an invited speaker in the OWASP Application Security Conferences, CSI, Burton Group Catalyst, TRISC and the SC World Congress Conferences. He is a contributing author for the Information Security Management Handbook, writes periodically for the Certification Magazine and has contributed to several security topics for the Microsoft Solutions Developer Network.

Mano holds the following professional certifications - CISSP, ECSA, LPT, Microsoft Certified Solutions Developer (MCSD), Microsoft Certified Application Developer (MCAD) and the CompTIA Network+ certification.

OWASP AppSec India Conference 2008 Advanced Threat Modeling

2008-08-06T16:28:20Z

Manopaul: /* Advanced Threat Modeling */

== Advanced Threat Modeling ==

To secure your home, you will first need to know how the thief could possibly enter and exit and where you should store your valuables. The same is true of your web applications. Unless you know what the vulnerabilities and threats of your web applications are, and what security measures you should take to protect them, ev1L h@x0rS or the enemy within (insider) could take advantage of the vulnerabilities.

Threat Modeling is a technique that you can use to identify ATVS (attacks, threats, vulnerabilities and safeguards) that could affect your web applications. Threat Modeling helps in designing your application securely from a confidentiality, integrity, availability, authentication, authorization and auditing perspective. It is an essential activity to be undertaken during the design stage of your SDLC and helps mitigate and minimize overall risk.

Come for a '''fun, hands-on, interactive''' session that will cover the '''basic and advanced elements of threat modeling''', filled with '''exercises for the attendees to participate'''.

'''Session Coverage''' 
The session will cover the following topics 
Introduction to Threat Modeling 
Threat Modeling Process 
Tools, Techniques and Templates 
Demos and Hands-On Exercises 
and more ...

'''Who should Attend?''' 
This session is for '''Management, Technical''' (Developer, QA, Security ...) and '''Operational professionals''' and any stakeholder that needs to understand how threat modeling can benefit their organizations/companies in designing secure web applications. Whether you are a novice or an expert apropos threat modeling, you will all leave learning something new to design the next generation of hack-resilient web applications.

'''Come and Win exciting Prizes''' 
First Prize - A FREE voucher to the official (ISC)2 CISSP® self-assessments (approx. $300 value) (or) 
Second Prize - A FREE voucher to the official (ISC)2 SSCP® self-assessments (approx. $110 value) 
Third Prize - A iPod Shuffle 

(ISC)2 self-assessments are made possible due to courtesy of ''[https://www.expresscertifications.com/isc2 Express Certifications]'' 
Note: iPod is a registered trademark of Apple Inc.

== About Instructor ==
[[Image:Mano_Paul.jpg|thumb|10px|frame|left|Mano Paul]]
Mano Paul (CISSP, MCSD, MCAD, CompTIA Network+, ECSA) is the Founder and CEO at SecuRisk Solutions. Based out of Austin, Texas in the USA, SecuRisk Solutions specializes in three areas of information security solutions - Product Development, Consulting and Awareness, Training & Education.

Before SecuRisk Solutions, Mano played several roles from software developer, quality assurance tester, logistics manager, technical architect, IT strategist and Security Engineer/Program Manager/Strategist at Dell Inc. His security experience includes designing and developing software security programs from Compliance-to-Coding, application security risk management, security strategy & management, and conducting security awareness training and education.

Mano is (ISC)2's Software Assurance Advisor and an appointed Industry representative of Information Systems Security Association (ISSA) Capitol of Texas chapter. He also serves as a faculty member for the ISSA security course at the local university.

Mano has been featured in various domestic and international security conferences, contributed to and published various security articles and is an invited speaker in the OWASP Application Security Conferences, CSI, Burton Group Catalyst, TRISC and the SC World Congress Conferences. He is a contributing author for the Information Security Management Handbook, writes periodically for the Certification Magazine and has contributed to several security topics for the Microsoft Solutions Developer Network.

Mano holds the following professional certifications - CISSP, ECSA, LPT, Microsoft Certified Solutions Developer (MCSD), Microsoft Certified Application Developer (MCAD) and the CompTIA Network+ certification.

OWASP AppSec India Conference 2008 Advanced Threat Modeling

2008-08-03T20:56:28Z

Manopaul: /* Advanced Threat Modeling */

== Advanced Threat Modeling ==

To secure your home, you will first need to know how the thief could possibly enter and exit and where you should store your valuables. The same is true of your web applications. Unless you know what the vulnerabilities and threats of your web applications are, and what security measures you should take to protect them, ev1L h@x0rS or the enemy within (insider) could take advantage of the vulnerabilities.

Threat Modeling is a technique that you can use to identify ATVS (attacks, threats, vulnerabilities and safeguards) that could affect your web applications. Threat Modeling helps in designing your application securely from a confidentiality, integrity, availability, authentication, authorization and auditing perspective. It is an essential activity to be undertaken during the design stage of your SDLC and helps mitigate and minimize overall risk.

Come for a '''fun, hands-on, interactive''' session that will cover the '''basic and advanced elements of threat modeling''', filled with '''exercises for the attendees to participate'''.

'''Session Coverage''' 
The session will cover the following topics 
Introduction to Threat Modeling 
Threat Modeling Process 
Tools, Techniques and Templates 
Demos and Hands-On Exercises 
and more ...

'''Who should Attend?''' 
This session is for '''Management, Technical''' (Developer, QA, Security ...) and '''Operational professionals''' and any stakeholder that needs to understand how threat modeling can benefit their organizations/companies in designing secure web applications. Whether you are a novice or an expert apropos threat modeling, you will all leave learning something new to design the next generation of hack-resilient web applications.

'''Come and Win exciting Prizes''' 
First Prize - A FREE voucher to the official (ISC)2 CISSP® self-assessments (approx. $300 value) (or) 
Second Prize - A FREE voucher to the official (ISC)2 SSCP® self-assessments (approx. $110 value) 
(ISC)2 self-assessments are made possible due to courtesy of ''[https://www.expresscertifications.com/isc2 Express Certifications]''

== About Instructor ==
[[Image:Mano_Paul.jpg|thumb|10px|frame|left|Mano Paul]]
Mano Paul (CISSP, MCSD, MCAD, CompTIA Network+, ECSA) is the Founder and CEO at SecuRisk Solutions. Based out of Austin, Texas in the USA, SecuRisk Solutions specializes in three areas of information security solutions - Product Development, Consulting and Awareness, Training & Education.

Before SecuRisk Solutions, Mano played several roles from software developer, quality assurance tester, logistics manager, technical architect, IT strategist and Security Engineer/Program Manager/Strategist at Dell Inc. His security experience includes designing and developing software security programs from Compliance-to-Coding, application security risk management, security strategy & management, and conducting security awareness training and education.

Mano is (ISC)2's Software Assurance Advisor and an appointed Industry representative of Information Systems Security Association (ISSA) Capitol of Texas chapter. He also serves as a faculty member for the ISSA security course at the local university.

Mano has been featured in various domestic and international security conferences, contributed to and published various security articles and is an invited speaker in the OWASP Application Security Conferences, CSI, Burton Group Catalyst, TRISC and the SC World Congress Conferences. He is a contributing author for the Information Security Management Handbook, writes periodically for the Certification Magazine and has contributed to several security topics for the Microsoft Solutions Developer Network.

Mano holds the following professional certifications - CISSP, ECSA, LPT, Microsoft Certified Solutions Developer (MCSD), Microsoft Certified Application Developer (MCAD) and the CompTIA Network+ certification.

OWASP AppSec India Conference 2008 Advanced Threat Modeling

2008-08-03T20:52:45Z

Manopaul: /* Advanced Threat Modeling */

== Advanced Threat Modeling ==

To secure your home, you will first need to know how the thief could possibly enter and exit and where you should store your valuables. The same is true of your web applications. Unless you know what the vulnerabilities and threats of your web applications are, and what security measures you should take to protect them, ev1L h@x0rS or the enemy within (insider) could take advantage of the vulnerabilities.

Threat Modeling is a technique that you can use to identify ATVS (attacks, threats, vulnerabilities and safeguards) that could affect your web applications. Threat Modeling helps in designing your application securely from a confidentiality, integrity, availability, authentication, authorization and auditing perspective. It is an essential activity to be undertaken during the design stage of your SDLC and helps mitigate and minimize overall risk.

Come for a '''fun, hands-on, interactive''' session that will cover the '''basic and advanced elements of threat modeling''', filled with '''exercises for the attendees to participate'''.

'''Session Coverage''' 
The session will cover the following topics 
Introduction to Threat Modeling 
Threat Modeling Process 
Tools, Techniques and Templates 
Demos and Hands-On Exercises 
and more ...

'''Who should Attend?''' 
This session is for '''Management, Technical''' (Developer, QA, Security ...) and '''Operational professionals''' and any stakeholder that needs to understand how threat modeling can benefit their organizations/companies in designing secure web applications. Whether you are a novice or an expert apropos threat modeling, you will all leave learning something new to design the next generation of hack-resilient web applications.

'''Come and Win exciting Prizes''' 
First Prize - A FREE voucher to the official (ISC)2 CISSP® self-assessments (approx. $300 value) (or) 
Second Prize - A FREE voucher to the official (ISC)2 SSCP® self-assessments (approx. $110 value) 
(ISC)2 self-assessments are made possible due to courtesy of [["https://www.expresscertifications.com/isc2/" target="_blank" | Express Certifications]].

== About Instructor ==
[[Image:Mano_Paul.jpg|thumb|10px|frame|left|Mano Paul]]
Mano Paul (CISSP, MCSD, MCAD, CompTIA Network+, ECSA) is the Founder and CEO at SecuRisk Solutions. Based out of Austin, Texas in the USA, SecuRisk Solutions specializes in three areas of information security solutions - Product Development, Consulting and Awareness, Training & Education.

Before SecuRisk Solutions, Mano played several roles from software developer, quality assurance tester, logistics manager, technical architect, IT strategist and Security Engineer/Program Manager/Strategist at Dell Inc. His security experience includes designing and developing software security programs from Compliance-to-Coding, application security risk management, security strategy & management, and conducting security awareness training and education.

Mano is (ISC)2's Software Assurance Advisor and an appointed Industry representative of Information Systems Security Association (ISSA) Capitol of Texas chapter. He also serves as a faculty member for the ISSA security course at the local university.

Mano has been featured in various domestic and international security conferences, contributed to and published various security articles and is an invited speaker in the OWASP Application Security Conferences, CSI, Burton Group Catalyst, TRISC and the SC World Congress Conferences. He is a contributing author for the Information Security Management Handbook, writes periodically for the Certification Magazine and has contributed to several security topics for the Microsoft Solutions Developer Network.

Mano holds the following professional certifications - CISSP, ECSA, LPT, Microsoft Certified Solutions Developer (MCSD), Microsoft Certified Application Developer (MCAD) and the CompTIA Network+ certification.

OWASP AppSec India Conference 2008 Advanced Threat Modeling

2008-08-03T20:40:12Z

Manopaul: /* About Instructor */

== Advanced Threat Modeling ==

To secure your home, you will first need to know how the thief could possibly enter and exit and where you should store your valuables. The same is true of your web applications. Unless you know what the vulnerabilities and threats of your web applications are, and what security measures you should take to protect them, ev1L h@x0rS or the enemy within (insider) could take advantage of the vulnerabilities.

Threat Modeling is a technique that you can use to identify ATVS (attacks, threats, vulnerabilities and safeguards) that could affect your web applications. Threat Modeling helps in designing your application securely from a confidentiality, integrity, availability, authentication, authorization and auditing perspective. It is an essential activity to be undertaken during the design stage of your SDLC and helps mitigate and minimize overall risk.

Come for a '''fun, hands-on, interactive''' session that will cover the '''basic and advanced elements of threat modeling''', filled with '''exercises for the attendees to participate'''.

'''Session Coverage'''
The session will cover the following topics
1. Introduction to Threat Modeling
2. Threat Modeling Process
3. Tools, Techniques and Templates
4. Live Demo and Hands-On Exercises
and more ...

'''Who should Attend?'''
This session is for Management, Technical (Developer, QA, Security ...) and Operational professionals and any stakeholder that needs to understand how threat modeling can benefit their organizations/companies in designing secure web applications. Whether you are a novice or an expert apropos threat modeling, you will all leave learning something new to design the next generation of hack-resilient web applications.

'''Come and Win exciting Prizes'''
Come and win a free self-assessment voucher to the official (ISC)2 CISSP® (approx. $300 value) or an iPod Shuffle.

== About Instructor ==
[[Image:Mano_Paul.jpg|thumb|10px|frame|left|Mano Paul]]
Mano Paul (CISSP, MCSD, MCAD, CompTIA Network+, ECSA) is the Founder and CEO at SecuRisk Solutions. Based out of Austin, Texas in the USA, SecuRisk Solutions specializes in three areas of information security solutions - Product Development, Consulting and Awareness, Training & Education.

Before SecuRisk Solutions, Mano played several roles from software developer, quality assurance tester, logistics manager, technical architect, IT strategist and Security Engineer/Program Manager/Strategist at Dell Inc. His security experience includes designing and developing software security programs from Compliance-to-Coding, application security risk management, security strategy & management, and conducting security awareness training and education.

Mano is (ISC)2's Software Assurance Advisor and an appointed Industry representative of Information Systems Security Association (ISSA) Capitol of Texas chapter. He also serves as a faculty member for the ISSA security course at the local university.

Mano has been featured in various domestic and international security conferences, contributed to and published various security articles and is an invited speaker in the OWASP Application Security Conferences, CSI, Burton Group Catalyst, TRISC and the SC World Congress Conferences. He is a contributing author for the Information Security Management Handbook, writes periodically for the Certification Magazine and has contributed to several security topics for the Microsoft Solutions Developer Network.

Mano holds the following professional certifications - CISSP, ECSA, LPT, Microsoft Certified Solutions Developer (MCSD), Microsoft Certified Application Developer (MCAD) and the CompTIA Network+ certification.