https://wiki.owasp.org/api.php?action=feedcontributions&feedformat=atom&user=Tara+Causey OWASP - User contributions [en] 2026-05-07T08:40:01Z User contributions MediaWiki 1.27.2 https://wiki.owasp.org/index.php?title=Summit_2011&diff=93498 Summit 2011 2010-11-22T03:41:17Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> [[Image:Hotel entrance 697x395.jpg]] <br /> <br /> Below is the link to the Venue of the 2011 OWASP Summit in Lisbon, Portugal.&lt;br&gt; <br /> <br /> [http://www.camporeal.pt/en/hotel-residences.aspx http://www.camporeal.pt/en/hotel-residences.aspx] <br /> <br /> The hotel has an Airport Shuttle, Gym and Fitness Center, Gootball camp, Horse Back Riding, Day Spa, Internet WiFi, and Golfcourse as well as many other amenities. <br /> <br /> Meals and coffee breaks will be provided by OWASP.&lt;br&gt; <br /> <br /> [[Image:Villas.jpg]]&lt;br&gt; <br /> <br /> '''Villa Accomadations:'''&lt;br&gt; <br /> <br /> Residence-Pool 3 or 4 bedrooms&lt;br&gt; - Villa <br /> <br /> Each Residence includes:&lt;br&gt;- Private bathroom(s)&lt;br&gt;- Kitchenette&lt;br&gt;- Balcony or garden&lt;br&gt;- Swimming-pool shared by apartment/townhouse block&lt;br&gt;- Residence-Pool for 3 bedroom and 4 bedroom villas include a private swimming-pool <br /> <br /> &lt;br&gt; <br /> <br /> '''A Day in Lisbon, Portugal:''' <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> '''&lt;u&gt;[https://docs.google.com/document/d/1Q3it1KCIm3HKFhWUtQYdaYd-bTbw_5oLN_dwk9Sc-j0/edit?hl=en&amp;authkey=COymwN4E CONFIRMED 2011 OWASP GLOBAL SUMMIT ATTENDEES]&lt;/u&gt;''' <br /> <br /> *OWASP role/affiliation appear in parentheses<br /> <br /> &lt;br&gt; Lorna Alamri (Industry, Summit) <br /> <br /> Sarah Baso (Summit) <br /> <br /> Tom Brennan (Global Board, Membership), Proactive Risk <br /> <br /> Mark Bristow (Conferences) <br /> <br /> Larry Casey (Director of IT), Aspect Security <br /> <br /> Brad Causey (Projects, Summit) <br /> <br /> Justin Clarke (Connections, Summit), Director at Gotham Digital Science <br /> <br /> Michael Coates (Membership), Mozilla Web Security <br /> <br /> Dan Cornell (Membership), CTO Denim Group <br /> <br /> Dinis Cruz (Global Board, Projects, Summit) <br /> <br /> Lucas C. Ferreira (Conferences), Brazilian Chamber of Deputies <br /> <br /> Kate Hartmann (OWASP Operations Director) <br /> <br /> Eoin Keary (Global Board, Industry) <br /> <br /> Martin Knobloch (Education, Summit) <br /> <br /> Jason Li (Projects, Summit), Aspect Security <br /> <br /> Jim Manico (OWASP Podcast) <br /> <br /> Eduardo Neves (Education, Summit) <br /> <br /> Yiannis Pavlosoglou (Industry) <br /> <br /> Matt Tesauro (Global Board, Industry), Praetorian <br /> <br /> Colin Watson (Industry) <br /> <br /> Dave Wichers (Global Board, Conferences), Aspect Security <br /> <br /> Jeff Williams (Global Board Chair), Aspect Security <br /> <br /> &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011_DC_update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;[https://docs.google.com/document/d/1Q3it1KCIm3HKFhWUtQYdaYd-bTbw_5oLN_dwk9Sc-j0/edit?hl=en&amp;authkey=COymwN4E Confirmed 2011 OWASP Global Summit Attendees]&lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule&lt;br&gt; ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Lunch <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1320 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Projects <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1350 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Industry <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1420&lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Membership <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1430 - 1450&lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Connections <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1500 - 1520 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Coffee Break <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1450 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Chapters <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1620 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Education <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1630 - 1730 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> TBD <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1730 - 1800 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Wrap up of the Day &lt;br&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Evening Event TBD&lt;br&gt; <br /> <br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Wednesday, February 9th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php/Working_Sessions_Methodology Working Sessions]<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php?title=Working_Sessions_Browser_Working_Group&amp;action=edit Browser Working Group] <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php/Assesment_Criteria_%26_Orphaned_Projects Projects - Assessment Criteria &amp;amp; Orphaned Projects]&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php?title=Working_Sessions_Browser_Working_Group&amp;action=edit Browser Working Group] <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php?title=Working_Sessions_Browser_Working_Group&amp;action=edit Browser Working Group] <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php/Funding,_Marketing,_%26_Commerical_Services Projects - Funding, Marketing, &amp;amp; Commerical Services]&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1900 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php?title=Working_Sessions_Browser_Working_Group&amp;action=edit Browser Working Group] <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Evening Event TBD<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Thursday, February 10th, 2010<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Main Room <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php/Working_Sessions_Methodology Working Sessions]&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php/Working_Sessions_Methodology Working Sessions&lt;br&gt;]<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php/XSS_-_Frameworks XSS - Frameworks] <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php/Assesment_Criteria_%26_Orphaned_Projects XSS- Awarness, Resources &amp;amp; Partnerships] <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300- 1330 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1415 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1415 - 1530 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Memberships<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1600 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1645 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Chapters<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1645- 1730 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Evening Event TBD<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;6&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Friday, February 11th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Board Presentation<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1000 - 1045 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Industry<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1045 - 1130 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1130 - 1215 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Education<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1230 - 1330 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1700 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Wrap Up Summit<br /> |}<br /> <br /> &lt;br&gt;* '''Browser Day:''' &lt;span style=&quot;font-weight: bold;&quot;&gt; &lt;/span&gt; One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> '''* Sandboxing:''' Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins?&lt;br&gt; '''* Securing plugins:''' Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally?&lt;br&gt; '''* Enduser warnings: '''How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings?&lt;br&gt; '''* Blacklisting: '''Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world?&lt;br&gt; '''* OS integration: '''More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this?&lt;br&gt; '''* JavaScript:''' How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon (currently no support)? Are (more) secure &quot;dialects&quot; such as FBJS and Caja the way to go? What's happening in EcmaScript Harmony?&lt;br&gt; '''* New HTTP headers:''' Are new opt-in HTTP headers the right way to add security features? For example Strict Transport Security, x-frame-options, origin and Content Security Policy. <br /> <br /> &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=Working_Sessions_XSS_AwarnessResourcesPartnerships&diff=93497 Working Sessions XSS AwarnessResourcesPartnerships 2010-11-22T03:39:59Z <p>Tara Causey: </p> <hr /> <div>{| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 179, 179); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;black&quot;&gt;'''Working Sessions Operational Rules''' - [[:Working Sessions Methodology|'''Please see here the general frame of rules''']].&lt;/font&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION IDENTIFICATION'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Work Session Name''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | &lt;font color=&quot;black&quot;&gt;&lt;span style=&quot;font-weight: bold;&quot;&gt; XSS- Awarness, Resources &amp;amp; Partnerships &lt;/span&gt;&lt;/font&gt;&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Short Work Session Description''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | Awarness, Resources &amp;amp; Partnerships for XSS &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Related Projects (if any)''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Email Contacts &amp;amp; Roles''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Chair'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Secretary'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Mailing list'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011#tab=How_Do_I_Join.3F_.2F_Mailing_list '''Subscription Page''']<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION SPECIFICS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Objectives''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;<br /> #Discuss gaps and patterns in gaps in security coverage across frameworks, <br /> #Discuss possible solutions for security areas.&lt;/font&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Venue/Date&amp;amp;Time/Model''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Venue'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011 OWASP EU Summit Portugal 2011] <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> '''Date&amp;amp;Time''' <br /> <br /> February 10, 2011 &lt;br&gt;Time 11:00AM <br /> <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Discussion Model'''&lt;br&gt;&quot;Participants + Attendees&quot;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION OPERATIONAL RESOURCES'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Projector, whiteboards, markers, Internet connectivity, power<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION ADDITIONAL DETAILS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;left&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> *'''Related resources:''' [[OWASP Working Session - Browser Security Letters]] <br /> *'''Frameworks to invite:''' .NET, J2EE, Spring, Struts, ASP.NET MVC, RoR, PHP, etc. <br /> **10 Oct: &quot;Open Letter to Frameworks (version for open mailing lists)&quot; sent to <br /> ***Ruby-on-Rails Core mailing list <br /> ***Springnet Developer mailing list <br /> ***Struts Dev mailing list<br /> <br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;3&quot; | '''WORKING SESSION OUTCOMES'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(108, 130, 181);&quot; | Statements, Initiatives or Decisions <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Proposed by Working Group''' <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Approved by OWASP Board'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Actionable advice for each individual frameworks . <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Identify points-of-contact for frameworks. <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |}<br /> <br /> == Working Session Participants ==<br /> <br /> (Add you name by editing this table. On your the right, just above the this frame, you have the option to edit) <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION PARTICIPANTS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Name''' <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Company''' <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Notes &amp;amp; reason for participating, issues to be discussed/addressed'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |}<br /> <br /> If needed add here more lines. <br /> <br /> [[Category:OWASP_Working_Session]]</div> Tara Causey https://wiki.owasp.org/index.php?title=Working_Sessions_XSS_AwarnessResourcesPartnerships&diff=93496 Working Sessions XSS AwarnessResourcesPartnerships 2010-11-22T03:37:12Z <p>Tara Causey: </p> <hr /> <div>{| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 179, 179); color: white;&quot; | &lt;font color=&quot;black&quot;&gt;'''Working Sessions Operational Rules''' - [[:Working Sessions Methodology|'''Please see here the general frame of rules''']].&lt;/font&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION IDENTIFICATION'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Work Session Name''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;font color=&quot;black&quot;&gt;&lt;span style=&quot;font-weight: bold;&quot;&gt;Assessment Criteria &amp;amp; Orphaned Projects&lt;/span&gt;&lt;/font&gt; &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Short Work Session Description''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Related Projects (if any)''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Email Contacts &amp;amp; Roles''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Chair'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Secretary'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Mailing list'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011#tab=How_Do_I_Join.3F_.2F_Mailing_list '''Subscription Page''']<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION SPECIFICS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Objectives''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;<br /> #Discuss gaps and patterns in gaps in security coverage across frameworks, <br /> #Discuss possible solutions for security areas.&lt;/font&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Venue/Date&amp;amp;Time/Model''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Venue'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011 OWASP EU Summit Portugal 2011] <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> '''Date&amp;amp;Time''' <br /> <br /> February 10, 2011 &lt;br&gt;Time 11:00AM <br /> <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Discussion Model'''&lt;br&gt;&quot;Participants + Attendees&quot;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION OPERATIONAL RESOURCES'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Projector, whiteboards, markers, Internet connectivity, power<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION ADDITIONAL DETAILS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;left&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> *'''Related resources:''' [[OWASP Working Session - Browser Security Letters]] <br /> *'''Frameworks to invite:''' .NET, J2EE, Spring, Struts, ASP.NET MVC, RoR, PHP, etc. <br /> **10 Oct: &quot;Open Letter to Frameworks (version for open mailing lists)&quot; sent to <br /> ***Ruby-on-Rails Core mailing list <br /> ***Springnet Developer mailing list <br /> ***Struts Dev mailing list<br /> <br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | '''WORKING SESSION OUTCOMES'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(108, 130, 181);&quot; | Statements, Initiatives or Decisions <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Proposed by Working Group''' <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Approved by OWASP Board'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Actionable advice for each individual frameworks . <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Identify points-of-contact for frameworks. <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |}<br /> <br /> == Working Session Participants ==<br /> <br /> (Add you name by editing this table. On your the right, just above the this frame, you have the option to edit) <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION PARTICIPANTS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Name''' <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Company''' <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Notes &amp;amp; reason for participating, issues to be discussed/addressed'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |}<br /> <br /> If needed add here more lines. <br /> <br /> [[Category:OWASP_Working_Session]]</div> Tara Causey https://wiki.owasp.org/index.php?title=Working_Sessions_XSS_Frameworks&diff=93495 Working Sessions XSS Frameworks 2010-11-22T03:35:23Z <p>Tara Causey: </p> <hr /> <div>{| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 179, 179); color: white;&quot; | &lt;font color=&quot;black&quot;&gt;'''Working Sessions Operational Rules''' - [[:Working Sessions Methodology|'''Please see here the general frame of rules''']].&lt;/font&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION IDENTIFICATION'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Work Session Name''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;font color=&quot;black&quot;&gt;&lt;span style=&quot;font-weight: bold;&quot;&gt;XSS - Frameworks&lt;/span&gt;&lt;/font&gt; &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Short Work Session Description''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | What is the sandard fromework for XSS?<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Related Projects (if any)''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Email Contacts &amp;amp; Roles''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Chair'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Secretary'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Mailing list'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011#tab=How_Do_I_Join.3F_.2F_Mailing_list '''Subscription Page''']<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION SPECIFICS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Objectives''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;<br /> #Discuss gaps and patterns in gaps in security coverage across frameworks, <br /> #Discuss possible solutions for security areas.&lt;/font&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Venue/Date&amp;amp;Time/Model''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Venue'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011 OWASP EU Summit Portugal 2011] <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> '''Date&amp;amp;Time''' <br /> <br /> February 10, 2011 &lt;br&gt;Time 9:00AM <br /> <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Discussion Model'''&lt;br&gt;&quot;Participants + Attendees&quot;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION OPERATIONAL RESOURCES'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Projector, whiteboards, markers, Internet connectivity, power<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION ADDITIONAL DETAILS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;left&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> *'''Related resources:''' [[OWASP Working Session - Browser Security Letters]] <br /> *'''Frameworks to invite:''' .NET, J2EE, Spring, Struts, ASP.NET MVC, RoR, PHP, etc. <br /> **10 Oct: &quot;Open Letter to Frameworks (version for open mailing lists)&quot; sent to <br /> ***Ruby-on-Rails Core mailing list <br /> ***Springnet Developer mailing list <br /> ***Struts Dev mailing list<br /> <br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | '''WORKING SESSION OUTCOMES'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(108, 130, 181);&quot; | Statements, Initiatives or Decisions <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Proposed by Working Group''' <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Approved by OWASP Board'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Actionable advice for each individual frameworks . <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Identify points-of-contact for frameworks. <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |}<br /> <br /> == Working Session Participants ==<br /> <br /> (Add you name by editing this table. On your the right, just above the this frame, you have the option to edit) <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION PARTICIPANTS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Name''' <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Company''' <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Notes &amp;amp; reason for participating, issues to be discussed/addressed'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |}<br /> <br /> If needed add here more lines. <br /> <br /> [[Category:OWASP_Working_Session]]</div> Tara Causey https://wiki.owasp.org/index.php?title=Working_Sessions_Browser_Working_Group&diff=93494 Working Sessions Browser Working Group 2010-11-22T03:27:27Z <p>Tara Causey: </p> <hr /> <div>{| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 179, 179); color: white;&quot; | &lt;font color=&quot;black&quot;&gt;'''Working Sessions Operational Rules''' - [[:Working Sessions Methodology|'''Please see here the general frame of rules''']].&lt;/font&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION IDENTIFICATION'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Work Session Name''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;font color=&quot;black&quot;&gt;&lt;span style=&quot;font-weight: bold;&quot;&gt;Browser Working Group&lt;/span&gt;&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Short Work Session Description''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Related Projects (if any)''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Email Contacts &amp;amp; Roles''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Chair'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Secretary'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Mailing list'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011#tab=How_Do_I_Join.3F_.2F_Mailing_list '''Subscription Page''']<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION SPECIFICS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Objectives''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;<br /> #Discuss gaps and patterns in gaps in security coverage across frameworks, <br /> #Discuss possible solutions for security areas.&lt;/font&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Venue/Date&amp;amp;Time/Model''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Venue'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011 OWASP EU Summit Portugal 2011] <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> '''Date&amp;amp;Time''' <br /> <br /> February 9, 2011 &lt;br&gt;Time 9:00AM <br /> <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Discussion Model'''&lt;br&gt;&quot;Participants + Attendees&quot;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION OPERATIONAL RESOURCES'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Projector, whiteboards, markers, Internet connectivity, power<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION ADDITIONAL DETAILS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;left&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> *'''Related resources:''' [[OWASP Working Session - Browser Security Letters]] <br /> *'''Frameworks to invite:''' .NET, J2EE, Spring, Struts, ASP.NET MVC, RoR, PHP, etc. <br /> **10 Oct: &quot;Open Letter to Frameworks (version for open mailing lists)&quot; sent to <br /> ***Ruby-on-Rails Core mailing list <br /> ***Springnet Developer mailing list <br /> ***Struts Dev mailing list<br /> <br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | '''WORKING SESSION OUTCOMES'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(108, 130, 181);&quot; | Statements, Initiatives or Decisions <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Proposed by Working Group''' <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Approved by OWASP Board'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Actionable advice for each individual frameworks . <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Identify points-of-contact for frameworks. <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |}<br /> <br /> == Working Session Participants ==<br /> <br /> (Add you name by editing this table. On your the right, just above the this frame, you have the option to edit) <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION PARTICIPANTS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Name''' <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Company''' <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Notes &amp;amp; reason for participating, issues to be discussed/addressed'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 9 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |}<br /> <br /> If needed add here more lines. <br /> <br /> [[Category:OWASP_Working_Session]]</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=93493 Summit 2011 2010-11-22T03:00:43Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> [[Image:Hotel entrance 697x395.jpg]] <br /> <br /> Below is the link to the Venue of the 2011 OWASP Summit in Lisbon, Portugal.&lt;br&gt; <br /> <br /> [http://www.camporeal.pt/en/hotel-residences.aspx http://www.camporeal.pt/en/hotel-residences.aspx] <br /> <br /> The hotel has an Airport Shuttle, Gym and Fitness Center, Gootball camp, Horse Back Riding, Day Spa, Internet WiFi, and Golfcourse as well as many other amenities. <br /> <br /> Meals and coffee breaks will be provided by OWASP.&lt;br&gt; <br /> <br /> [[Image:Villas.jpg]]&lt;br&gt; <br /> <br /> '''Villa Accomadations:'''&lt;br&gt; <br /> <br /> Residence-Pool 3 or 4 bedrooms&lt;br&gt; - Villa <br /> <br /> Each Residence includes:&lt;br&gt;- Private bathroom(s)&lt;br&gt;- Kitchenette&lt;br&gt;- Balcony or garden&lt;br&gt;- Swimming-pool shared by apartment/townhouse block&lt;br&gt;- Residence-Pool for 3 bedroom and 4 bedroom villas include a private swimming-pool <br /> <br /> &lt;br&gt; <br /> <br /> '''A Day in Lisbon, Portugal:''' <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> '''&lt;u&gt;[https://docs.google.com/document/d/1Q3it1KCIm3HKFhWUtQYdaYd-bTbw_5oLN_dwk9Sc-j0/edit?hl=en&amp;authkey=COymwN4E CONFIRMED 2011 OWASP GLOBAL SUMMIT ATTENDEES]&lt;/u&gt;''' <br /> <br /> *OWASP role/affiliation appear in parentheses<br /> <br /> &lt;br&gt; Lorna Alamri (Industry, Summit) <br /> <br /> Sarah Baso (Summit) <br /> <br /> Tom Brennan (Global Board, Membership), Proactive Risk <br /> <br /> Mark Bristow (Conferences) <br /> <br /> Larry Casey (Director of IT), Aspect Security <br /> <br /> Brad Causey (Projects, Summit) <br /> <br /> Justin Clarke (Connections, Summit), Director at Gotham Digital Science <br /> <br /> Michael Coates (Membership), Mozilla Web Security <br /> <br /> Dan Cornell (Membership), CTO Denim Group <br /> <br /> Dinis Cruz (Global Board, Projects, Summit) <br /> <br /> Lucas C. Ferreira (Conferences), Brazilian Chamber of Deputies <br /> <br /> Kate Hartmann (OWASP Operations Director) <br /> <br /> Eoin Keary (Global Board, Industry) <br /> <br /> Martin Knobloch (Education, Summit) <br /> <br /> Jason Li (Projects, Summit), Aspect Security <br /> <br /> Jim Manico (OWASP Podcast) <br /> <br /> Eduardo Neves (Education, Summit) <br /> <br /> Yiannis Pavlosoglou (Industry) <br /> <br /> Matt Tesauro (Global Board, Industry), Praetorian <br /> <br /> Colin Watson (Industry) <br /> <br /> Dave Wichers (Global Board, Conferences), Aspect Security <br /> <br /> Jeff Williams (Global Board Chair), Aspect Security <br /> <br /> &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011_DC_update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;[https://docs.google.com/document/d/1Q3it1KCIm3HKFhWUtQYdaYd-bTbw_5oLN_dwk9Sc-j0/edit?hl=en&amp;authkey=COymwN4E Confirmed 2011 OWASP Global Summit Attendees]&lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule&lt;br&gt; ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Lunch <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1320 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Projects <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1350 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Industry <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1420&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Membership <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1430 - 1450&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Connections <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1500 - 1520 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Coffee Break <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1450 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Chapters <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1620 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Education <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1630 - 1730 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> TBD <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1730 - 1800 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Wrap up of the Day &lt;br&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Evening Event TBD&lt;br&gt; <br /> <br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Wednesday, February 9th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | [http://www.owasp.org/index.php/Working_Sessions_Methodology Working Sessions]<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php?title=Working_Sessions_Browser_Working_Group&amp;action=edit Browser Working Group] <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php/Assesment_Criteria_%26_Orphaned_Projects Projects - Assessment Criteria &amp;amp; Orphaned Projects]&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php?title=Working_Sessions_Browser_Working_Group&amp;action=edit Browser Working Group] <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php?title=Working_Sessions_Browser_Working_Group&amp;action=edit Browser Working Group] <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php/Funding,_Marketing,_%26_Commerical_Services Projects - Funding, Marketing, &amp;amp; Commerical Services]&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1900 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php?title=Working_Sessions_Browser_Working_Group&amp;action=edit Browser Working Group] <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Evening Event TBD<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Thursday, February 10th, 2010<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Main Room <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php/Working_Sessions_Methodology Working Sessions]&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php/Working_Sessions_Methodology Working Sessions&lt;br&gt;]<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php/XSS_-_Frameworks XSS - Frameworks] <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php/Assesment_Criteria_%26_Orphaned_Projects XSS- Awarness, Resources &amp;amp; Partnerships] <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300- 1330 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1415 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Projects<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1415 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Memberships<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1600 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1645 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Chapters<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1645- 1730 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Evening Event TBD<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;6&quot; | Agenda for Friday, February 11th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Board Presentation<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1000 - 1045 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Industry<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1045 - 1130 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1130 - 1215 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Education<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1230 - 1330 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;5&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1700 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;5&quot; | Wrap Up Summit<br /> |}<br /> <br /> &lt;br&gt;* '''Browser Day:'''<br /> &lt;span style=&quot;font-weight: bold;&quot;&gt; &lt;/span&gt;<br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years.<br /> <br /> '''* Sandboxing:''' Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins?&lt;br&gt; '''* Securing plugins:''' Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally?&lt;br&gt; '''* Enduser warnings: '''How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50 % of users clicking through warnings?&lt;br&gt; '''* Blacklisting: '''Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world?&lt;br&gt; '''* OS integration: '''More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this?&lt;br&gt; '''* JavaScript:''' How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon (currently no support)? Are (more) secure &quot;dialects&quot; such as FBJS and Caja the way to go? What's happening in EcmaScript Harmony?&lt;br&gt; '''* New HTTP headers:''' Are new opt-in HTTP headers the right way to add security features? For example Strict Transport Security, x-frame-options, origin and Content Security Policy.<br /> <br /> &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=Working_Sessions_XSS_AwarnessResourcesPartnerships&diff=93492 Working Sessions XSS AwarnessResourcesPartnerships 2010-11-22T02:54:02Z <p>Tara Causey: </p> <hr /> <div>{| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 179, 179); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;black&quot;&gt;'''Working Sessions Operational Rules''' - [[:Working Sessions Methodology|'''Please see here the general frame of rules''']].&lt;/font&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION IDENTIFICATION'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Work Session Name''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | &lt;font color=&quot;black&quot;&gt;&lt;span style=&quot;font-weight: bold;&quot;&gt;Assessment Criteria &amp;amp; Orphaned Projects&lt;/span&gt;&lt;/font&gt; &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Short Work Session Description''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | Generate<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Related Projects (if any)''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Email Contacts &amp;amp; Roles''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Chair'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Secretary'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Mailing list'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011#tab=How_Do_I_Join.3F_.2F_Mailing_list '''Subscription Page''']<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION SPECIFICS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Objectives''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;<br /> #Discuss gaps and patterns in gaps in security coverage across frameworks, <br /> #Discuss possible solutions for security areas.&lt;/font&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Venue/Date&amp;amp;Time/Model''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Venue'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011 OWASP EU Summit Portugal 2011] <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> '''Date&amp;amp;Time''' <br /> <br /> February 10, 2011 &lt;br&gt;Time 11:00AM <br /> <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Discussion Model'''&lt;br&gt;&quot;Participants + Attendees&quot;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION OPERATIONAL RESOURCES'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Projector, whiteboards, markers, Internet connectivity, power<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION ADDITIONAL DETAILS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;left&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> *'''Related resources:''' [[OWASP Working Session - Browser Security Letters]] <br /> *'''Frameworks to invite:''' .NET, J2EE, Spring, Struts, ASP.NET MVC, RoR, PHP, etc. <br /> **10 Oct: &quot;Open Letter to Frameworks (version for open mailing lists)&quot; sent to <br /> ***Ruby-on-Rails Core mailing list <br /> ***Springnet Developer mailing list <br /> ***Struts Dev mailing list<br /> <br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;3&quot; | '''WORKING SESSION OUTCOMES'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(108, 130, 181);&quot; | Statements, Initiatives or Decisions <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Proposed by Working Group''' <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Approved by OWASP Board'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Actionable advice for each individual frameworks . <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Identify points-of-contact for frameworks. <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |}<br /> <br /> == Working Session Participants ==<br /> <br /> (Add you name by editing this table. On your the right, just above the this frame, you have the option to edit) <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION PARTICIPANTS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Name''' <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Company''' <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Notes &amp;amp; reason for participating, issues to be discussed/addressed'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |}<br /> <br /> If needed add here more lines. <br /> <br /> [[Category:OWASP_Working_Session]]</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=93491 Summit 2011 2010-11-22T02:49:07Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> == Browser Day ==<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon ([http://kangax.github.com/es5-compat-table/ currently no support])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> [[Image:Hotel entrance 697x395.jpg]] <br /> <br /> Below is the link to the Venue of the 2011 OWASP Summit in Lisbon, Portugal.&lt;br&gt; <br /> <br /> [http://www.camporeal.pt/en/hotel-residences.aspx http://www.camporeal.pt/en/hotel-residences.aspx] <br /> <br /> The hotel has an Airport Shuttle, Gym and Fitness Center, Gootball camp, Horse Back Riding, Day Spa, Internet WiFi, and Golfcourse as well as many other amenities. <br /> <br /> Meals and coffee breaks will be provided by OWASP.&lt;br&gt; <br /> <br /> [[Image:Villas.jpg]]&lt;br&gt; <br /> <br /> '''Villa Accomadations:'''&lt;br&gt; <br /> <br /> Residence-Pool 3 or 4 bedrooms&lt;br&gt; - Villa <br /> <br /> Each Residence includes:&lt;br&gt;- Private bathroom(s)&lt;br&gt;- Kitchenette&lt;br&gt;- Balcony or garden&lt;br&gt;- Swimming-pool shared by apartment/townhouse block&lt;br&gt;- Residence-Pool for 3 bedroom and 4 bedroom villas include a private swimming-pool <br /> <br /> &lt;br&gt; <br /> <br /> '''A Day in Lisbon, Portugal:''' <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> '''&lt;u&gt;[https://docs.google.com/document/d/1Q3it1KCIm3HKFhWUtQYdaYd-bTbw_5oLN_dwk9Sc-j0/edit?hl=en&amp;authkey=COymwN4E CONFIRMED 2011 OWASP GLOBAL SUMMIT ATTENDEES]&lt;/u&gt;''' <br /> <br /> *OWASP role/affiliation appear in parentheses<br /> <br /> &lt;br&gt; Lorna Alamri (Industry, Summit) <br /> <br /> Sarah Baso (Summit) <br /> <br /> Tom Brennan (Global Board, Membership), Proactive Risk <br /> <br /> Mark Bristow (Conferences) <br /> <br /> Larry Casey (Director of IT), Aspect Security <br /> <br /> Brad Causey (Projects, Summit) <br /> <br /> Justin Clarke (Connections, Summit), Director at Gotham Digital Science <br /> <br /> Michael Coates (Membership), Mozilla Web Security <br /> <br /> Dan Cornell (Membership), CTO Denim Group <br /> <br /> Dinis Cruz (Global Board, Projects, Summit) <br /> <br /> Lucas C. Ferreira (Conferences), Brazilian Chamber of Deputies <br /> <br /> Kate Hartmann (OWASP Operations Director) <br /> <br /> Eoin Keary (Global Board, Industry) <br /> <br /> Martin Knobloch (Education, Summit) <br /> <br /> Jason Li (Projects, Summit), Aspect Security <br /> <br /> Jim Manico (OWASP Podcast) <br /> <br /> Eduardo Neves (Education, Summit) <br /> <br /> Yiannis Pavlosoglou (Industry) <br /> <br /> Matt Tesauro (Global Board, Industry), Praetorian <br /> <br /> Colin Watson (Industry) <br /> <br /> Dave Wichers (Global Board, Conferences), Aspect Security <br /> <br /> Jeff Williams (Global Board Chair), Aspect Security <br /> <br /> &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011_DC_update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;[https://docs.google.com/document/d/1Q3it1KCIm3HKFhWUtQYdaYd-bTbw_5oLN_dwk9Sc-j0/edit?hl=en&amp;authkey=COymwN4E Confirmed 2011 OWASP Global Summit Attendees]&lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule&lt;br&gt; ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Lunch <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1320 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Projects <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1350 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Industry <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1420&lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Membership <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1430 - 1450&lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Connections <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1500 - 1520 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Coffee Break <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1450 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Chapters <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1620 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Education <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1630 - 1730 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> TBD <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1730 - 1800 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Wrap up of the Day &lt;br&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Evening Event TBD&lt;br&gt; <br /> <br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Wednesday, February 9th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php?title=Working_Sessions_Browser_Working_Group&amp;action=edit Browser Working Group] <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php/Assesment_Criteria_%26_Orphaned_Projects Projects - Assessment Criteria &amp;amp; Orphaned Projects]&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php?title=Working_Sessions_Browser_Working_Group&amp;action=edit Browser Working Group] <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php?title=Working_Sessions_Browser_Working_Group&amp;action=edit Browser Working Group] <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php/Funding,_Marketing,_%26_Commerical_Services Projects - Funding, Marketing, &amp;amp; Commerical Services]&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1900 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php?title=Working_Sessions_Browser_Working_Group&amp;action=edit Browser Working Group] <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Evening Event TBD<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Thursday, February 10th, 2010<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Main Room <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php/XSS_-_Frameworks XSS - Frameworks] <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php/Assesment_Criteria_%26_Orphaned_Projects XSS- Awarness, Resources &amp;amp; Partnerships] <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300- 1330 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1415 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1415 - 1530 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Memberships<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1600 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1645 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Chapters<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1645- 1730 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Evening Event TBD<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;6&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Friday, February 11th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Board Presentation<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1000 - 1045 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Industry<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1045 - 1130 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1130 - 1215 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Education<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1230 - 1330 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1700 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Wrap Up Summit<br /> |}<br /> <br /> &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=Working_Sessions_XSS_Frameworks&diff=93490 Working Sessions XSS Frameworks 2010-11-22T02:46:14Z <p>Tara Causey: </p> <hr /> <div>{| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 179, 179); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;black&quot;&gt;'''Working Sessions Operational Rules''' - [[:Working Sessions Methodology|'''Please see here the general frame of rules''']].&lt;/font&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION IDENTIFICATION'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Work Session Name''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | &lt;font color=&quot;black&quot;&gt;&lt;span style=&quot;font-weight: bold;&quot;&gt;XSS - Frameworks&lt;/span&gt;&lt;/font&gt; &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Short Work Session Description''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | Generate<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Related Projects (if any)''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Email Contacts &amp;amp; Roles''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Chair'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Secretary'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Mailing list'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011#tab=How_Do_I_Join.3F_.2F_Mailing_list '''Subscription Page''']<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION SPECIFICS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Objectives''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;<br /> #Discuss gaps and patterns in gaps in security coverage across frameworks, <br /> #Discuss possible solutions for security areas.&lt;/font&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Venue/Date&amp;amp;Time/Model''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Venue'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011 OWASP EU Summit Portugal 2011] <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> '''Date&amp;amp;Time''' <br /> <br /> February 10, 2011 &lt;br&gt;Time 9:00AM <br /> <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Discussion Model'''&lt;br&gt;&quot;Participants + Attendees&quot;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION OPERATIONAL RESOURCES'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Projector, whiteboards, markers, Internet connectivity, power<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION ADDITIONAL DETAILS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;left&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> *'''Related resources:''' [[OWASP Working Session - Browser Security Letters]] <br /> *'''Frameworks to invite:''' .NET, J2EE, Spring, Struts, ASP.NET MVC, RoR, PHP, etc. <br /> **10 Oct: &quot;Open Letter to Frameworks (version for open mailing lists)&quot; sent to <br /> ***Ruby-on-Rails Core mailing list <br /> ***Springnet Developer mailing list <br /> ***Struts Dev mailing list<br /> <br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;3&quot; | '''WORKING SESSION OUTCOMES'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(108, 130, 181);&quot; | Statements, Initiatives or Decisions <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Proposed by Working Group''' <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Approved by OWASP Board'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Actionable advice for each individual frameworks . <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Identify points-of-contact for frameworks. <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |}<br /> <br /> == Working Session Participants ==<br /> <br /> (Add you name by editing this table. On your the right, just above the this frame, you have the option to edit) <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION PARTICIPANTS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Name''' <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Company''' <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Notes &amp;amp; reason for participating, issues to be discussed/addressed'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |}<br /> <br /> If needed add here more lines. <br /> <br /> [[Category:OWASP_Working_Session]]</div> Tara Causey https://wiki.owasp.org/index.php?title=Working_Sessions_XSS_AwarnessResourcesPartnerships&diff=93489 Working Sessions XSS AwarnessResourcesPartnerships 2010-11-22T02:44:16Z <p>Tara Causey: </p> <hr /> <div>{| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 179, 179); color: white;&quot; | &lt;font color=&quot;black&quot;&gt;'''Working Sessions Operational Rules''' - [[:Working Sessions Methodology|'''Please see here the general frame of rules''']].&lt;/font&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION IDENTIFICATION'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Work Session Name''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;font color=&quot;black&quot;&gt;&lt;span style=&quot;font-weight: bold;&quot;&gt;Assessment criteria &amp;amp; Orphaned Projects&lt;/span&gt;&lt;/font&gt; &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Short Work Session Description''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Generate<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Related Projects (if any)''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Email Contacts &amp;amp; Roles''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Chair'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Secretary'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Mailing list'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011#tab=How_Do_I_Join.3F_.2F_Mailing_list '''Subscription Page''']<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION SPECIFICS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Objectives''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;<br /> #Discuss gaps and patterns in gaps in security coverage across frameworks, <br /> #Discuss possible solutions for security areas.&lt;/font&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Venue/Date&amp;amp;Time/Model''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Venue'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011 OWASP EU Summit Portugal 2011] <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> '''Date&amp;amp;Time''' <br /> <br /> February 10, 2011 &lt;br&gt;Time 11:00AM <br /> <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Discussion Model'''&lt;br&gt;&quot;Participants + Attendees&quot;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION OPERATIONAL RESOURCES'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Projector, whiteboards, markers, Internet connectivity, power<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION ADDITIONAL DETAILS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;left&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> *'''Related resources:''' [[OWASP Working Session - Browser Security Letters]] <br /> *'''Frameworks to invite:''' .NET, J2EE, Spring, Struts, ASP.NET MVC, RoR, PHP, etc. <br /> **10 Oct: &quot;Open Letter to Frameworks (version for open mailing lists)&quot; sent to <br /> ***Ruby-on-Rails Core mailing list <br /> ***Springnet Developer mailing list <br /> ***Struts Dev mailing list<br /> <br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | '''WORKING SESSION OUTCOMES'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(108, 130, 181);&quot; | Statements, Initiatives or Decisions <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Proposed by Working Group''' <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Approved by OWASP Board'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Actionable advice for each individual frameworks . <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Identify points-of-contact for frameworks. <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |}<br /> <br /> == Working Session Participants ==<br /> <br /> (Add you name by editing this table. On your the right, just above the this frame, you have the option to edit) <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION PARTICIPANTS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Name''' <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Company''' <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Notes &amp;amp; reason for participating, issues to be discussed/addressed'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |}<br /> <br /> If needed add here more lines. <br /> <br /> [[Category:OWASP_Working_Session]]</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=93488 Summit 2011 2010-11-22T02:41:53Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> == Browser Day ==<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon ([http://kangax.github.com/es5-compat-table/ currently no support])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> [[Image:Hotel entrance 697x395.jpg]] <br /> <br /> Below is the link to the Venue of the 2011 OWASP Summit in Lisbon, Portugal.&lt;br&gt; <br /> <br /> [http://www.camporeal.pt/en/hotel-residences.aspx http://www.camporeal.pt/en/hotel-residences.aspx] <br /> <br /> The hotel has an Airport Shuttle, Gym and Fitness Center, Gootball camp, Horse Back Riding, Day Spa, Internet WiFi, and Golfcourse as well as many other amenities. <br /> <br /> Meals and coffee breaks will be provided by OWASP.&lt;br&gt; <br /> <br /> [[Image:Villas.jpg]]&lt;br&gt; <br /> <br /> '''Villa Accomadations:'''&lt;br&gt; <br /> <br /> Residence-Pool 3 or 4 bedrooms&lt;br&gt; - Villa <br /> <br /> Each Residence includes:&lt;br&gt;- Private bathroom(s)&lt;br&gt;- Kitchenette&lt;br&gt;- Balcony or garden&lt;br&gt;- Swimming-pool shared by apartment/townhouse block&lt;br&gt;- Residence-Pool for 3 bedroom and 4 bedroom villas include a private swimming-pool <br /> <br /> &lt;br&gt; <br /> <br /> '''A Day in Lisbon, Portugal:''' <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> '''&lt;u&gt;[https://docs.google.com/document/d/1Q3it1KCIm3HKFhWUtQYdaYd-bTbw_5oLN_dwk9Sc-j0/edit?hl=en&amp;authkey=COymwN4E CONFIRMED 2011 OWASP GLOBAL SUMMIT ATTENDEES]&lt;/u&gt;''' <br /> <br /> *OWASP role/affiliation appear in parentheses<br /> <br /> &lt;br&gt; Lorna Alamri (Industry, Summit) <br /> <br /> Sarah Baso (Summit) <br /> <br /> Tom Brennan (Global Board, Membership), Proactive Risk <br /> <br /> Mark Bristow (Conferences) <br /> <br /> Larry Casey (Director of IT), Aspect Security <br /> <br /> Brad Causey (Projects, Summit) <br /> <br /> Justin Clarke (Connections, Summit), Director at Gotham Digital Science <br /> <br /> Michael Coates (Membership), Mozilla Web Security <br /> <br /> Dan Cornell (Membership), CTO Denim Group <br /> <br /> Dinis Cruz (Global Board, Projects, Summit) <br /> <br /> Lucas C. Ferreira (Conferences), Brazilian Chamber of Deputies <br /> <br /> Kate Hartmann (OWASP Operations Director) <br /> <br /> Eoin Keary (Global Board, Industry) <br /> <br /> Martin Knobloch (Education, Summit) <br /> <br /> Jason Li (Projects, Summit), Aspect Security <br /> <br /> Jim Manico (OWASP Podcast) <br /> <br /> Eduardo Neves (Education, Summit) <br /> <br /> Yiannis Pavlosoglou (Industry) <br /> <br /> Matt Tesauro (Global Board, Industry), Praetorian <br /> <br /> Colin Watson (Industry) <br /> <br /> Dave Wichers (Global Board, Conferences), Aspect Security <br /> <br /> Jeff Williams (Global Board Chair), Aspect Security <br /> <br /> &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011_DC_update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;[https://docs.google.com/document/d/1Q3it1KCIm3HKFhWUtQYdaYd-bTbw_5oLN_dwk9Sc-j0/edit?hl=en&amp;authkey=COymwN4E Confirmed 2011 OWASP Global Summit Attendees]&lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule&lt;br&gt; ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Lunch <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1320 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Projects <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1350 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Industry <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1420&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Membership <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1430 - 1450&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Connections <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1500 - 1520 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Coffee Break <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1450 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Chapters <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1620 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Education <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1630 - 1730 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> TBD <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1730 - 1800 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Wrap up of the Day &lt;br&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Evening Event TBD&lt;br&gt; <br /> <br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Wednesday, February 9th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php?title=Working_Sessions_Browser_Working_Group&amp;action=edit Browser Working Group]<br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php/Assesment_Criteria_%26_Orphaned_Projects Projects - Assesment Criteria &amp;amp; Orphaned Projects]&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php?title=Working_Sessions_Browser_Working_Group&amp;action=edit Browser Working Group]<br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php?title=Working_Sessions_Browser_Working_Group&amp;action=edit Browser Working Group]<br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php/Funding,_Marketing,_%26_Commerical_Services Projects - Funding, Marketing, &amp;amp; Commerical Services]&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1900 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php?title=Working_Sessions_Browser_Working_Group&amp;action=edit Browser Working Group]<br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Evening Event TBD<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Thursday, February 10th, 2010<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Main Room <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php/XSS_-_Frameworks XSS - Frameworks] <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | [http://www.owasp.org/index.php/Assesment_Criteria_%26_Orphaned_Projects XSS- Awarness, Resources &amp;amp; Partnerships]<br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300- 1330 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1415 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Projects<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1415 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Memberships<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1600 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1645 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Chapters<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1645- 1730 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Evening Event TBD<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;6&quot; | Agenda for Friday, February 11th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Board Presentation<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1000 - 1045 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Industry<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1045 - 1130 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1130 - 1215 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Education<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1230 - 1330 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;5&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1700 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;5&quot; | Wrap Up Summit<br /> |}<br /> <br /> &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=Working_Sessions_Projects_Funding_Marketing_and_Commerical_Services&diff=93487 Working Sessions Projects Funding Marketing and Commerical Services 2010-11-22T02:39:42Z <p>Tara Causey: Created page with '{| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot; |- ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 179, 179); color: white;&quot; | &lt;font color=&quot;bl…'</p> <hr /> <div>{| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 179, 179); color: white;&quot; | &lt;font color=&quot;black&quot;&gt;'''Working Sessions Operational Rules''' - [[:Working Sessions Methodology|'''Please see here the general frame of rules''']].&lt;/font&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION IDENTIFICATION'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Work Session Name''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;font color=&quot;black&quot;&gt;&lt;span style=&quot;font-weight: bold;&quot;&gt;Funding, Marketing, &amp;amp; Commercial Services&lt;/span&gt;&lt;/font&gt;&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Short Work Session Description''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Generate<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Related Projects (if any)''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Email Contacts &amp;amp; Roles''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Chair'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Secretary'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Mailing list'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011#tab=How_Do_I_Join.3F_.2F_Mailing_list '''Subscription Page''']<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION SPECIFICS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Objectives''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;<br /> #Discuss gaps and patterns in gaps in security coverage across frameworks, <br /> #Discuss possible solutions for security areas.&lt;/font&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Venue/Date&amp;amp;Time/Model''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Venue'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011 OWASP EU Summit Portugal 2011] <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> '''Date&amp;amp;Time''' <br /> <br /> February 9, 2011 &lt;br&gt;Time 3:30 PM <br /> <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Discussion Model'''&lt;br&gt;&quot;Participants + Attendees&quot;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION OPERATIONAL RESOURCES'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Projector, whiteboards, markers, Internet connectivity, power<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION ADDITIONAL DETAILS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;left&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> *'''Related resources:''' [[OWASP Working Session - Browser Security Letters]] <br /> *'''Frameworks to invite:''' .NET, J2EE, Spring, Struts, ASP.NET MVC, RoR, PHP, etc. <br /> **10 Oct: &quot;Open Letter to Frameworks (version for open mailing lists)&quot; sent to <br /> ***Ruby-on-Rails Core mailing list <br /> ***Springnet Developer mailing list <br /> ***Struts Dev mailing list<br /> <br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | '''WORKING SESSION OUTCOMES'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(108, 130, 181);&quot; | Statements, Initiatives or Decisions <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Proposed by Working Group''' <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Approved by OWASP Board'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Actionable advice for each individual frameworks . <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Identify points-of-contact for frameworks. <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |}<br /> <br /> == Working Session Participants ==<br /> <br /> (Add you name by editing this table. On your the right, just above the this frame, you have the option to edit) <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION PARTICIPANTS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Name''' <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Company''' <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Notes &amp;amp; reason for participating, issues to be discussed/addressed'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |}<br /> <br /> If needed add here more lines. <br /> <br /> [[Category:OWASP_Working_Session]]</div> Tara Causey https://wiki.owasp.org/index.php?title=Working_Sessions_XSS_Frameworks&diff=93486 Working Sessions XSS Frameworks 2010-11-22T02:28:51Z <p>Tara Causey: Created page with '{| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot; |- ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 179, 179); color: white;&quot; | &lt;font color=&quot;bl…'</p> <hr /> <div>{| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 179, 179); color: white;&quot; | &lt;font color=&quot;black&quot;&gt;'''Working Sessions Operational Rules''' - [[:Working Sessions Methodology|'''Please see here the general frame of rules''']].&lt;/font&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION IDENTIFICATION'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Work Session Name''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;font color=&quot;black&quot;&gt;&lt;span style=&quot;font-weight: bold;&quot;&gt;XSS - Frameworks&lt;/span&gt;&lt;/font&gt; &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Short Work Session Description''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Generate<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Related Projects (if any)''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Email Contacts &amp;amp; Roles''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Chair'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Secretary'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Mailing list'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011#tab=How_Do_I_Join.3F_.2F_Mailing_list '''Subscription Page''']<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION SPECIFICS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Objectives''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;<br /> #Discuss gaps and patterns in gaps in security coverage across frameworks, <br /> #Discuss possible solutions for security areas.&lt;/font&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Venue/Date&amp;amp;Time/Model''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Venue'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011 OWASP EU Summit Portugal 2011] <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> '''Date&amp;amp;Time''' <br /> <br /> February 10, 2011 &lt;br&gt;Time 9:00AM <br /> <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Discussion Model'''&lt;br&gt;&quot;Participants + Attendees&quot;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION OPERATIONAL RESOURCES'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Projector, whiteboards, markers, Internet connectivity, power<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION ADDITIONAL DETAILS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;left&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> *'''Related resources:''' [[OWASP Working Session - Browser Security Letters]] <br /> *'''Frameworks to invite:''' .NET, J2EE, Spring, Struts, ASP.NET MVC, RoR, PHP, etc. <br /> **10 Oct: &quot;Open Letter to Frameworks (version for open mailing lists)&quot; sent to <br /> ***Ruby-on-Rails Core mailing list <br /> ***Springnet Developer mailing list <br /> ***Struts Dev mailing list<br /> <br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | '''WORKING SESSION OUTCOMES'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(108, 130, 181);&quot; | Statements, Initiatives or Decisions <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Proposed by Working Group''' <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Approved by OWASP Board'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Actionable advice for each individual frameworks . <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Identify points-of-contact for frameworks. <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |}<br /> <br /> == Working Session Participants ==<br /> <br /> (Add you name by editing this table. On your the right, just above the this frame, you have the option to edit) <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION PARTICIPANTS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Name''' <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Company''' <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Notes &amp;amp; reason for participating, issues to be discussed/addressed'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |}<br /> <br /> If needed add here more lines. <br /> <br /> [[Category:OWASP_Working_Session]]</div> Tara Causey https://wiki.owasp.org/index.php?title=Funding,_Marketing_%26_Commercial_services&diff=93485 Funding, Marketing & Commercial services 2010-11-22T02:24:12Z <p>Tara Causey: </p> <hr /> <div>{| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 179, 179); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;black&quot;&gt;'''Working Sessions Operational Rules''' - [[:Working Sessions Methodology|'''Please see here the general frame of rules''']].&lt;/font&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION IDENTIFICATION'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Work Session Name''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | &amp;nbsp;'''Funding, Marketing &amp;amp; Commercial services &lt;br&gt;'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Short Work Session Description''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | Generate<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Related Projects (if any)''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Email Contacts &amp;amp; Roles''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Chair'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Secretary'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Mailing list'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011#tab=How_Do_I_Join.3F_.2F_Mailing_list '''Subscription Page''']<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION SPECIFICS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Objectives''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;<br /> #Discuss gaps and patterns in gaps in security coverage across frameworks, <br /> #Discuss possible solutions for security areas.&lt;/font&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Venue/Date&amp;amp;Time/Model''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Venue'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011 OWASP EU Summit Portugal 2011] <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> '''Date&amp;amp;Time''' <br /> <br /> February 9, 2011 &lt;br&gt;Time 1330 <br /> <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Discussion Model'''&lt;br&gt;&quot;Participants + Attendees&quot;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION OPERATIONAL RESOURCES'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Projector, whiteboards, markers, Internet connectivity, power<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION ADDITIONAL DETAILS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;left&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> *'''Related resources:''' [[OWASP Working Session - Browser Security Letters]] <br /> *'''Frameworks to invite:''' .NET, J2EE, Spring, Struts, ASP.NET MVC, RoR, PHP, etc. <br /> **10 Oct: &quot;Open Letter to Frameworks (version for open mailing lists)&quot; sent to <br /> ***Ruby-on-Rails Core mailing list <br /> ***Springnet Developer mailing list <br /> ***Struts Dev mailing list<br /> <br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;3&quot; | '''WORKING SESSION OUTCOMES'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(108, 130, 181);&quot; | Statements, Initiatives or Decisions <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Proposed by Working Group''' <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Approved by OWASP Board'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Actionable advice for each individual frameworks . <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Identify points-of-contact for frameworks. <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |}<br /> <br /> == Working Session Participants ==<br /> <br /> (Add you name by editing this table. On your the right, just above the this frame, you have the option to edit) <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION PARTICIPANTS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Name''' <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Company''' <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Notes &amp;amp; reason for participating, issues to be discussed/addressed'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | - <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | - <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | - <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | - <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | - <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 3 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 4 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 5 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 6 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 7 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 8 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 9 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |}<br /> <br /> If needed add here more lines. <br /> <br /> [[Category:OWASP_Working_Session]]</div> Tara Causey https://wiki.owasp.org/index.php?title=Funding,_Marketing_%26_Commercial_services&diff=93484 Funding, Marketing & Commercial services 2010-11-22T02:23:22Z <p>Tara Causey: </p> <hr /> <div>{| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 179, 179); color: white;&quot; | &lt;font color=&quot;black&quot;&gt;'''Working Sessions Operational Rules''' - [[:Working Sessions Methodology|'''Please see here the general frame of rules''']].&lt;/font&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION IDENTIFICATION'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Work Session Name''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &amp;nbsp;'''Funding, Marketing &amp;amp; Commercial services &lt;br&gt;'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Short Work Session Description''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Generate<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Related Projects (if any)''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Email Contacts &amp;amp; Roles''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Chair'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Secretary'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Mailing list'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011#tab=How_Do_I_Join.3F_.2F_Mailing_list '''Subscription Page''']<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION SPECIFICS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Objectives''' <br /> | align=&quot;left&quot; colspan=&quot;6&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;<br /> #Discuss gaps and patterns in gaps in security coverage across frameworks, <br /> #Discuss possible solutions for security areas.&lt;/font&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Venue/Date&amp;amp;Time/Model''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Venue'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011 OWASP EU Summit Portugal 2011] <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> '''Date&amp;amp;Time''' <br /> <br /> February 9, 2011 &lt;br&gt;Time 1330 <br /> <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Discussion Model'''&lt;br&gt;&quot;Participants + Attendees&quot;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION OPERATIONAL RESOURCES'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Projector, whiteboards, markers, Internet connectivity, power<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION ADDITIONAL DETAILS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;left&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> *'''Related resources:''' [[OWASP Working Session - Browser Security Letters]] <br /> *'''Frameworks to invite:''' .NET, J2EE, Spring, Struts, ASP.NET MVC, RoR, PHP, etc. <br /> **10 Oct: &quot;Open Letter to Frameworks (version for open mailing lists)&quot; sent to <br /> ***Ruby-on-Rails Core mailing list <br /> ***Springnet Developer mailing list <br /> ***Struts Dev mailing list<br /> <br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | '''WORKING SESSION OUTCOMES'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(108, 130, 181);&quot; | Statements, Initiatives or Decisions <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Proposed by Working Group''' <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Approved by OWASP Board'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Actionable advice for each individual frameworks . <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Identify points-of-contact for frameworks. <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |}<br /> <br /> == Working Session Participants ==<br /> <br /> (Add you name by editing this table. On your the right, just above the this frame, you have the option to edit) <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; colspan=&quot;7&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION PARTICIPANTS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Name''' <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Company''' <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Notes &amp;amp; reason for participating, issues to be discussed/addressed'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | - <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | TDB (Officially Invited by OWASP) <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | http://forums.asp.net/Themes/fan/images/roleicons/dff6f773-6732-4cd8-addf-42a8ab367d22.gif <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Official Representative from Microsoft's ASP.NET team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | - <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | TDB (Officially Invited by OWASP) <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | http://metawidget.sourceforge.net/media/logo-struts.gif <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Official Representative from Apache Struts team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | - <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | TDB (Officially Invited by OWASP) <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | http://boedesign.com/wp-content/themes/bd5/images/cakephp.gif <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Official Representative from CakePHP team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | - <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | TDB (Officially Invited by OWASP) <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | http://www.tutorialized.com/upload/20070625154105_rails.jpg <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Official Representative from Ruby-on-Rails team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | - <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | TDB (Officially Invited by OWASP) <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | http://www.springframework.net/doc-1.1-M1/reference/html/images/xdev-spring_logo.jpg <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Official Representative from Spring.NET team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Mario Heiderich <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Independent <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | General Expertise<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Gareth Heyes <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Independent <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | General Expertise<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 3 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Marcin Wielgoszewski <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Protiviti <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Participant<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 4 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Adam Baso <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Symantec <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Participant<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 5 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Giorgio Fedon <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Minded Security <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Participant<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 6 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Colin Watson <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Watson Hall <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Participant<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 7 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Esteban Ribicic <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | HP <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Participant<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 8 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Daniele Bellucci <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Communication Valley <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Partecipant<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 9 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |}<br /> <br /> If needed add here more lines. <br /> <br /> [[Category:OWASP_Working_Session]]</div> Tara Causey https://wiki.owasp.org/index.php?title=Funding,_Marketing_%26_Commercial_services&diff=93483 Funding, Marketing & Commercial services 2010-11-22T02:21:55Z <p>Tara Causey: Created page with '{| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot; |- ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 179, 179); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;bl…'</p> <hr /> <div>{| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 179, 179); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;black&quot;&gt;'''Working Sessions Operational Rules''' - [[:Working Sessions Methodology|'''Please see here the general frame of rules''']].&lt;/font&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION IDENTIFICATION'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Work Session Name''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | '''&lt;font color=&quot;black&quot;&gt;&lt;span style=&quot;font-weight: bold;&quot; /&gt;&lt;/font&gt; Funding, Marketing &amp;amp; Commercial services &lt;br&gt;'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Short Work Session Description''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | Generate<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Related Projects (if any)''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Email Contacts &amp;amp; Roles''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Chair'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Secretary'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Mailing list'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011#tab=How_Do_I_Join.3F_.2F_Mailing_list '''Subscription Page''']<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION SPECIFICS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Objectives''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;<br /> #Discuss gaps and patterns in gaps in security coverage across frameworks, <br /> #Discuss possible solutions for security areas.&lt;/font&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Venue/Date&amp;amp;Time/Model''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Venue'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011 OWASP EU Summit Portugal 2011] <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> '''Date&amp;amp;Time''' <br /> <br /> February 9, 2011 &lt;br&gt;Time 9:00AM <br /> <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Discussion Model'''&lt;br&gt;&quot;Participants + Attendees&quot;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION OPERATIONAL RESOURCES'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Projector, whiteboards, markers, Internet connectivity, power<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION ADDITIONAL DETAILS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;left&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> *'''Related resources:''' [[OWASP Working Session - Browser Security Letters]] <br /> *'''Frameworks to invite:''' .NET, J2EE, Spring, Struts, ASP.NET MVC, RoR, PHP, etc. <br /> **10 Oct: &quot;Open Letter to Frameworks (version for open mailing lists)&quot; sent to <br /> ***Ruby-on-Rails Core mailing list <br /> ***Springnet Developer mailing list <br /> ***Struts Dev mailing list<br /> <br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;3&quot; | '''WORKING SESSION OUTCOMES'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(108, 130, 181);&quot; | Statements, Initiatives or Decisions <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Proposed by Working Group''' <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Approved by OWASP Board'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Actionable advice for each individual frameworks . <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Identify points-of-contact for frameworks. <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |}<br /> <br /> == Working Session Participants ==<br /> <br /> (Add you name by editing this table. On your the right, just above the this frame, you have the option to edit) <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION PARTICIPANTS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Name''' <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Company''' <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Notes &amp;amp; reason for participating, issues to be discussed/addressed'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | - <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | TDB (Officially Invited by OWASP) <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | http://forums.asp.net/Themes/fan/images/roleicons/dff6f773-6732-4cd8-addf-42a8ab367d22.gif <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Official Representative from Microsoft's ASP.NET team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | - <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | TDB (Officially Invited by OWASP) <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | http://metawidget.sourceforge.net/media/logo-struts.gif <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Official Representative from Apache Struts team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | - <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | TDB (Officially Invited by OWASP) <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | http://boedesign.com/wp-content/themes/bd5/images/cakephp.gif <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Official Representative from CakePHP team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | - <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | TDB (Officially Invited by OWASP) <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | http://www.tutorialized.com/upload/20070625154105_rails.jpg <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Official Representative from Ruby-on-Rails team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | - <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | TDB (Officially Invited by OWASP) <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | http://www.springframework.net/doc-1.1-M1/reference/html/images/xdev-spring_logo.jpg <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Official Representative from Spring.NET team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Mario Heiderich <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Independent <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | General Expertise<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Gareth Heyes <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Independent <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | General Expertise<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 3 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Marcin Wielgoszewski <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Protiviti <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Participant<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 4 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Adam Baso <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Symantec <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Participant<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 5 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Giorgio Fedon <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Minded Security <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Participant<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 6 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Colin Watson <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Watson Hall <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Participant<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 7 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Esteban Ribicic <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | HP <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Participant<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 8 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Daniele Bellucci <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Communication Valley <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Partecipant<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 9 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | &lt;br&gt;<br /> |}<br /> <br /> If needed add here more lines. <br /> <br /> [[Category:OWASP_Working_Session]]</div> Tara Causey https://wiki.owasp.org/index.php?title=Working_Sessions_XSS_AwarnessResourcesPartnerships&diff=93482 Working Sessions XSS AwarnessResourcesPartnerships 2010-11-22T02:19:23Z <p>Tara Causey: Created page with '{| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot; |- ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 179, 179); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;bl…'</p> <hr /> <div>{| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 179, 179); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;black&quot;&gt;'''Working Sessions Operational Rules''' - [[:Working Sessions Methodology|'''Please see here the general frame of rules''']].&lt;/font&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION IDENTIFICATION'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Work Session Name''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | &lt;font color=&quot;black&quot;&gt;&lt;span style=&quot;font-weight: bold;&quot;&gt;Assessment criteria &amp;amp; Orphaned Projects&lt;/span&gt;&lt;/font&gt; &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Short Work Session Description''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | Generate<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Related Projects (if any)''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Email Contacts &amp;amp; Roles''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Chair'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Secretary'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Mailing list'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011#tab=How_Do_I_Join.3F_.2F_Mailing_list '''Subscription Page''']<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION SPECIFICS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Objectives''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;<br /> #Discuss gaps and patterns in gaps in security coverage across frameworks, <br /> #Discuss possible solutions for security areas.&lt;/font&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Venue/Date&amp;amp;Time/Model''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Venue'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011 OWASP EU Summit Portugal 2011] <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> '''Date&amp;amp;Time''' <br /> <br /> February 9, 2011 &lt;br&gt;Time 9:00AM <br /> <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Discussion Model'''&lt;br&gt;&quot;Participants + Attendees&quot;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION OPERATIONAL RESOURCES'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Projector, whiteboards, markers, Internet connectivity, power<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt; &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION ADDITIONAL DETAILS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;left&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> *'''Related resources:''' [[OWASP Working Session - Browser Security Letters]] <br /> *'''Frameworks to invite:''' .NET, J2EE, Spring, Struts, ASP.NET MVC, RoR, PHP, etc. <br /> **10 Oct: &quot;Open Letter to Frameworks (version for open mailing lists)&quot; sent to <br /> ***Ruby-on-Rails Core mailing list <br /> ***Springnet Developer mailing list <br /> ***Struts Dev mailing list<br /> <br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;3&quot; | '''WORKING SESSION OUTCOMES'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(108, 130, 181);&quot; | Statements, Initiatives or Decisions <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Proposed by Working Group''' <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Approved by OWASP Board'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Actionable advice for each individual frameworks . <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Identify points-of-contact for frameworks. <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |}<br /> <br /> == Working Session Participants ==<br /> <br /> (Add you name by editing this table. On your the right, just above the this frame, you have the option to edit) <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION PARTICIPANTS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Name''' <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Company''' <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Notes &amp;amp; reason for participating, issues to be discussed/addressed'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |}<br /> <br /> If needed add here more lines. <br /> <br /> [[Category:OWASP_Working_Session]]</div> Tara Causey https://wiki.owasp.org/index.php?title=Working_Sessions_Browser_Working_Group&diff=93481 Working Sessions Browser Working Group 2010-11-22T02:11:32Z <p>Tara Causey: Created page with '{| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot; |- ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 179, 179); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;bl…'</p> <hr /> <div>{| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 179, 179); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;black&quot;&gt;'''Working Sessions Operational Rules''' - [[:Working Sessions Methodology|'''Please see here the general frame of rules''']].&lt;/font&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION IDENTIFICATION'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Work Session Name''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | &lt;font color=&quot;black&quot;&gt;&lt;span style=&quot;font-weight: bold;&quot;&gt;Browser Working Group&lt;/span&gt;&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Short Work Session Description''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | Generate<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Related Projects (if any)''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Email Contacts &amp;amp; Roles''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Chair'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Secretary'''&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Mailing list'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011#tab=How_Do_I_Join.3F_.2F_Mailing_list '''Subscription Page''']<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION SPECIFICS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Objectives''' <br /> | align=&quot;left&quot; style=&quot;width: 85%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; colspan=&quot;6&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt;&lt;font color=&quot;black&quot;&gt;<br /> #Discuss gaps and patterns in gaps in security coverage across frameworks, <br /> #Discuss possible solutions for security areas.&lt;/font&gt;<br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | '''Venue/Date&amp;amp;Time/Model''' <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Venue'''&lt;br&gt;[http://www.owasp.org/index.php/Summit_2011 OWASP EU Summit Portugal 2011] <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> '''Date&amp;amp;Time'''<br /> <br /> February 9, 2011 &lt;br&gt;Time 9:00AM<br /> <br /> | align=&quot;center&quot; style=&quot;width: 25%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Discussion Model'''&lt;br&gt;&quot;Participants + Attendees&quot;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION OPERATIONAL RESOURCES'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Projector, whiteboards, markers, Internet connectivity, power<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% white; color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;black&quot;&gt;&lt;/font&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION ADDITIONAL DETAILS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;left&quot; style=&quot;width: 100%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> *'''Related resources:''' [[OWASP Working Session - Browser Security Letters]] <br /> *'''Frameworks to invite:''' .NET, J2EE, Spring, Struts, ASP.NET MVC, RoR, PHP, etc. <br /> **10 Oct: &quot;Open Letter to Frameworks (version for open mailing lists)&quot; sent to <br /> ***Ruby-on-Rails Core mailing list <br /> ***Springnet Developer mailing list <br /> ***Struts Dev mailing list<br /> <br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;3&quot; | '''WORKING SESSION OUTCOMES'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(108, 130, 181);&quot; | Statements, Initiatives or Decisions <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Proposed by Working Group''' <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(179, 179, 179);&quot; | '''Approved by OWASP Board'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Actionable advice for each individual frameworks . <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 46%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Identify points-of-contact for frameworks. <br /> | align=&quot;center&quot; style=&quot;width: 47%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | After the Board Meeting - fill in here.<br /> |}<br /> <br /> == Working Session Participants ==<br /> <br /> (Add you name by editing this table. On your the right, just above the this frame, you have the option to edit) <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 100%;&quot;<br /> |-<br /> ! align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;7&quot; | &lt;font color=&quot;white&quot;&gt;'''WORKING SESSION PARTICIPANTS'''&lt;/font&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Name''' <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Company''' <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | '''Notes &amp;amp; reason for participating, issues to be discussed/addressed'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | - <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | TDB (Officially Invited by OWASP) <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | http://forums.asp.net/Themes/fan/images/roleicons/dff6f773-6732-4cd8-addf-42a8ab367d22.gif <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Official Representative from Microsoft's ASP.NET team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | - <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | TDB (Officially Invited by OWASP) <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | http://metawidget.sourceforge.net/media/logo-struts.gif <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Official Representative from Apache Struts team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | - <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | TDB (Officially Invited by OWASP) <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | http://boedesign.com/wp-content/themes/bd5/images/cakephp.gif <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Official Representative from CakePHP team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | - <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | TDB (Officially Invited by OWASP) <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | http://www.tutorialized.com/upload/20070625154105_rails.jpg <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Official Representative from Ruby-on-Rails team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | - <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | TDB (Officially Invited by OWASP) <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | http://www.springframework.net/doc-1.1-M1/reference/html/images/xdev-spring_logo.jpg <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Official Representative from Spring.NET team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Mario Heiderich <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Independent <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | General Expertise<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Gareth Heyes <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Independent <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | General Expertise<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 3 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Marcin Wielgoszewski <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Protiviti <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Participant<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 4 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Adam Baso <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Symantec <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Participant<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 5 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Giorgio Fedon <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Minded Security <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Participant<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 6 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Colin Watson <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Watson Hall <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Participant<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 7 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Esteban Ribicic <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | HP <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Participant<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 8 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Daniele Bellucci <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Communication Valley <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | Partecipant<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 9 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 7%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10 <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 15%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 63%; background: none repeat scroll 0% 0% rgb(204, 204, 204);&quot; | <br /> |}<br /> <br /> If needed add here more lines. <br /> <br /> [[Category:OWASP_Working_Session]]</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=93430 Summit 2011 2010-11-21T04:47:53Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> == Browser Day ==<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon ([http://kangax.github.com/es5-compat-table/ currently no support])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> [[Image:Hotel entrance 697x395.jpg]] <br /> <br /> Below is the link to the Venue of the 2011 OWASP Summit in Lisbon, Portugal.&lt;br&gt; <br /> <br /> [http://www.camporeal.pt/en/hotel-residences.aspx http://www.camporeal.pt/en/hotel-residences.aspx] <br /> <br /> The hotel has an Airport Shuttle, Gym and Fitness Center, Gootball camp, Horse Back Riding, Day Spa, Internet WiFi, and Golfcourse as well as many other amenities. <br /> <br /> Meals and coffee breaks will be provided by OWASP.&lt;br&gt; <br /> <br /> [[Image:Villas.jpg]]&lt;br&gt; <br /> <br /> '''Villa Accomadations:'''&lt;br&gt; <br /> <br /> Residence-Pool 3 or 4 bedrooms&lt;br&gt; - Villa <br /> <br /> Each Residence includes:&lt;br&gt;- Private bathroom(s)&lt;br&gt;- Kitchenette&lt;br&gt;- Balcony or garden&lt;br&gt;- Swimming-pool shared by apartment/townhouse block&lt;br&gt;- Residence-Pool for 3 bedroom and 4 bedroom villas include a private swimming-pool <br /> <br /> &lt;br&gt; <br /> <br /> '''A Day in Lisbon, Portugal:''' <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> '''&lt;u&gt;[https://docs.google.com/document/d/1Q3it1KCIm3HKFhWUtQYdaYd-bTbw_5oLN_dwk9Sc-j0/edit?hl=en&amp;authkey=COymwN4E CONFIRMED 2011 OWASP GLOBAL SUMMIT ATTENDEES]&lt;/u&gt;''' <br /> <br /> *OWASP role/affiliation appear in parentheses<br /> <br /> &lt;br&gt; Lorna Alamri (Industry, Summit) <br /> <br /> Sarah Baso (Summit) <br /> <br /> Tom Brennan (Global Board, Membership), Proactive Risk <br /> <br /> Mark Bristow (Conferences) <br /> <br /> Larry Casey (Director of IT), Aspect Security <br /> <br /> Brad Causey (Projects, Summit) <br /> <br /> Justin Clarke (Connections, Summit), Director at Gotham Digital Science <br /> <br /> Michael Coates (Membership), Mozilla Web Security <br /> <br /> Dan Cornell (Membership), CTO Denim Group <br /> <br /> Dinis Cruz (Global Board, Projects, Summit) <br /> <br /> Lucas C. Ferreira (Conferences), Brazilian Chamber of Deputies <br /> <br /> Kate Hartmann (OWASP Operations Director) <br /> <br /> Eoin Keary (Global Board, Industry) <br /> <br /> Martin Knobloch (Education, Summit) <br /> <br /> Jason Li (Projects, Summit), Aspect Security <br /> <br /> Jim Manico (OWASP Podcast) <br /> <br /> Eduardo Neves (Education, Summit) <br /> <br /> Yiannis Pavlosoglou (Industry) <br /> <br /> Matt Tesauro (Global Board, Industry), Praetorian <br /> <br /> Colin Watson (Industry) <br /> <br /> Dave Wichers (Global Board, Conferences), Aspect Security <br /> <br /> Jeff Williams (Global Board Chair), Aspect Security <br /> <br /> &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011_DC_update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;[https://docs.google.com/document/d/1Q3it1KCIm3HKFhWUtQYdaYd-bTbw_5oLN_dwk9Sc-j0/edit?hl=en&amp;authkey=COymwN4E Confirmed 2011 OWASP Global Summit Attendees]&lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule&lt;br&gt; ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Lunch <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1320 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Projects <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1350 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Industry <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1420&lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Membership <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1430 - 1450&lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Connections <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1500 - 1520 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Coffee Break <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1450 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Chapters <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1620 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Education <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1630 - 1730 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> TBD <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1730 - 1800 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Wrap up of the Day &lt;br&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Evening Event TBD&lt;br&gt; <br /> <br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Wednesday, February 9th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Assesment Criteria &amp;amp; Orphaned Projects&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Funding, Marketing, &amp;amp; Commerical Services&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1900 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Evening Event TBD<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Thursday, February 10th, 2010<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Main Room <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS - Frameworks <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS- Awarness, Resources &amp;amp; Partnerships <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300- 1330 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1415 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1415 - 1530 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Memberships<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1600 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1645 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Chapters<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1645- 1730 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Evening Event TBD<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;6&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Friday, February 11th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Board Presentation<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1000 - 1045 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Industry<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1045 - 1130 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1130 - 1215 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Education<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1230 - 1330 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1700 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Wrap Up Summit<br /> |}<br /> <br /> &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=93429 Summit 2011 2010-11-21T04:42:21Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> == Browser Day ==<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon ([http://kangax.github.com/es5-compat-table/ currently no support])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> [[Image:Hotel entrance 697x395.jpg]] <br /> <br /> Below is the link to the Venue of the 2011 OWASP Summit in Lisbon, Portugal.&lt;br&gt; <br /> <br /> [http://www.camporeal.pt/en/hotel-residences.aspx http://www.camporeal.pt/en/hotel-residences.aspx] <br /> <br /> The hotel has an Airport Shuttle, Spa, and Golfcourse as well as many other amenities. <br /> <br /> Meals and coffee breaks will be provided by OWASP.&lt;br&gt; <br /> <br /> [[Image:Villas.jpg]]&lt;br&gt; <br /> <br /> '''Villa Accomadations:'''&lt;br&gt; <br /> <br /> Residence-Pool 3 or 4 bedrooms&lt;br&gt; - Villa <br /> <br /> Each Residence includes:&lt;br&gt;- Private bathroom(s)&lt;br&gt;- Kitchenette&lt;br&gt;- Balcony or garden&lt;br&gt;- Swimming-pool shared by apartment/townhouse block&lt;br&gt;- Residence-Pool for 3 bedroom and 4 bedroom villas include a private swimming-pool <br /> <br /> &lt;br&gt; <br /> <br /> '''A Day in Lisbon, Portugal:''' <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> '''&lt;u&gt;[https://docs.google.com/document/d/1Q3it1KCIm3HKFhWUtQYdaYd-bTbw_5oLN_dwk9Sc-j0/edit?hl=en&amp;authkey=COymwN4E CONFIRMED 2011 OWASP GLOBAL SUMMIT ATTENDEES]&lt;/u&gt;''' <br /> <br /> *OWASP role/affiliation appear in parentheses<br /> <br /> &lt;br&gt; Lorna Alamri (Industry, Summit) <br /> <br /> Sarah Baso (Summit) <br /> <br /> Tom Brennan (Global Board, Membership), Proactive Risk <br /> <br /> Mark Bristow (Conferences) <br /> <br /> Larry Casey (Director of IT), Aspect Security <br /> <br /> Brad Causey (Projects, Summit) <br /> <br /> Justin Clarke (Connections, Summit), Director at Gotham Digital Science <br /> <br /> Michael Coates (Membership), Mozilla Web Security <br /> <br /> Dan Cornell (Membership), CTO Denim Group <br /> <br /> Dinis Cruz (Global Board, Projects, Summit) <br /> <br /> Lucas C. Ferreira (Conferences), Brazilian Chamber of Deputies <br /> <br /> Kate Hartmann (OWASP Operations Director) <br /> <br /> Eoin Keary (Global Board, Industry) <br /> <br /> Martin Knobloch (Education, Summit) <br /> <br /> Jason Li (Projects, Summit), Aspect Security <br /> <br /> Jim Manico (OWASP Podcast) <br /> <br /> Eduardo Neves (Education, Summit) <br /> <br /> Yiannis Pavlosoglou (Industry) <br /> <br /> Matt Tesauro (Global Board, Industry), Praetorian <br /> <br /> Colin Watson (Industry) <br /> <br /> Dave Wichers (Global Board, Conferences), Aspect Security <br /> <br /> Jeff Williams (Global Board Chair), Aspect Security <br /> <br /> &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011_DC_update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;[https://docs.google.com/document/d/1Q3it1KCIm3HKFhWUtQYdaYd-bTbw_5oLN_dwk9Sc-j0/edit?hl=en&amp;authkey=COymwN4E Confirmed 2011 OWASP Global Summit Attendees]&lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule&lt;br&gt; ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Lunch <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1320 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Projects <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1350 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Industry <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1420&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Membership <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1430 - 1450&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Connections <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1500 - 1520 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Coffee Break <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1450 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Chapters <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1620 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Education <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1630 - 1730 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> TBD <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1730 - 1800 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Wrap up of the Day &lt;br&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Evening Event TBD&lt;br&gt; <br /> <br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Wednesday, February 9th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Assesment Criteria &amp;amp; Orphaned Projects&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Funding, Marketing, &amp;amp; Commerical Services&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1900 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Evening Event TBD<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Thursday, February 10th, 2010<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Main Room <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS - Frameworks <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS- Awarness, Resources &amp;amp; Partnerships <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300- 1330 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1415 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Projects<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1415 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Memberships<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1600 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1645 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Chapters<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1645- 1730 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Evening Event TBD<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;6&quot; | Agenda for Friday, February 11th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Board Presentation<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1000 - 1045 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Industry<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1045 - 1130 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1130 - 1215 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Education<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1230 - 1330 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;5&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1700 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;5&quot; | Wrap Up Summit<br /> |}<br /> <br /> &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=93428 Summit 2011 2010-11-21T04:38:19Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> == Browser Day ==<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon ([http://kangax.github.com/es5-compat-table/ currently no support])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> [[Image:Hotel entrance 697x395.jpg]] <br /> <br /> Below is the link to the Venue of the 2011 OWASP Summit in Lisbon, Portugal.&lt;br&gt; <br /> <br /> [http://www.camporeal.pt/en/hotel-residences.aspx http://www.camporeal.pt/en/hotel-residences.aspx] <br /> <br /> The hotel has an Airport Shuttle, Spa, and Golfcourse as well as many other amenities.<br /> <br /> Meals and coffee breaks will be provided by OWASP.&lt;br&gt;<br /> <br /> [[Image:Villas.jpg]]&lt;br&gt;<br /> <br /> '''Villa Accomadations:'''&lt;br&gt; <br /> <br /> Residence-Pool T4 (4 bedrooms)&lt;br&gt; - Villa <br /> <br /> Each Residence includes:&lt;br&gt;- Private bathroom(s)&lt;br&gt;- Kitchenette&lt;br&gt;- Balcony or garden&lt;br&gt;- Swimming-pool shared by apartment/townhouse block&lt;br&gt;- Residence-Pool T3 and T4 include a private swimming-pool <br /> <br /> So if you value privacy and comfort, this is your best choice - specially if you are bringing along your family and friends! <br /> <br /> &lt;br&gt; <br /> <br /> '''A Day in Lisbon, Portugal:''' <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> '''&lt;u&gt;[https://docs.google.com/document/d/1Q3it1KCIm3HKFhWUtQYdaYd-bTbw_5oLN_dwk9Sc-j0/edit?hl=en&amp;authkey=COymwN4E CONFIRMED 2011 OWASP GLOBAL SUMMIT ATTENDEES]&lt;/u&gt;''' <br /> <br /> *OWASP role/affiliation appear in parentheses<br /> <br /> &lt;br&gt; Lorna Alamri (Industry, Summit) <br /> <br /> Sarah Baso (Summit) <br /> <br /> Tom Brennan (Global Board, Membership), Proactive Risk <br /> <br /> Mark Bristow (Conferences) <br /> <br /> Larry Casey (Director of IT), Aspect Security <br /> <br /> Brad Causey (Projects, Summit) <br /> <br /> Justin Clarke (Connections, Summit), Director at Gotham Digital Science <br /> <br /> Michael Coates (Membership), Mozilla Web Security <br /> <br /> Dan Cornell (Membership), CTO Denim Group <br /> <br /> Dinis Cruz (Global Board, Projects, Summit) <br /> <br /> Lucas C. Ferreira (Conferences), Brazilian Chamber of Deputies <br /> <br /> Kate Hartmann (OWASP Operations Director) <br /> <br /> Eoin Keary (Global Board, Industry) <br /> <br /> Martin Knobloch (Education, Summit) <br /> <br /> Jason Li (Projects, Summit), Aspect Security <br /> <br /> Jim Manico (OWASP Podcast) <br /> <br /> Eduardo Neves (Education, Summit) <br /> <br /> Yiannis Pavlosoglou (Industry) <br /> <br /> Matt Tesauro (Global Board, Industry), Praetorian <br /> <br /> Colin Watson (Industry) <br /> <br /> Dave Wichers (Global Board, Conferences), Aspect Security <br /> <br /> Jeff Williams (Global Board Chair), Aspect Security <br /> <br /> &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011_DC_update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;[https://docs.google.com/document/d/1Q3it1KCIm3HKFhWUtQYdaYd-bTbw_5oLN_dwk9Sc-j0/edit?hl=en&amp;authkey=COymwN4E Confirmed 2011 OWASP Global Summit Attendees]&lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule&lt;br&gt; ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Lunch <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1320 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Projects <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1350 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Industry <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1420&lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Membership <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1430 - 1450&lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Connections <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1500 - 1520 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Coffee Break <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1450 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Chapters <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1620 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Education <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1630 - 1730 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> TBD <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1730 - 1800 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Wrap up of the Day &lt;br&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Evening Event TBD&lt;br&gt; <br /> <br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Wednesday, February 9th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Assesment Criteria &amp;amp; Orphaned Projects&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Funding, Marketing, &amp;amp; Commerical Services&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1900 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Evening Event TBD<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Thursday, February 10th, 2010<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Main Room <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS - Frameworks <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS- Awarness, Resources &amp;amp; Partnerships <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300- 1330 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1415 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1415 - 1530 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Memberships<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1600 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1645 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Chapters<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1645- 1730 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Evening Event TBD<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;6&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Friday, February 11th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Board Presentation<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1000 - 1045 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Industry<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1045 - 1130 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1130 - 1215 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Education<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1230 - 1330 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1700 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Wrap Up Summit<br /> |}<br /> <br /> &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=File:Villas.jpg&diff=93427 File:Villas.jpg 2010-11-21T04:34:24Z <p>Tara Causey: </p> <hr /> <div></div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=93426 Summit 2011 2010-11-21T04:31:25Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> == Browser Day ==<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon ([http://kangax.github.com/es5-compat-table/ currently no support])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> [[Image:Hotel entrance 697x395.jpg]] <br /> <br /> Below is the link to the Venue of the 2011 OWASP Summit in Lisbon, Portugal.&lt;br&gt; <br /> <br /> [http://www.camporeal.pt/en/hotel-residences.aspx http://www.camporeal.pt/en/hotel-residences.aspx] <br /> <br /> The hotel has an Airport Shuttle, Spa, and Golfcourse as well as many other amenities.<br /> <br /> Meals and coffee breaks will be provided by OWASP.&lt;br&gt;<br /> <br /> <br /> <br /> '''Villa Accomadations:'''&lt;br&gt;<br /> <br /> Residence-Pool T4 (4 bedrooms)&lt;br&gt; - Villa<br /> <br /> Each Residence includes:&lt;br&gt;- Private bathroom(s)&lt;br&gt;- Kitchenette&lt;br&gt;- Balcony or garden&lt;br&gt;- Swimming-pool shared by apartment/townhouse block&lt;br&gt;- Residence-Pool T3 and T4 include a private swimming-pool<br /> <br /> So if you value privacy and comfort, this is your best choice - specially if you are bringing along your family and friends!<br /> <br /> &lt;br&gt;<br /> <br /> '''A Day in Lisbon, Portugal:'''<br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> '''&lt;u&gt;[https://docs.google.com/document/d/1Q3it1KCIm3HKFhWUtQYdaYd-bTbw_5oLN_dwk9Sc-j0/edit?hl=en&amp;authkey=COymwN4E CONFIRMED 2011 OWASP GLOBAL SUMMIT ATTENDEES]&lt;/u&gt;''' <br /> <br /> *OWASP role/affiliation appear in parentheses<br /> <br /> &lt;br&gt; Lorna Alamri (Industry, Summit) <br /> <br /> Sarah Baso (Summit) <br /> <br /> Tom Brennan (Global Board, Membership), Proactive Risk <br /> <br /> Mark Bristow (Conferences) <br /> <br /> Larry Casey (Director of IT), Aspect Security <br /> <br /> Brad Causey (Projects, Summit) <br /> <br /> Justin Clarke (Connections, Summit), Director at Gotham Digital Science <br /> <br /> Michael Coates (Membership), Mozilla Web Security <br /> <br /> Dan Cornell (Membership), CTO Denim Group <br /> <br /> Dinis Cruz (Global Board, Projects, Summit) <br /> <br /> Lucas C. Ferreira (Conferences), Brazilian Chamber of Deputies <br /> <br /> Kate Hartmann (OWASP Operations Director) <br /> <br /> Eoin Keary (Global Board, Industry) <br /> <br /> Martin Knobloch (Education, Summit) <br /> <br /> Jason Li (Projects, Summit), Aspect Security <br /> <br /> Jim Manico (OWASP Podcast) <br /> <br /> Eduardo Neves (Education, Summit) <br /> <br /> Yiannis Pavlosoglou (Industry) <br /> <br /> Matt Tesauro (Global Board, Industry), Praetorian <br /> <br /> Colin Watson (Industry) <br /> <br /> Dave Wichers (Global Board, Conferences), Aspect Security <br /> <br /> Jeff Williams (Global Board Chair), Aspect Security <br /> <br /> &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011_DC_update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;[https://docs.google.com/document/d/1Q3it1KCIm3HKFhWUtQYdaYd-bTbw_5oLN_dwk9Sc-j0/edit?hl=en&amp;authkey=COymwN4E Confirmed 2011 OWASP Global Summit Attendees]&lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule&lt;br&gt; ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Lunch <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1320 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Projects <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1350 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Industry <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1420&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Membership <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1430 - 1450&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Connections <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1500 - 1520 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Coffee Break <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1450 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Chapters <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1620 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Education <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1630 - 1730 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> TBD <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1730 - 1800 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Wrap up of the Day &lt;br&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Evening Event TBD&lt;br&gt; <br /> <br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Wednesday, February 9th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Assesment Criteria &amp;amp; Orphaned Projects&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Funding, Marketing, &amp;amp; Commerical Services&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1900 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Evening Event TBD<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Thursday, February 10th, 2010<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Main Room <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS - Frameworks <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS- Awarness, Resources &amp;amp; Partnerships <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300- 1330 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1415 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Projects<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1415 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Memberships<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1600 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1645 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Chapters<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1645- 1730 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Evening Event TBD<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;6&quot; | Agenda for Friday, February 11th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Board Presentation<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1000 - 1045 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Industry<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1045 - 1130 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1130 - 1215 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Education<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1230 - 1330 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;5&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1700 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;5&quot; | Wrap Up Summit<br /> |}<br /> <br /> &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=93015 Summit 2011 2010-11-15T18:06:47Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> == Browser Day ==<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon ([http://kangax.github.com/es5-compat-table/ currently no support])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> [[Image:Hotel_entrance_697x395.jpg]]<br /> <br /> Below is the link to the Venue of the 2011 OWASP Summit in Lisbon, Portugal.&lt;br&gt; <br /> <br /> [http://www.camporeal.pt/en/hotel-residences.aspx http://www.camporeal.pt/en/hotel-residences.aspx] <br /> <br /> The hotel has an Airport Shuttle, Spa, and Golfcourse as well as many other amenities. <br /> <br /> A Day in Lisbon, Portugal: <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> Dinis Cruz (Board)&lt;br&gt; Tom Brennan (Board)&lt;br&gt; Eoin Keary (Board)&lt;br&gt; Jeff Williams (Board)&lt;br&gt; Seba Deleersnyder (Board)&lt;br&gt; Dave Wichers (Board)&lt;br&gt; Matt Tesauro (Board)&lt;br&gt; Paulo Coimbra (OWASP)&lt;br&gt; Alison Shrader (OWASP)&lt;br&gt; Kate Hartmann (OWASP)&lt;br&gt; Larry Casey (OWASP)&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011-DC-update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule&lt;br&gt; ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Lunch <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1320 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Projects <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1350 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Industry <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1420&lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Membership <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1430 - 1450&lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Connections <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1500 - 1520 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Coffee Break <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1450 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Chapters <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1620 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Education <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1630 - 1730 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> TBD <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1730 - 1800 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Wrap up of the Day &lt;br&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Evening Event TBD&lt;br&gt; <br /> <br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Wednesday, February 9th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Assesment Criteria &amp;amp; Orphaned Projects&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Funding, Marketing, &amp;amp; Commerical Services&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1900 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Evening Event TBD<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Thursday, February 10th, 2010<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Main Room <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS - Frameworks <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS- Awarness, Resources &amp;amp; Partnerships <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300- 1330 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1415 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1415 - 1530 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Memberships<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1600 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1645 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Chapters<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1645- 1730 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Evening Event TBD<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;6&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Friday, February 11th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Board Presentation<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1000 - 1045 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Industry<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1045 - 1130 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1130 - 1215 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Education<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1230 - 1330 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1700 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Wrap Up Summit<br /> |}<br /> <br /> &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=File:Hotel_entrance_697x395.jpg&diff=93013 File:Hotel entrance 697x395.jpg 2010-11-15T18:02:49Z <p>Tara Causey: </p> <hr /> <div></div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=92978 Summit 2011 2010-11-15T16:15:11Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> == Browser Day ==<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon ([http://kangax.github.com/es5-compat-table/ currently no support])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> Below is the link to the Venue of the 2011 OWASP Summit in Lisbon, Portugal.&lt;br&gt; <br /> <br /> [http://www.camporeal.pt/en/hotel-residences.aspx http://www.camporeal.pt/en/hotel-residences.aspx] <br /> <br /> The hotel has an Airport Shuttle, Spa, and Golfcourse as well as many other amenities. <br /> <br /> A Day in Lisbon, Portugal: <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> Dinis Cruz (Board)&lt;br&gt; Tom Brennan (Board)&lt;br&gt; Eoin Keary (Board)&lt;br&gt; Jeff Williams (Board)&lt;br&gt; Seba Deleersnyder (Board)&lt;br&gt; Dave Wichers (Board)&lt;br&gt; Matt Tesauro (Board)&lt;br&gt; Paulo Coimbra (OWASP)&lt;br&gt; Alison Shrader (OWASP)&lt;br&gt; Kate Hartmann (OWASP)&lt;br&gt; Larry Casey (OWASP)&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011-DC-update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule&lt;br&gt; ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Lunch <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1320 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Projects <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1350 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Industry <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1420&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Membership <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1430 - 1450&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Connections <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1500 - 1520 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Coffee Break <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1450 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Chapters <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1620 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Education <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1630 - 1730 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> TBD <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1730 - 1800 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Wrap up of the Day &lt;br&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Evening Event TBD&lt;br&gt; <br /> <br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Wednesday, February 9th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Assesment Criteria &amp;amp; Orphaned Projects&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Funding, Marketing, &amp;amp; Commerical Services&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1900 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Evening Event TBD<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Thursday, February 10th, 2010<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Main Room <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS - Frameworks <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS- Awarness, Resources &amp;amp; Partnerships <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300- 1330 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1415 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Projects<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1415 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Memberships<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1600 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1645 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Chapters<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1645- 1730 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Evening Event TBD<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;6&quot; | Agenda for Friday, February 11th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Board Presentation<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1000 - 1045 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Industry<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1045 - 1130 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1130 - 1215 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Education<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1230 - 1330 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;5&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1700 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;5&quot; | Wrap Up Summit<br /> |}<br /> <br /> &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=92967 Summit 2011 2010-11-15T04:35:54Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> == Browser Day ==<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon ([http://kangax.github.com/es5-compat-table/ currently no support])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> A Day in Lisbon, Portugal: <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> Dinis Cruz (Board)&lt;br&gt; Tom Brennan (Board)&lt;br&gt; Eoin Keary (Board)&lt;br&gt; Jeff Williams (Board)&lt;br&gt; Seba Deleersnyder (Board)&lt;br&gt; Dave Wichers (Board)&lt;br&gt; Matt Tesauro (Board)&lt;br&gt; Paulo Coimbra (OWASP)&lt;br&gt; Alison Shrader (OWASP)&lt;br&gt; Kate Hartmann (OWASP)&lt;br&gt; Larry Casey (OWASP)&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011-DC-update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule (Draft) ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Lunch <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1320 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Projects <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1350 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Industry <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1420&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Membership <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1430 - 1450&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Connections <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1500 - 1520 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Coffee Break <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1450 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Chapters <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1620 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Education <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1630 - 1730 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> TBD <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1730 - 1800 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Wrap up of the Day &lt;br&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Evening Event TBD&lt;br&gt; <br /> <br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Wednesday, February 9th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Assesment Criteria &amp;amp; Orphaned Projects&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Funding, Marketing, &amp;amp; Commerical Services&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1900 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Evening Event TBD<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Thursday, February 10th, 2010<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Main Room <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS - Frameworks <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS- Awarness, Resources &amp;amp; Partnerships <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300- 1330 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1415 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Projects<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1415 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Memberships<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1600 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1645 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Chapters<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1645- 1730 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Evening Event TBD<br /> |}<br /> &lt;br&gt; <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;6&quot; | Agenda for Friday, February 11th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Board Presentation<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1000 - 1045 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Industry<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1045 - 1130 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1130 - 1215 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Education<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1230 - 1330 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;5&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1700 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;5&quot; | Wrap Up Summit<br /> |}<br /> <br /> &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=92966 Summit 2011 2010-11-15T04:29:35Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> == Browser Day ==<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon ([http://kangax.github.com/es5-compat-table/ currently no support])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> A Day in Lisbon, Portugal: <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> Dinis Cruz (Board)&lt;br&gt; Tom Brennan (Board)&lt;br&gt; Eoin Keary (Board)&lt;br&gt; Jeff Williams (Board)&lt;br&gt; Seba Deleersnyder (Board)&lt;br&gt; Dave Wichers (Board)&lt;br&gt; Matt Tesauro (Board)&lt;br&gt; Paulo Coimbra (OWASP)&lt;br&gt; Alison Shrader (OWASP)&lt;br&gt; Kate Hartmann (OWASP)&lt;br&gt; Larry Casey (OWASP)&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011-DC-update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule (Draft) ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Lunch <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1320 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Projects <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1350 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Industry <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1420&lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Membership <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1430 - 1450&lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Connections <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1500 - 1520 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Coffee Break <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1450 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Chapters <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1620 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Education <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1630 - 1730 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> TBD <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1730 - 1800 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Wrap up of the Day &lt;br&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Evening Event TBD&lt;br&gt; <br /> <br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Wednesday, February 9th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Assesment Criteria &amp;amp; Orphaned Projects&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Funding, Marketing, &amp;amp; Commerical Services&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1900 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Evening Event TBD<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Thursday, February 10th, 2010<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Main Room <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS - Frameworks <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS- Awarness, Resources &amp;amp; Partnerships <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300- 1330 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1415 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1415 - 1530 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Memberships <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1600 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1645 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Chapters<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1645- 1730 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Evening Event TBD<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;6&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Friday, February 11th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Board Presentation<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1000 - 1045 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Industry<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1045 - 1130 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1130 - 1215 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Education<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1230 - 1330 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1700 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Wrap Up Summit<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | '''Technology''' <br /> | align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | <br /> &lt;br&gt; <br /> <br /> |}<br /> <br /> &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=92965 Summit 2011 2010-11-15T04:12:31Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> == Browser Day ==<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon ([http://kangax.github.com/es5-compat-table/ currently no support])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> A Day in Lisbon, Portugal: <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> Dinis Cruz (Board)&lt;br&gt; Tom Brennan (Board)&lt;br&gt; Eoin Keary (Board)&lt;br&gt; Jeff Williams (Board)&lt;br&gt; Seba Deleersnyder (Board)&lt;br&gt; Dave Wichers (Board)&lt;br&gt; Matt Tesauro (Board)&lt;br&gt; Paulo Coimbra (OWASP)&lt;br&gt; Alison Shrader (OWASP)&lt;br&gt; Kate Hartmann (OWASP)&lt;br&gt; Larry Casey (OWASP)&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011-DC-update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule (Draft) ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Lunch <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1320 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Projects <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1350 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Industry <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1420&lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Membership <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1430 - 1450&lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Connections <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1500 - 1520 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Coffee Break <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1450 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Chapters <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1620 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Education <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1630 - 1730 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> TBD <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1730 - 1800 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Wrap up of the Day &lt;br&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Evening Event TBD&lt;br&gt; <br /> <br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Wednesday, February 9th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Assesment Criteria &amp;amp; Orphaned Projects&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Funding, Marketing, &amp;amp; Commerical Services&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1900 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Evening Event TBD<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Thursday, February 10th, 2010<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Main Room <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS - Frameworks <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS- Awarness, Resources &amp;amp; Partnerships <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300- 1330 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1415 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1415 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Memberships<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1600 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1645 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Chapters<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1645- 1730 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Evening Event TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | '''Documents''' <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;6&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Friday, February 11th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Board Presentation<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1000 - 1045 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Industry<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1045 - 1130 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1130 - 1215 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Education<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1230 - 1330 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1700 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Wrap Up Summit<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | '''Technology''' <br /> | align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | <br /> &lt;br&gt; <br /> <br /> |}<br /> <br /> &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=92964 Summit 2011 2010-11-15T04:09:48Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> == Browser Day ==<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon ([http://kangax.github.com/es5-compat-table/ currently no support])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> A Day in Lisbon, Portugal: <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> Dinis Cruz (Board)&lt;br&gt; Tom Brennan (Board)&lt;br&gt; Eoin Keary (Board)&lt;br&gt; Jeff Williams (Board)&lt;br&gt; Seba Deleersnyder (Board)&lt;br&gt; Dave Wichers (Board)&lt;br&gt; Matt Tesauro (Board)&lt;br&gt; Paulo Coimbra (OWASP)&lt;br&gt; Alison Shrader (OWASP)&lt;br&gt; Kate Hartmann (OWASP)&lt;br&gt; Larry Casey (OWASP)&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011-DC-update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule (Draft) ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Lunch <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1320 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Projects <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1350 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Industry <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1420&lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Membership <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1430 - 1450&lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Connections <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1500 - 1520 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Coffee Break <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1450 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Chapters <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1620 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Education <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1630 - 1730 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> TBD <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1730 - 1800 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Wrap up of the Day &lt;br&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Evening Event TBD&lt;br&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;4&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | &lt;br&gt;<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Wednesday, February 9th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Assesment Criteria &amp;amp; Orphaned Projects&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Funding, Marketing, &amp;amp; Commerical Services&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1900 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Evening Event TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | '''Documents''' <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Thursday, February 10th, 2010<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Main Room <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS - Frameworks <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS- Awarness, Resources &amp;amp; Partnerships <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300- 1330 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1415 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1415 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Memberships<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1600 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1645 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Chapters<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1645- 1730 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Evening Event TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | '''Documents''' <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | &lt;br&gt;<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;6&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Friday, February 11th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Board Presentation<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1000 - 1045 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Industry<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1045 - 1130 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1130 - 1215 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Education<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1230 - 1330 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1700 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Wrap Up Summit<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | '''Technology''' <br /> | align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | <br /> &lt;br&gt; <br /> <br /> |}<br /> <br /> &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=92963 Summit 2011 2010-11-15T04:06:50Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> == Browser Day ==<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon ([http://kangax.github.com/es5-compat-table/ currently no support])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> A Day in Lisbon, Portugal: <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> Dinis Cruz (Board)&lt;br&gt; Tom Brennan (Board)&lt;br&gt; Eoin Keary (Board)&lt;br&gt; Jeff Williams (Board)&lt;br&gt; Seba Deleersnyder (Board)&lt;br&gt; Dave Wichers (Board)&lt;br&gt; Matt Tesauro (Board)&lt;br&gt; Paulo Coimbra (OWASP)&lt;br&gt; Alison Shrader (OWASP)&lt;br&gt; Kate Hartmann (OWASP)&lt;br&gt; Larry Casey (OWASP)&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011-DC-update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule (Draft) ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Lunch <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1320 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Projects <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1350 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Industry <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1420&lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Membership <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1430 - 1450&lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Connections <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1500 - 1520 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Coffee Break <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1450 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Chapters <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1620 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Education <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1630 - 1730 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> TBD <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1730 - 1800 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Wrap up of the Day &lt;br&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> Evening Event TBD&lt;br&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;4&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | <br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Wednesday, February 9th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Assesment Criteria &amp;amp; Orphaned Projects&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Funding, Marketing, &amp;amp; Commerical Services&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1900 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Evening Event TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | '''Documents''' <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | <br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Thursday, February 10th, 2010<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Main Room <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS - Frameworks <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS- Awarness, Resources &amp;amp; Partnerships <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300- 1330 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1415 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1415 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Memberships<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1600 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1645 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Chapters<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1645- 1730 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Evening Event TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | '''Documents''' <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | <br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;6&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Friday, February 11th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Board Presentation<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1000 - 1045 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Industry<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1045 - 1130 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1130 - 1215 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Education<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1230 - 1330 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1700 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Wrap Up Summit<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | '''Technology''' <br /> | align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | <br /> | align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | <br /> |}</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=92962 Summit 2011 2010-11-15T04:03:17Z <p>Tara Causey: B</p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> == Browser Day ==<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon ([http://kangax.github.com/es5-compat-table/ currently no support])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> A Day in Lisbon, Portugal: <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> Dinis Cruz (Board)&lt;br&gt; Tom Brennan (Board)&lt;br&gt; Eoin Keary (Board)&lt;br&gt; Jeff Williams (Board)&lt;br&gt; Seba Deleersnyder (Board)&lt;br&gt; Dave Wichers (Board)&lt;br&gt; Matt Tesauro (Board)&lt;br&gt; Paulo Coimbra (OWASP)&lt;br&gt; Alison Shrader (OWASP)&lt;br&gt; Kate Hartmann (OWASP)&lt;br&gt; Larry Casey (OWASP)&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011-DC-update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule (Draft) ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Lunch <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1320 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Projects <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1350 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Industry <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1420&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Membership <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1430 - 1450&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Connections <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1500 - 1520 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Coffee Break <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1450 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Chapters <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1620 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Education <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1630 - 1730 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> TBD <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1730 - 1800 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Wrap up of the Day &lt;br&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Evening Event TBD&lt;br&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | <br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Wednesday, February 9th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Assesment Criteria &amp;amp; Orphaned Projects&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Funding, Marketing, &amp;amp; Commerical Services&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1900 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Evening Event TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''Documents''' <br /> | align=&quot;center&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | <br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Thursday, February 10th, 2010<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Main Room <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS - Frameworks <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS- Awarness, Resources &amp;amp; Partnerships <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300- 1330 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1415 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1415 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Memberships<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1600 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1645 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Chapters<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1645- 1730 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Evening Event TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''Documents''' <br /> | align=&quot;center&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | <br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 90%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;6&quot; | Agenda for Friday, February 11th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Board Presentation<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1000 - 1045 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Industry<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1045 - 1130 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1130 - 1215 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Education<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1230 - 1330 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;5&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1700 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;5&quot; | Wrap Up Summit<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''Technology''' <br /> | align=&quot;center&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | <br /> |}</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=92961 Summit 2011 2010-11-15T03:36:00Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> == Browser Day ==<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon ([http://kangax.github.com/es5-compat-table/ currently no support])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> A Day in Lisbon, Portugal: <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> Dinis Cruz (Board)&lt;br&gt; Tom Brennan (Board)&lt;br&gt; Eoin Keary (Board)&lt;br&gt; Jeff Williams (Board)&lt;br&gt; Seba Deleersnyder (Board)&lt;br&gt; Dave Wichers (Board)&lt;br&gt; Matt Tesauro (Board)&lt;br&gt; Paulo Coimbra (OWASP)&lt;br&gt; Alison Shrader (OWASP)&lt;br&gt; Kate Hartmann (OWASP)&lt;br&gt; Larry Casey (OWASP)&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011-DC-update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule (Draft) ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Lunch <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1320 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Projects <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1350 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Industry <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1420&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Membership <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1430 - 1450&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Connections <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1500 - 1520 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Coffee Break <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1450 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Chapters <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1620 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Education <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1630 - 1730 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> TBD <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1730 - 1800 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Wrap up of the Day &lt;br&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | <br /> Evening Event TBD&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;4&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | <br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Wednesday, February 9th, 2011<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Assesment Criteria &amp;amp; Orphaned Projects&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects - Funding, Marketing, &amp;amp; Commerical Services&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1400 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1900 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Browser Working Group <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Evening Event TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''Documents''' <br /> | align=&quot;center&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Thursday, February 10th, 2010<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Main Room <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Working Sessions&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1100 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS - Frameworks <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | XSS- Awarness, Resources &amp;amp; Partnerships <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300- 1330 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1415 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Projects <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1415 - 1530 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Memberships<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1600 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1645<br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Chapters<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1645- 1730<br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Connections<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;4&quot; | Evening Event TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''Documents''' <br /> | align=&quot;center&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Positive Security Project|'''OWASP Positive Security Project - SoC 08''']]&lt;br&gt;Eduardo Neves <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Access Control Rules Tester Project|'''OWASP Access Control Rules Tester - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/3/32/OWASP_EU_Summit_2008_AcCoRuTe.pptx PowerPoint Presentation]&lt;br&gt;Andrew Petukhov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Education Project|'''OWASP Education Project - SoC 08''']]&lt;br&gt;Sebastien Deleersnyder, Martin Knobloch <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Teachable Static Analysis Workbench Project|'''OWASP Teachable Static Analysis Workbench - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/6/69/Teachable_static_analysis_workbench.pptx PowerPoint Presentation]&lt;br&gt;Dmitry Kozlov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:OWASP Internationalization|'''OWASP Internationalization Project - Soc 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP AppSensor Project|'''OWASP AppSensor - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/7/77/Presentation_AppSensor.ppt PowerPoint Presentation]&lt;br&gt; Michael Coates<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''PASSWD Project: Metrics and Vulnerabilities'''&lt;br&gt;[https://www.owasp.org/images/f/f6/PASSWD.ppt PowerPoint Presentation]&lt;br&gt;Lucilla Mancini <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Backend Security Project|'''OWASP Backend Security Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/2/20/OWASP_EU_Summit_2008_Presentation_Model.ppt PowerPoint Prsentation]&lt;br&gt;Carlo Pelliccioni<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Open Review Project|'''OWASP Open Review Project''']]&lt;br&gt;Dan Cornell <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Application Security Tool Benchmarking Environment and Site Generator Refresh Project|'''OWASP Application Security Tool Benchmarking Environment and Site Generator Refresh Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/c/c4/Site_generator.pptx PowerPoint Presentation]&lt;br&gt;Dmitry Kozlov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; colspan=&quot;4&quot; | [[OWASP EU Summit 2008#NEW_GLOBAL_COMMITTEE_STRUCTURE|'''OWASP Global Committee Elections''']]<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 12:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[OWASP Working Session Education Project|'''Education Project''']]&lt;br&gt;[https://www.owasp.org/images/3/33/OWASP_Education_Working_Session_Notes_-_Ideas.ppt WS Conclusions]&lt;br&gt;Sebastien Deleersnyder <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Testing Guide|'''Testing Guide''']]&lt;br&gt;Matteo Meucci <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Web Application Framework Security|'''Web Application Framework Security''']]&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Lunch (During Working Sessions)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Flash Player Security'''&lt;br&gt;Peleus Uhley <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''OWASP Top 10'''&lt;br&gt;[http://uk.youtube.com/watch?v=GsRbpshqqII Video]&lt;br&gt;Sebastien Deleersnyder and Martin Knobloch <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Uncovering WebScarab's Secret Treasures'''&lt;br&gt;[https://www.owasp.org/images/8/88/OWASP_EU_Summit_2008_WebScarab_treasures.ppt PowerPoint Presentation]&lt;br&gt;Rogan Dawes <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Hacking the Orizon'''&lt;br&gt;[http://www.owasp.org/index.php/Image:Hacking_the_Owasp_Orizon.ppt PowerPoint Presentation] Training Sessions &lt;br&gt;Paolo Perego<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Code Review Guide|'''Code Review Guide''']]&lt;br&gt;Eoin Keary <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | EU Funding for OWASP Projects&lt;br&gt;Carlos Serrao <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Certification|'''OWASP Certification''']]&lt;br&gt;Tom Brennan <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | Software Assurance Maturity Model&lt;br&gt;Pravir Chandra<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 19:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Website|'''OWASP Website''']]&lt;br&gt;[https://www.owasp.org/images/8/8b/EUSummit08_OWASP_Web_Site_Working_Session_Suggestions.doc WS Conclusions]&lt;br&gt;[https://www.owasp.org/images/2/2e/Website.ppt PPT Presentation]&lt;br&gt;Fabio Cerullo <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | '''Metrics &amp;amp; Vulnerabilities'''&lt;br&gt;[https://www.owasp.org/images/0/0d/PASSWD_description.doc Word Presentation]&lt;br&gt;Lucilla Mancini <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | OWASP Orizon&lt;br&gt;Paolo Perego<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;6&quot; | Agenda for Thursday, November 6th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;5&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''Technology''' <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Classic ASP Security Project|'''OWASP Classic ASP Security Project - SoC 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP Source Code Review OWASP Projects Project|'''OWASP Source Code Review - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/c/c9/OWASPEU_SourceReview.ppt PowerPoint Presentation]&lt;br&gt;James Walden<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Ruby on Rails Security Guide V2|'''OWASP Ruby on Rails Security Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/3/32/Rails_security_2_presentation.pdf PDF Presentation]&lt;br&gt;Heiko Webers <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP OpenPGP Extensions for HTTP - Enigform and mod openpgp|'''OWASP OpenPGP Extensions for HTTP - Enigform and mod openpgp - SoC 08''']]&lt;br&gt;Arturo Alberto Busleiman<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Webslayer Project|'''OWASP Webslayer Project''']]&lt;br&gt;Christian Martorella <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP Securing WebGoat using ModSecurity Project|'''OWASP Securing WebGoat using ModSecurity Project - SoC 08''']]&lt;br&gt;Stephen Evans and Christian Folini<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Skavenger Project|'''OWASP Skavenger Project - SoC 08''']]&lt;br&gt;Matthias Rohr <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP AntiSamy Project .NET|'''OWASP AntiSamy Project - SoC 08''']]&lt;br&gt;Marcin Wielgoszewski<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;5&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session Top 10 2009|'''OWASP Top 10 - 2009''']]&lt;br&gt;Dave Wichers <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Intra Governmental Affairs|'''OWASP Intra Governmental Affairs''']]&lt;br&gt;David Campbell <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | SAMM v2 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Website|'''OWASP Website''']]&lt;br&gt;Fabio Cerullo <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | Handling Web MalWare<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Lunch (During Working Sessions)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;5&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Ajax Security <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;2&quot; | Auditing Flash Applications&lt;br&gt;Peleus Uhley <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | WebApp Assessment&lt;br&gt;Vicente Aguilera Diaz <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Mod Security&lt;br&gt;Lucas C. Ferreira<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;5&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;5&quot; | [[:Working Session OWASP Strategic Planning|'''OWASP Strategic Planning and Business Models compatible with OWASP values''']]&lt;br&gt;Jeff Williams, Dinis Cruz, Dave Wichers, Sebastien Deleersnyder, Tom Brennan &amp;amp; Kate Hartmann and Paulo Combra<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 18:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[:OWASP Working Session - Two-way Internationalization of OWASP Content|'''Two-way Internationalization of OWASP Content''']]&lt;br&gt;Juan Carlos Calderon &amp;amp; Sebastien Deleersnyder <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[:Best Practices for OWASP Chapter Leaders|'''OWASP Best Practices for Chapter Leaders''']]&lt;br&gt;[https://www.owasp.org/images/0/01/BestPractices_2008.pptx WS Conclusions]&lt;br&gt;Georg Hess <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[:OWASP Working Session - OWASP Live CD&amp;DVD|'''OWASP Live CD &amp;amp; DVD''']]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 20:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Gala Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 22:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | OWASP Band<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;2&quot; | Agenda for Friday, November 7th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | OWASP AppSec Agenda 2009: Working Session Outcomes<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Documentation Projects/Guides Integration and Unified 4.0 Version&lt;br&gt;Eduardo Neves<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Browser Security&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | ESAPI&lt;br&gt;Jeff Williams<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Tools Projects&lt;br&gt;Matt Tesauro<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Code Review Guide&lt;br&gt;Eoin Keary<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Certification&lt;br&gt;Tom Brennan<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Software Assurance Maturity Model&lt;br&gt;Pravir Chandra<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Top 10 2009&lt;br&gt;Dave Wichers<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Intra Governmental Affairs&lt;br&gt;David Campbell<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Best Practices for Chapter Leaders&lt;br&gt;Georg Hess<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | Coffee Break and Vote (put your dots on the wall)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Live CD &amp;amp; DVD&lt;br&gt;Matt Tesauro<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | ADSR&lt;br&gt;Leonardo Cavallari<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Education Project&lt;br&gt;Sebastien Deleersnyder<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Web Application Framework Security&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Testing Guide&lt;br&gt;Matteo Meucci<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Censorship&lt;br&gt;Tom Brennan<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | EU Funding for OWASP Projects&lt;br&gt;Carlos Serrao<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Website&lt;br&gt;Fabio Cerullo<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Orizon&lt;br&gt;Paolo Perego<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Handling Web MalWare<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | 2-Way Internationalization&lt;br&gt;Juan Carlos Calderon<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Portuguese Public &amp;amp; Private Organizations&lt;br&gt;Carlos Serrao<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Winter of Code 2009&lt;br&gt;Dinis Cruz and Sebastien Deleersnyder<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | [http://www.owasp.org/index.php/Owasp_Board_Meetings_11-07-08 Board Meeting]<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | Announcement of Summit Procedings<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> &lt;br&gt; &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=92960 Summit 2011 2010-11-15T02:03:25Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> == Browser Day ==<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon ([http://kangax.github.com/es5-compat-table/ currently no support])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> A Day in Lisbon, Portugal: <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> Dinis Cruz (Board)&lt;br&gt; Tom Brennan (Board)&lt;br&gt; Eoin Keary (Board)&lt;br&gt; Jeff Williams (Board)&lt;br&gt; Seba Deleersnyder (Board)&lt;br&gt; Dave Wichers (Board)&lt;br&gt; Matt Tesauro (Board)&lt;br&gt; Paulo Coimbra (OWASP)&lt;br&gt; Alison Shrader (OWASP)&lt;br&gt; Kate Hartmann (OWASP)&lt;br&gt; Larry Casey (OWASP)&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011-DC-update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule (Draft) ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> |-<br /> align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1200 - 1300&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | <br /> Lunch <br /> |-<br /> align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1300 - 1320&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | <br /> Projects<br /> |-<br /> align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1330 - 1350&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | <br /> Industry <br /> |-<br /> align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1400 - 1420&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | <br /> Membership<br /> |-<br /> align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1430 - 1450&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | <br /> Connections<br /> |-<br /> align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1500 - 1520&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | <br /> Break<br /> |-<br /> align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1530 - 1450&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | <br /> Chapters<br /> |-<br /> align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1600 - 1620&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | <br /> Education<br /> |-<br /> align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1630 - 1730&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | <br /> TBD<br /> |-<br /> align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1730 - 1800&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | <br /> Wrap up of the Day<br /> |-<br /> align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1900 - 2100&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | <br /> Dinner<br /> |-<br /> align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 2100 - 0000&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | <br /> Evening Event TBD<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1200 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 - 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Securing WebGoat with ModSecurity&lt;br&gt;Stephen Craig Evans <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 - 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Securing WebGoat with ModSecurity&lt;br&gt;Stephen Craig Evans <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 19:00 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;4&quot; | Summit Briefing&lt;br&gt;Dinis Cruz and Summit Organization Team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 20:00 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Dinner<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Tuesday, November 4th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 08:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Registration<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;4&quot; | Summit Keynote&lt;br&gt;Dinis Cruz and Summit Organization Team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''Documents''' <br /> | align=&quot;center&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Testing Project|'''OWASP Testing Guide - SoC 08''']]&lt;br&gt;[http://www.owasp.org/images/2/2c/OWASP_EU_Summit_2008_OWASP_Testing_Guide_v3.ppt PowerPoint Presentation]&lt;br&gt;Matteo Meucci <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP JSP Testing Tool Project|'''OWASP JSP Testing Tool - SoC 08''']]&lt;br&gt;Jason Li<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Code Review Project|'''OWASP Code Review Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/5/59/Code_Review_Eoin.pptx PowerPoint Presentation]&lt;br&gt;Eoin Keary <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Orizon Project|'''OWASP Orizon Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/9/9b/OWASP_EU_Summit_2008_The_Owasp_Orizon_Project.ppt PowerPoint Presentation]&lt;br&gt;Paolo Perego<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP ASDR Project|'''OWASP Application Security Desk Reference - SoC 08''']]&lt;br&gt;Leonardo Cavallari Militelli <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Live CD 2008 Project|'''OWASP Live CD - SoC 08''']]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:OWASP Spanish|'''OWASP Spanish Project - SoC 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP WebScarab Project|'''OWASP WebScarab Project''']]&lt;br&gt;[https://www.owasp.org/images/8/88/OWASP_EU_Summit_2008_WebScarab_treasures.ppt PowerPoint Presentation]&lt;br&gt;Rogan Dawes<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | .NET ESAPI&lt;br&gt;Alex Smolen <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;4&quot; | Working Sessions Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Working Sessions<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% white;&quot; colspan=&quot;5&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 - 13:00 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Documentation Projects|'''Documentation Projects/Guides Integration and Unified 4.0 Version''']]&lt;br&gt;[https://www.owasp.org/images/9/92/Final_OWASP_Guidelines_Ideas_List_.docx WS Conclusions]&lt;br&gt;Eduardo Neves <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Browser Security|'''OWASP Intrinsic Security Working Group - Browser Security''']]&lt;br&gt;Arshan Dabirsiaghi <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Tools Projects|'''Tools Projects''']]&lt;br&gt;[https://www.owasp.org/images/5/51/EUSummit08_OWASP_Tools_Working_Session_Suggestions.doc WS Conclusions]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''The Art and Science of Threat Modeling Web Applications'''&lt;br&gt;[http://uk.youtube.com/watch?v=r04EOuukvMQ Video]&lt;br&gt;Mano Paul <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Web Server Hardening SELinux'''&lt;br&gt;[https://www.owasp.org/images/d/db/SELinux-course-OWASP.pdf PDF Presentation]&lt;br&gt;Pavol Luptak <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Offensive WebApp Hacking'''&lt;br&gt;[http://www.youtube.com/watch?v=cl6BHhi2Dys Video - LDAP, XML and SQL injection]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo02.swf Video - LDAP injection demo]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo04.swf XML injection demo]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo03.swf Video - SQL injection demo ]&lt;br&gt;Marco Slaviero<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Phishing attack'''&lt;br&gt;[http://www.youtube.com/watch?v=uf9hw-qvx-I Video]&lt;br&gt;Matt Teasuro &amp;amp; Brad Causey <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;2&quot; | '''Clickjacking'''&lt;br&gt;[http://www.youtube.com/watch?v=H9srYh0HMP4 Video]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo01.swf Demonstration]&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:30 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;4&quot; | [[:OWASP Working Session Enterprise Security API Project|'''OWASP Enterprise Security API Project (ESAPI)''']]&lt;br&gt;[http://uk.youtube.com/watch?v=-D_bymZ-8vI Video]&lt;br&gt;[https://www.owasp.org/images/7/70/ESAPI_Ideas_List.docx WS Conclusions]&lt;br&gt;Jeff Williams<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 18:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[:OWASP Working Session - OWASP ASDR|'''OWASP Application Security Desk Reference - ASDR''']]&lt;br&gt;Leonardo Cavallari <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - .NET Project|'''.NET Project''']]&lt;br&gt;Dinis Cruz<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Wednesday, November 5th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;4&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''Standards and Education''' <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Positive Security Project|'''OWASP Positive Security Project - SoC 08''']]&lt;br&gt;Eduardo Neves <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Access Control Rules Tester Project|'''OWASP Access Control Rules Tester - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/3/32/OWASP_EU_Summit_2008_AcCoRuTe.pptx PowerPoint Presentation]&lt;br&gt;Andrew Petukhov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Education Project|'''OWASP Education Project - SoC 08''']]&lt;br&gt;Sebastien Deleersnyder, Martin Knobloch <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Teachable Static Analysis Workbench Project|'''OWASP Teachable Static Analysis Workbench - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/6/69/Teachable_static_analysis_workbench.pptx PowerPoint Presentation]&lt;br&gt;Dmitry Kozlov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:OWASP Internationalization|'''OWASP Internationalization Project - Soc 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP AppSensor Project|'''OWASP AppSensor - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/7/77/Presentation_AppSensor.ppt PowerPoint Presentation]&lt;br&gt; Michael Coates<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''PASSWD Project: Metrics and Vulnerabilities'''&lt;br&gt;[https://www.owasp.org/images/f/f6/PASSWD.ppt PowerPoint Presentation]&lt;br&gt;Lucilla Mancini <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Backend Security Project|'''OWASP Backend Security Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/2/20/OWASP_EU_Summit_2008_Presentation_Model.ppt PowerPoint Prsentation]&lt;br&gt;Carlo Pelliccioni<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Open Review Project|'''OWASP Open Review Project''']]&lt;br&gt;Dan Cornell <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Application Security Tool Benchmarking Environment and Site Generator Refresh Project|'''OWASP Application Security Tool Benchmarking Environment and Site Generator Refresh Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/c/c4/Site_generator.pptx PowerPoint Presentation]&lt;br&gt;Dmitry Kozlov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; colspan=&quot;4&quot; | [[OWASP EU Summit 2008#NEW_GLOBAL_COMMITTEE_STRUCTURE|'''OWASP Global Committee Elections''']]<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 12:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[OWASP Working Session Education Project|'''Education Project''']]&lt;br&gt;[https://www.owasp.org/images/3/33/OWASP_Education_Working_Session_Notes_-_Ideas.ppt WS Conclusions]&lt;br&gt;Sebastien Deleersnyder <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Testing Guide|'''Testing Guide''']]&lt;br&gt;Matteo Meucci <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Web Application Framework Security|'''Web Application Framework Security''']]&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Lunch (During Working Sessions)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Flash Player Security'''&lt;br&gt;Peleus Uhley <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''OWASP Top 10'''&lt;br&gt;[http://uk.youtube.com/watch?v=GsRbpshqqII Video]&lt;br&gt;Sebastien Deleersnyder and Martin Knobloch <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Uncovering WebScarab's Secret Treasures'''&lt;br&gt;[https://www.owasp.org/images/8/88/OWASP_EU_Summit_2008_WebScarab_treasures.ppt PowerPoint Presentation]&lt;br&gt;Rogan Dawes <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Hacking the Orizon'''&lt;br&gt;[http://www.owasp.org/index.php/Image:Hacking_the_Owasp_Orizon.ppt PowerPoint Presentation] Training Sessions &lt;br&gt;Paolo Perego<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Code Review Guide|'''Code Review Guide''']]&lt;br&gt;Eoin Keary <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | EU Funding for OWASP Projects&lt;br&gt;Carlos Serrao <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Certification|'''OWASP Certification''']]&lt;br&gt;Tom Brennan <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | Software Assurance Maturity Model&lt;br&gt;Pravir Chandra<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 19:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Website|'''OWASP Website''']]&lt;br&gt;[https://www.owasp.org/images/8/8b/EUSummit08_OWASP_Web_Site_Working_Session_Suggestions.doc WS Conclusions]&lt;br&gt;[https://www.owasp.org/images/2/2e/Website.ppt PPT Presentation]&lt;br&gt;Fabio Cerullo <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | '''Metrics &amp;amp; Vulnerabilities'''&lt;br&gt;[https://www.owasp.org/images/0/0d/PASSWD_description.doc Word Presentation]&lt;br&gt;Lucilla Mancini <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | OWASP Orizon&lt;br&gt;Paolo Perego<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;6&quot; | Agenda for Thursday, November 6th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;5&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''Technology''' <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Classic ASP Security Project|'''OWASP Classic ASP Security Project - SoC 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP Source Code Review OWASP Projects Project|'''OWASP Source Code Review - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/c/c9/OWASPEU_SourceReview.ppt PowerPoint Presentation]&lt;br&gt;James Walden<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Ruby on Rails Security Guide V2|'''OWASP Ruby on Rails Security Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/3/32/Rails_security_2_presentation.pdf PDF Presentation]&lt;br&gt;Heiko Webers <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP OpenPGP Extensions for HTTP - Enigform and mod openpgp|'''OWASP OpenPGP Extensions for HTTP - Enigform and mod openpgp - SoC 08''']]&lt;br&gt;Arturo Alberto Busleiman<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Webslayer Project|'''OWASP Webslayer Project''']]&lt;br&gt;Christian Martorella <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP Securing WebGoat using ModSecurity Project|'''OWASP Securing WebGoat using ModSecurity Project - SoC 08''']]&lt;br&gt;Stephen Evans and Christian Folini<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Skavenger Project|'''OWASP Skavenger Project - SoC 08''']]&lt;br&gt;Matthias Rohr <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP AntiSamy Project .NET|'''OWASP AntiSamy Project - SoC 08''']]&lt;br&gt;Marcin Wielgoszewski<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;5&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session Top 10 2009|'''OWASP Top 10 - 2009''']]&lt;br&gt;Dave Wichers <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Intra Governmental Affairs|'''OWASP Intra Governmental Affairs''']]&lt;br&gt;David Campbell <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | SAMM v2 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Website|'''OWASP Website''']]&lt;br&gt;Fabio Cerullo <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | Handling Web MalWare<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Lunch (During Working Sessions)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;5&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Ajax Security <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;2&quot; | Auditing Flash Applications&lt;br&gt;Peleus Uhley <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | WebApp Assessment&lt;br&gt;Vicente Aguilera Diaz <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Mod Security&lt;br&gt;Lucas C. Ferreira<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;5&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;5&quot; | [[:Working Session OWASP Strategic Planning|'''OWASP Strategic Planning and Business Models compatible with OWASP values''']]&lt;br&gt;Jeff Williams, Dinis Cruz, Dave Wichers, Sebastien Deleersnyder, Tom Brennan &amp;amp; Kate Hartmann and Paulo Combra<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 18:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[:OWASP Working Session - Two-way Internationalization of OWASP Content|'''Two-way Internationalization of OWASP Content''']]&lt;br&gt;Juan Carlos Calderon &amp;amp; Sebastien Deleersnyder <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[:Best Practices for OWASP Chapter Leaders|'''OWASP Best Practices for Chapter Leaders''']]&lt;br&gt;[https://www.owasp.org/images/0/01/BestPractices_2008.pptx WS Conclusions]&lt;br&gt;Georg Hess <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[:OWASP Working Session - OWASP Live CD&amp;DVD|'''OWASP Live CD &amp;amp; DVD''']]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 20:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Gala Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 22:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | OWASP Band<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;2&quot; | Agenda for Friday, November 7th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | OWASP AppSec Agenda 2009: Working Session Outcomes<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Documentation Projects/Guides Integration and Unified 4.0 Version&lt;br&gt;Eduardo Neves<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Browser Security&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | ESAPI&lt;br&gt;Jeff Williams<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Tools Projects&lt;br&gt;Matt Tesauro<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Code Review Guide&lt;br&gt;Eoin Keary<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Certification&lt;br&gt;Tom Brennan<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Software Assurance Maturity Model&lt;br&gt;Pravir Chandra<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Top 10 2009&lt;br&gt;Dave Wichers<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Intra Governmental Affairs&lt;br&gt;David Campbell<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Best Practices for Chapter Leaders&lt;br&gt;Georg Hess<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | Coffee Break and Vote (put your dots on the wall)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Live CD &amp;amp; DVD&lt;br&gt;Matt Tesauro<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | ADSR&lt;br&gt;Leonardo Cavallari<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Education Project&lt;br&gt;Sebastien Deleersnyder<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Web Application Framework Security&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Testing Guide&lt;br&gt;Matteo Meucci<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Censorship&lt;br&gt;Tom Brennan<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | EU Funding for OWASP Projects&lt;br&gt;Carlos Serrao<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Website&lt;br&gt;Fabio Cerullo<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Orizon&lt;br&gt;Paolo Perego<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Handling Web MalWare<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | 2-Way Internationalization&lt;br&gt;Juan Carlos Calderon<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Portuguese Public &amp;amp; Private Organizations&lt;br&gt;Carlos Serrao<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Winter of Code 2009&lt;br&gt;Dinis Cruz and Sebastien Deleersnyder<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | [http://www.owasp.org/index.php/Owasp_Board_Meetings_11-07-08 Board Meeting]<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | Announcement of Summit Procedings<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> &lt;br&gt; &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=92959 Summit 2011 2010-11-15T01:49:56Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> == Browser Day ==<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon ([http://kangax.github.com/es5-compat-table/ currently no support])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> A Day in Lisbon, Portugal: <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> Dinis Cruz (Board)&lt;br&gt; Tom Brennan (Board)&lt;br&gt; Eoin Keary (Board)&lt;br&gt; Jeff Williams (Board)&lt;br&gt; Seba Deleersnyder (Board)&lt;br&gt; Dave Wichers (Board)&lt;br&gt; Matt Tesauro (Board)&lt;br&gt; Paulo Coimbra (OWASP)&lt;br&gt; Alison Shrader (OWASP)&lt;br&gt; Kate Hartmann (OWASP)&lt;br&gt; Larry Casey (OWASP)&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011-DC-update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule (Draft) ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> |-<br /> align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> |-<br /> align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> |-<br /> align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> |-<br /> align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> |-<br /> align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> |-<br /> align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1100 - 1200&lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | <br /> Board Welcome &amp;amp; Kickoff <br /> <br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1200 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch <br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 - 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Securing WebGoat with ModSecurity&lt;br&gt;Stephen Craig Evans <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 - 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Securing WebGoat with ModSecurity&lt;br&gt;Stephen Craig Evans <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 19:00 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;4&quot; | Summit Briefing&lt;br&gt;Dinis Cruz and Summit Organization Team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 20:00 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Dinner<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Tuesday, November 4th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 08:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Registration<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;4&quot; | Summit Keynote&lt;br&gt;Dinis Cruz and Summit Organization Team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''Documents''' <br /> | align=&quot;center&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Testing Project|'''OWASP Testing Guide - SoC 08''']]&lt;br&gt;[http://www.owasp.org/images/2/2c/OWASP_EU_Summit_2008_OWASP_Testing_Guide_v3.ppt PowerPoint Presentation]&lt;br&gt;Matteo Meucci <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP JSP Testing Tool Project|'''OWASP JSP Testing Tool - SoC 08''']]&lt;br&gt;Jason Li<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Code Review Project|'''OWASP Code Review Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/5/59/Code_Review_Eoin.pptx PowerPoint Presentation]&lt;br&gt;Eoin Keary <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Orizon Project|'''OWASP Orizon Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/9/9b/OWASP_EU_Summit_2008_The_Owasp_Orizon_Project.ppt PowerPoint Presentation]&lt;br&gt;Paolo Perego<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP ASDR Project|'''OWASP Application Security Desk Reference - SoC 08''']]&lt;br&gt;Leonardo Cavallari Militelli <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Live CD 2008 Project|'''OWASP Live CD - SoC 08''']]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:OWASP Spanish|'''OWASP Spanish Project - SoC 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP WebScarab Project|'''OWASP WebScarab Project''']]&lt;br&gt;[https://www.owasp.org/images/8/88/OWASP_EU_Summit_2008_WebScarab_treasures.ppt PowerPoint Presentation]&lt;br&gt;Rogan Dawes<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | .NET ESAPI&lt;br&gt;Alex Smolen <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;4&quot; | Working Sessions Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Working Sessions<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% white;&quot; colspan=&quot;5&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 - 13:00 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Documentation Projects|'''Documentation Projects/Guides Integration and Unified 4.0 Version''']]&lt;br&gt;[https://www.owasp.org/images/9/92/Final_OWASP_Guidelines_Ideas_List_.docx WS Conclusions]&lt;br&gt;Eduardo Neves <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Browser Security|'''OWASP Intrinsic Security Working Group - Browser Security''']]&lt;br&gt;Arshan Dabirsiaghi <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Tools Projects|'''Tools Projects''']]&lt;br&gt;[https://www.owasp.org/images/5/51/EUSummit08_OWASP_Tools_Working_Session_Suggestions.doc WS Conclusions]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''The Art and Science of Threat Modeling Web Applications'''&lt;br&gt;[http://uk.youtube.com/watch?v=r04EOuukvMQ Video]&lt;br&gt;Mano Paul <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Web Server Hardening SELinux'''&lt;br&gt;[https://www.owasp.org/images/d/db/SELinux-course-OWASP.pdf PDF Presentation]&lt;br&gt;Pavol Luptak <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Offensive WebApp Hacking'''&lt;br&gt;[http://www.youtube.com/watch?v=cl6BHhi2Dys Video - LDAP, XML and SQL injection]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo02.swf Video - LDAP injection demo]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo04.swf XML injection demo]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo03.swf Video - SQL injection demo ]&lt;br&gt;Marco Slaviero<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Phishing attack'''&lt;br&gt;[http://www.youtube.com/watch?v=uf9hw-qvx-I Video]&lt;br&gt;Matt Teasuro &amp;amp; Brad Causey <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;2&quot; | '''Clickjacking'''&lt;br&gt;[http://www.youtube.com/watch?v=H9srYh0HMP4 Video]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo01.swf Demonstration]&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:30 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;4&quot; | [[:OWASP Working Session Enterprise Security API Project|'''OWASP Enterprise Security API Project (ESAPI)''']]&lt;br&gt;[http://uk.youtube.com/watch?v=-D_bymZ-8vI Video]&lt;br&gt;[https://www.owasp.org/images/7/70/ESAPI_Ideas_List.docx WS Conclusions]&lt;br&gt;Jeff Williams<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 18:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[:OWASP Working Session - OWASP ASDR|'''OWASP Application Security Desk Reference - ASDR''']]&lt;br&gt;Leonardo Cavallari <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - .NET Project|'''.NET Project''']]&lt;br&gt;Dinis Cruz<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Wednesday, November 5th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;4&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''Standards and Education''' <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Positive Security Project|'''OWASP Positive Security Project - SoC 08''']]&lt;br&gt;Eduardo Neves <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Access Control Rules Tester Project|'''OWASP Access Control Rules Tester - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/3/32/OWASP_EU_Summit_2008_AcCoRuTe.pptx PowerPoint Presentation]&lt;br&gt;Andrew Petukhov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Education Project|'''OWASP Education Project - SoC 08''']]&lt;br&gt;Sebastien Deleersnyder, Martin Knobloch <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Teachable Static Analysis Workbench Project|'''OWASP Teachable Static Analysis Workbench - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/6/69/Teachable_static_analysis_workbench.pptx PowerPoint Presentation]&lt;br&gt;Dmitry Kozlov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:OWASP Internationalization|'''OWASP Internationalization Project - Soc 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP AppSensor Project|'''OWASP AppSensor - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/7/77/Presentation_AppSensor.ppt PowerPoint Presentation]&lt;br&gt; Michael Coates<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''PASSWD Project: Metrics and Vulnerabilities'''&lt;br&gt;[https://www.owasp.org/images/f/f6/PASSWD.ppt PowerPoint Presentation]&lt;br&gt;Lucilla Mancini <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Backend Security Project|'''OWASP Backend Security Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/2/20/OWASP_EU_Summit_2008_Presentation_Model.ppt PowerPoint Prsentation]&lt;br&gt;Carlo Pelliccioni<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Open Review Project|'''OWASP Open Review Project''']]&lt;br&gt;Dan Cornell <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Application Security Tool Benchmarking Environment and Site Generator Refresh Project|'''OWASP Application Security Tool Benchmarking Environment and Site Generator Refresh Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/c/c4/Site_generator.pptx PowerPoint Presentation]&lt;br&gt;Dmitry Kozlov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; colspan=&quot;4&quot; | [[OWASP EU Summit 2008#NEW_GLOBAL_COMMITTEE_STRUCTURE|'''OWASP Global Committee Elections''']]<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 12:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[OWASP Working Session Education Project|'''Education Project''']]&lt;br&gt;[https://www.owasp.org/images/3/33/OWASP_Education_Working_Session_Notes_-_Ideas.ppt WS Conclusions]&lt;br&gt;Sebastien Deleersnyder <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Testing Guide|'''Testing Guide''']]&lt;br&gt;Matteo Meucci <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Web Application Framework Security|'''Web Application Framework Security''']]&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Lunch (During Working Sessions)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Flash Player Security'''&lt;br&gt;Peleus Uhley <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''OWASP Top 10'''&lt;br&gt;[http://uk.youtube.com/watch?v=GsRbpshqqII Video]&lt;br&gt;Sebastien Deleersnyder and Martin Knobloch <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Uncovering WebScarab's Secret Treasures'''&lt;br&gt;[https://www.owasp.org/images/8/88/OWASP_EU_Summit_2008_WebScarab_treasures.ppt PowerPoint Presentation]&lt;br&gt;Rogan Dawes <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Hacking the Orizon'''&lt;br&gt;[http://www.owasp.org/index.php/Image:Hacking_the_Owasp_Orizon.ppt PowerPoint Presentation] Training Sessions &lt;br&gt;Paolo Perego<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Code Review Guide|'''Code Review Guide''']]&lt;br&gt;Eoin Keary <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | EU Funding for OWASP Projects&lt;br&gt;Carlos Serrao <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Certification|'''OWASP Certification''']]&lt;br&gt;Tom Brennan <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | Software Assurance Maturity Model&lt;br&gt;Pravir Chandra<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 19:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Website|'''OWASP Website''']]&lt;br&gt;[https://www.owasp.org/images/8/8b/EUSummit08_OWASP_Web_Site_Working_Session_Suggestions.doc WS Conclusions]&lt;br&gt;[https://www.owasp.org/images/2/2e/Website.ppt PPT Presentation]&lt;br&gt;Fabio Cerullo <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | '''Metrics &amp;amp; Vulnerabilities'''&lt;br&gt;[https://www.owasp.org/images/0/0d/PASSWD_description.doc Word Presentation]&lt;br&gt;Lucilla Mancini <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | OWASP Orizon&lt;br&gt;Paolo Perego<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;6&quot; | Agenda for Thursday, November 6th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;5&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''Technology''' <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Classic ASP Security Project|'''OWASP Classic ASP Security Project - SoC 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP Source Code Review OWASP Projects Project|'''OWASP Source Code Review - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/c/c9/OWASPEU_SourceReview.ppt PowerPoint Presentation]&lt;br&gt;James Walden<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Ruby on Rails Security Guide V2|'''OWASP Ruby on Rails Security Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/3/32/Rails_security_2_presentation.pdf PDF Presentation]&lt;br&gt;Heiko Webers <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP OpenPGP Extensions for HTTP - Enigform and mod openpgp|'''OWASP OpenPGP Extensions for HTTP - Enigform and mod openpgp - SoC 08''']]&lt;br&gt;Arturo Alberto Busleiman<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Webslayer Project|'''OWASP Webslayer Project''']]&lt;br&gt;Christian Martorella <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP Securing WebGoat using ModSecurity Project|'''OWASP Securing WebGoat using ModSecurity Project - SoC 08''']]&lt;br&gt;Stephen Evans and Christian Folini<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Skavenger Project|'''OWASP Skavenger Project - SoC 08''']]&lt;br&gt;Matthias Rohr <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP AntiSamy Project .NET|'''OWASP AntiSamy Project - SoC 08''']]&lt;br&gt;Marcin Wielgoszewski<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;5&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session Top 10 2009|'''OWASP Top 10 - 2009''']]&lt;br&gt;Dave Wichers <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Intra Governmental Affairs|'''OWASP Intra Governmental Affairs''']]&lt;br&gt;David Campbell <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | SAMM v2 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Website|'''OWASP Website''']]&lt;br&gt;Fabio Cerullo <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | Handling Web MalWare<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Lunch (During Working Sessions)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;5&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Ajax Security <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;2&quot; | Auditing Flash Applications&lt;br&gt;Peleus Uhley <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | WebApp Assessment&lt;br&gt;Vicente Aguilera Diaz <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Mod Security&lt;br&gt;Lucas C. Ferreira<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;5&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;5&quot; | [[:Working Session OWASP Strategic Planning|'''OWASP Strategic Planning and Business Models compatible with OWASP values''']]&lt;br&gt;Jeff Williams, Dinis Cruz, Dave Wichers, Sebastien Deleersnyder, Tom Brennan &amp;amp; Kate Hartmann and Paulo Combra<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 18:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[:OWASP Working Session - Two-way Internationalization of OWASP Content|'''Two-way Internationalization of OWASP Content''']]&lt;br&gt;Juan Carlos Calderon &amp;amp; Sebastien Deleersnyder <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[:Best Practices for OWASP Chapter Leaders|'''OWASP Best Practices for Chapter Leaders''']]&lt;br&gt;[https://www.owasp.org/images/0/01/BestPractices_2008.pptx WS Conclusions]&lt;br&gt;Georg Hess <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[:OWASP Working Session - OWASP Live CD&amp;DVD|'''OWASP Live CD &amp;amp; DVD''']]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 20:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Gala Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 22:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | OWASP Band<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;2&quot; | Agenda for Friday, November 7th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | OWASP AppSec Agenda 2009: Working Session Outcomes<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Documentation Projects/Guides Integration and Unified 4.0 Version&lt;br&gt;Eduardo Neves<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Browser Security&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | ESAPI&lt;br&gt;Jeff Williams<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Tools Projects&lt;br&gt;Matt Tesauro<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Code Review Guide&lt;br&gt;Eoin Keary<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Certification&lt;br&gt;Tom Brennan<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Software Assurance Maturity Model&lt;br&gt;Pravir Chandra<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Top 10 2009&lt;br&gt;Dave Wichers<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Intra Governmental Affairs&lt;br&gt;David Campbell<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Best Practices for Chapter Leaders&lt;br&gt;Georg Hess<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | Coffee Break and Vote (put your dots on the wall)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Live CD &amp;amp; DVD&lt;br&gt;Matt Tesauro<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | ADSR&lt;br&gt;Leonardo Cavallari<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Education Project&lt;br&gt;Sebastien Deleersnyder<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Web Application Framework Security&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Testing Guide&lt;br&gt;Matteo Meucci<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Censorship&lt;br&gt;Tom Brennan<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | EU Funding for OWASP Projects&lt;br&gt;Carlos Serrao<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Website&lt;br&gt;Fabio Cerullo<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Orizon&lt;br&gt;Paolo Perego<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Handling Web MalWare<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | 2-Way Internationalization&lt;br&gt;Juan Carlos Calderon<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Portuguese Public &amp;amp; Private Organizations&lt;br&gt;Carlos Serrao<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Winter of Code 2009&lt;br&gt;Dinis Cruz and Sebastien Deleersnyder<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | [http://www.owasp.org/index.php/Owasp_Board_Meetings_11-07-08 Board Meeting]<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | Announcement of Summit Procedings<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> &lt;br&gt; &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=92958 Summit 2011 2010-11-15T01:45:52Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> == Browser Day ==<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon ([http://kangax.github.com/es5-compat-table/ currently no support])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> A Day in Lisbon, Portugal: <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> Dinis Cruz (Board)&lt;br&gt; Tom Brennan (Board)&lt;br&gt; Eoin Keary (Board)&lt;br&gt; Jeff Williams (Board)&lt;br&gt; Seba Deleersnyder (Board)&lt;br&gt; Dave Wichers (Board)&lt;br&gt; Matt Tesauro (Board)&lt;br&gt; Paulo Coimbra (OWASP)&lt;br&gt; Alison Shrader (OWASP)&lt;br&gt; Kate Hartmann (OWASP)&lt;br&gt; Larry Casey (OWASP)&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011-DC-update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule (Draft) ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | 1100 - 1200&lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | <br /> Board Welcome &amp;amp; Kickoff<br /> <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 1200 - 1300 <br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Lunch<br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 - 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Securing WebGoat with ModSecurity&lt;br&gt;Stephen Craig Evans <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 - 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Securing WebGoat with ModSecurity&lt;br&gt;Stephen Craig Evans <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 19:00 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Summit Briefing&lt;br&gt;Dinis Cruz and Summit Organization Team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 20:00 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Dinner<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Tuesday, November 4th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 08:00 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Registration<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:00 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Summit Keynote&lt;br&gt;Dinis Cruz and Summit Organization Team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | '''Documents''' <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:30 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Testing Project|'''OWASP Testing Guide - SoC 08''']]&lt;br&gt;[http://www.owasp.org/images/2/2c/OWASP_EU_Summit_2008_OWASP_Testing_Guide_v3.ppt PowerPoint Presentation]&lt;br&gt;Matteo Meucci <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP JSP Testing Tool Project|'''OWASP JSP Testing Tool - SoC 08''']]&lt;br&gt;Jason Li<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:45 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Code Review Project|'''OWASP Code Review Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/5/59/Code_Review_Eoin.pptx PowerPoint Presentation]&lt;br&gt;Eoin Keary <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Orizon Project|'''OWASP Orizon Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/9/9b/OWASP_EU_Summit_2008_The_Owasp_Orizon_Project.ppt PowerPoint Presentation]&lt;br&gt;Paolo Perego<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP ASDR Project|'''OWASP Application Security Desk Reference - SoC 08''']]&lt;br&gt;Leonardo Cavallari Militelli <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Live CD 2008 Project|'''OWASP Live CD - SoC 08''']]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:OWASP Spanish|'''OWASP Spanish Project - SoC 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP WebScarab Project|'''OWASP WebScarab Project''']]&lt;br&gt;[https://www.owasp.org/images/8/88/OWASP_EU_Summit_2008_WebScarab_treasures.ppt PowerPoint Presentation]&lt;br&gt;Rogan Dawes<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:45 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | .NET ESAPI&lt;br&gt;Alex Smolen <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Working Sessions Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Working Sessions<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 - 13:00 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Documentation Projects|'''Documentation Projects/Guides Integration and Unified 4.0 Version''']]&lt;br&gt;[https://www.owasp.org/images/9/92/Final_OWASP_Guidelines_Ideas_List_.docx WS Conclusions]&lt;br&gt;Eduardo Neves <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Browser Security|'''OWASP Intrinsic Security Working Group - Browser Security''']]&lt;br&gt;Arshan Dabirsiaghi <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Tools Projects|'''Tools Projects''']]&lt;br&gt;[https://www.owasp.org/images/5/51/EUSummit08_OWASP_Tools_Working_Session_Suggestions.doc WS Conclusions]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''The Art and Science of Threat Modeling Web Applications'''&lt;br&gt;[http://uk.youtube.com/watch?v=r04EOuukvMQ Video]&lt;br&gt;Mano Paul <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Web Server Hardening SELinux'''&lt;br&gt;[https://www.owasp.org/images/d/db/SELinux-course-OWASP.pdf PDF Presentation]&lt;br&gt;Pavol Luptak <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Offensive WebApp Hacking'''&lt;br&gt;[http://www.youtube.com/watch?v=cl6BHhi2Dys Video - LDAP, XML and SQL injection]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo02.swf Video - LDAP injection demo]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo04.swf XML injection demo]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo03.swf Video - SQL injection demo ]&lt;br&gt;Marco Slaviero<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Phishing attack'''&lt;br&gt;[http://www.youtube.com/watch?v=uf9hw-qvx-I Video]&lt;br&gt;Matt Teasuro &amp;amp; Brad Causey <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Clickjacking'''&lt;br&gt;[http://www.youtube.com/watch?v=H9srYh0HMP4 Video]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo01.swf Demonstration]&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:00 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:30 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session Enterprise Security API Project|'''OWASP Enterprise Security API Project (ESAPI)''']]&lt;br&gt;[http://uk.youtube.com/watch?v=-D_bymZ-8vI Video]&lt;br&gt;[https://www.owasp.org/images/7/70/ESAPI_Ideas_List.docx WS Conclusions]&lt;br&gt;Jeff Williams<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 18:30 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP ASDR|'''OWASP Application Security Desk Reference - ASDR''']]&lt;br&gt;Leonardo Cavallari <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - .NET Project|'''.NET Project''']]&lt;br&gt;Dinis Cruz<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Wednesday, November 5th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:15 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | '''Standards and Education''' <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Positive Security Project|'''OWASP Positive Security Project - SoC 08''']]&lt;br&gt;Eduardo Neves <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Access Control Rules Tester Project|'''OWASP Access Control Rules Tester - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/3/32/OWASP_EU_Summit_2008_AcCoRuTe.pptx PowerPoint Presentation]&lt;br&gt;Andrew Petukhov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Education Project|'''OWASP Education Project - SoC 08''']]&lt;br&gt;Sebastien Deleersnyder, Martin Knobloch <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Teachable Static Analysis Workbench Project|'''OWASP Teachable Static Analysis Workbench - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/6/69/Teachable_static_analysis_workbench.pptx PowerPoint Presentation]&lt;br&gt;Dmitry Kozlov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:OWASP Internationalization|'''OWASP Internationalization Project - Soc 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP AppSensor Project|'''OWASP AppSensor - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/7/77/Presentation_AppSensor.ppt PowerPoint Presentation]&lt;br&gt; Michael Coates<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:45 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | '''PASSWD Project: Metrics and Vulnerabilities'''&lt;br&gt;[https://www.owasp.org/images/f/f6/PASSWD.ppt PowerPoint Presentation]&lt;br&gt;Lucilla Mancini <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Backend Security Project|'''OWASP Backend Security Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/2/20/OWASP_EU_Summit_2008_Presentation_Model.ppt PowerPoint Prsentation]&lt;br&gt;Carlo Pelliccioni<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Open Review Project|'''OWASP Open Review Project''']]&lt;br&gt;Dan Cornell <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Application Security Tool Benchmarking Environment and Site Generator Refresh Project|'''OWASP Application Security Tool Benchmarking Environment and Site Generator Refresh Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/c/c4/Site_generator.pptx PowerPoint Presentation]&lt;br&gt;Dmitry Kozlov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | [[OWASP EU Summit 2008#NEW_GLOBAL_COMMITTEE_STRUCTURE|'''OWASP Global Committee Elections''']]<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 12:45 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[OWASP Working Session Education Project|'''Education Project''']]&lt;br&gt;[https://www.owasp.org/images/3/33/OWASP_Education_Working_Session_Notes_-_Ideas.ppt WS Conclusions]&lt;br&gt;Sebastien Deleersnyder <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Testing Guide|'''Testing Guide''']]&lt;br&gt;Matteo Meucci <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Web Application Framework Security|'''Web Application Framework Security''']]&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:45 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Lunch (During Working Sessions)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Flash Player Security'''&lt;br&gt;Peleus Uhley <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''OWASP Top 10'''&lt;br&gt;[http://uk.youtube.com/watch?v=GsRbpshqqII Video]&lt;br&gt;Sebastien Deleersnyder and Martin Knobloch <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Uncovering WebScarab's Secret Treasures'''&lt;br&gt;[https://www.owasp.org/images/8/88/OWASP_EU_Summit_2008_WebScarab_treasures.ppt PowerPoint Presentation]&lt;br&gt;Rogan Dawes <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Hacking the Orizon'''&lt;br&gt;[http://www.owasp.org/index.php/Image:Hacking_the_Owasp_Orizon.ppt PowerPoint Presentation] Training Sessions &lt;br&gt;Paolo Perego<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:00 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Code Review Guide|'''Code Review Guide''']]&lt;br&gt;Eoin Keary <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | EU Funding for OWASP Projects&lt;br&gt;Carlos Serrao <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Certification|'''OWASP Certification''']]&lt;br&gt;Tom Brennan <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | Software Assurance Maturity Model&lt;br&gt;Pravir Chandra<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 19:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Website|'''OWASP Website''']]&lt;br&gt;[https://www.owasp.org/images/8/8b/EUSummit08_OWASP_Web_Site_Working_Session_Suggestions.doc WS Conclusions]&lt;br&gt;[https://www.owasp.org/images/2/2e/Website.ppt PPT Presentation]&lt;br&gt;Fabio Cerullo <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | '''Metrics &amp;amp; Vulnerabilities'''&lt;br&gt;[https://www.owasp.org/images/0/0d/PASSWD_description.doc Word Presentation]&lt;br&gt;Lucilla Mancini <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | OWASP Orizon&lt;br&gt;Paolo Perego<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;6&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Thursday, November 6th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:15 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | '''Technology''' <br /> | align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Classic ASP Security Project|'''OWASP Classic ASP Security Project - SoC 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Source Code Review OWASP Projects Project|'''OWASP Source Code Review - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/c/c9/OWASPEU_SourceReview.ppt PowerPoint Presentation]&lt;br&gt;James Walden<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Ruby on Rails Security Guide V2|'''OWASP Ruby on Rails Security Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/3/32/Rails_security_2_presentation.pdf PDF Presentation]&lt;br&gt;Heiko Webers <br /> | align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP OpenPGP Extensions for HTTP - Enigform and mod openpgp|'''OWASP OpenPGP Extensions for HTTP - Enigform and mod openpgp - SoC 08''']]&lt;br&gt;Arturo Alberto Busleiman<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Webslayer Project|'''OWASP Webslayer Project''']]&lt;br&gt;Christian Martorella <br /> | align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Securing WebGoat using ModSecurity Project|'''OWASP Securing WebGoat using ModSecurity Project - SoC 08''']]&lt;br&gt;Stephen Evans and Christian Folini<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Skavenger Project|'''OWASP Skavenger Project - SoC 08''']]&lt;br&gt;Matthias Rohr <br /> | align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP AntiSamy Project .NET|'''OWASP AntiSamy Project - SoC 08''']]&lt;br&gt;Marcin Wielgoszewski<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session Top 10 2009|'''OWASP Top 10 - 2009''']]&lt;br&gt;Dave Wichers <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Intra Governmental Affairs|'''OWASP Intra Governmental Affairs''']]&lt;br&gt;David Campbell <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | SAMM v2 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Website|'''OWASP Website''']]&lt;br&gt;Fabio Cerullo <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | Handling Web MalWare<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Lunch (During Working Sessions)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Ajax Security <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Auditing Flash Applications&lt;br&gt;Peleus Uhley <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | WebApp Assessment&lt;br&gt;Vicente Aguilera Diaz <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Mod Security&lt;br&gt;Lucas C. Ferreira<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:30 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:Working Session OWASP Strategic Planning|'''OWASP Strategic Planning and Business Models compatible with OWASP values''']]&lt;br&gt;Jeff Williams, Dinis Cruz, Dave Wichers, Sebastien Deleersnyder, Tom Brennan &amp;amp; Kate Hartmann and Paulo Combra<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 18:30 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Two-way Internationalization of OWASP Content|'''Two-way Internationalization of OWASP Content''']]&lt;br&gt;Juan Carlos Calderon &amp;amp; Sebastien Deleersnyder <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:Best Practices for OWASP Chapter Leaders|'''OWASP Best Practices for Chapter Leaders''']]&lt;br&gt;[https://www.owasp.org/images/0/01/BestPractices_2008.pptx WS Conclusions]&lt;br&gt;Georg Hess <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Live CD&amp;DVD|'''OWASP Live CD &amp;amp; DVD''']]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 20:00 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Gala Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 22:00 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Band<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Friday, November 7th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | OWASP AppSec Agenda 2009: Working Session Outcomes<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Documentation Projects/Guides Integration and Unified 4.0 Version&lt;br&gt;Eduardo Neves<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Browser Security&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | ESAPI&lt;br&gt;Jeff Williams<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Tools Projects&lt;br&gt;Matt Tesauro<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Code Review Guide&lt;br&gt;Eoin Keary<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Certification&lt;br&gt;Tom Brennan<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Software Assurance Maturity Model&lt;br&gt;Pravir Chandra<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Top 10 2009&lt;br&gt;Dave Wichers<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Intra Governmental Affairs&lt;br&gt;David Campbell<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Best Practices for Chapter Leaders&lt;br&gt;Georg Hess<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | Coffee Break and Vote (put your dots on the wall)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Live CD &amp;amp; DVD&lt;br&gt;Matt Tesauro<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | ADSR&lt;br&gt;Leonardo Cavallari<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Education Project&lt;br&gt;Sebastien Deleersnyder<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Web Application Framework Security&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Testing Guide&lt;br&gt;Matteo Meucci<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Censorship&lt;br&gt;Tom Brennan<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | EU Funding for OWASP Projects&lt;br&gt;Carlos Serrao<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Website&lt;br&gt;Fabio Cerullo<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Orizon&lt;br&gt;Paolo Perego<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Handling Web MalWare<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | 2-Way Internationalization&lt;br&gt;Juan Carlos Calderon<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Portuguese Public &amp;amp; Private Organizations&lt;br&gt;Carlos Serrao<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Winter of Code 2009&lt;br&gt;Dinis Cruz and Sebastien Deleersnyder<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | [http://www.owasp.org/index.php/Owasp_Board_Meetings_11-07-08 Board Meeting]<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | Announcement of Summit Procedings<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> &lt;br&gt; &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=92957 Summit 2011 2010-11-15T01:41:00Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> == Browser Day ==<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon ([http://kangax.github.com/es5-compat-table/ currently no support])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> A Day in Lisbon, Portugal: <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> Dinis Cruz (Board)&lt;br&gt; Tom Brennan (Board)&lt;br&gt; Eoin Keary (Board)&lt;br&gt; Jeff Williams (Board)&lt;br&gt; Seba Deleersnyder (Board)&lt;br&gt; Dave Wichers (Board)&lt;br&gt; Matt Tesauro (Board)&lt;br&gt; Paulo Coimbra (OWASP)&lt;br&gt; Alison Shrader (OWASP)&lt;br&gt; Kate Hartmann (OWASP)&lt;br&gt; Larry Casey (OWASP)&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011-DC-update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule (Draft) ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 - 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Securing WebGoat with ModSecurity&lt;br&gt;Stephen Craig Evans <br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | WebSec Apps for Managers and Executives&lt;br&gt;[http://uk.youtube.com/watch?v=r04EOuukvMQ Video]&lt;br&gt;Mano Paul <br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | OWASP Testing Guide&lt;br&gt;Matteo Meucci <br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | OWASP Testing Guide&lt;br&gt;Matteo Meucci<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 - 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Securing WebGoat with ModSecurity&lt;br&gt;Stephen Craig Evans <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | WebSec Apps for Managers and Executives&lt;br&gt;[http://uk.youtube.com/watch?v=r04EOuukvMQ Video]&lt;br&gt;Mano Paul <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | OWASP Testing Guide&lt;br&gt;Matteo Meucci<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 - 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Securing WebGoat with ModSecurity&lt;br&gt;Stephen Craig Evans <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | WebSec Apps for Managers and Executives&lt;br&gt;[http://uk.youtube.com/watch?v=r04EOuukvMQ Video]&lt;br&gt;Mano Paul <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | OWASP Testing Guide&lt;br&gt;Matteo Meucci<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 19:00 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;4&quot; | Summit Briefing&lt;br&gt;Dinis Cruz and Summit Organization Team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 20:00 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Dinner<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Tuesday, November 4th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 08:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Registration<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;4&quot; | Summit Keynote&lt;br&gt;Dinis Cruz and Summit Organization Team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''Documents''' <br /> | align=&quot;center&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Testing Project|'''OWASP Testing Guide - SoC 08''']]&lt;br&gt;[http://www.owasp.org/images/2/2c/OWASP_EU_Summit_2008_OWASP_Testing_Guide_v3.ppt PowerPoint Presentation]&lt;br&gt;Matteo Meucci <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP JSP Testing Tool Project|'''OWASP JSP Testing Tool - SoC 08''']]&lt;br&gt;Jason Li<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Code Review Project|'''OWASP Code Review Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/5/59/Code_Review_Eoin.pptx PowerPoint Presentation]&lt;br&gt;Eoin Keary <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Orizon Project|'''OWASP Orizon Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/9/9b/OWASP_EU_Summit_2008_The_Owasp_Orizon_Project.ppt PowerPoint Presentation]&lt;br&gt;Paolo Perego<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP ASDR Project|'''OWASP Application Security Desk Reference - SoC 08''']]&lt;br&gt;Leonardo Cavallari Militelli <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Live CD 2008 Project|'''OWASP Live CD - SoC 08''']]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:OWASP Spanish|'''OWASP Spanish Project - SoC 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP WebScarab Project|'''OWASP WebScarab Project''']]&lt;br&gt;[https://www.owasp.org/images/8/88/OWASP_EU_Summit_2008_WebScarab_treasures.ppt PowerPoint Presentation]&lt;br&gt;Rogan Dawes<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | .NET ESAPI&lt;br&gt;Alex Smolen <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;4&quot; | Working Sessions Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Working Sessions<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% white;&quot; colspan=&quot;5&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 - 13:00 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Documentation Projects|'''Documentation Projects/Guides Integration and Unified 4.0 Version''']]&lt;br&gt;[https://www.owasp.org/images/9/92/Final_OWASP_Guidelines_Ideas_List_.docx WS Conclusions]&lt;br&gt;Eduardo Neves <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Browser Security|'''OWASP Intrinsic Security Working Group - Browser Security''']]&lt;br&gt;Arshan Dabirsiaghi <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Tools Projects|'''Tools Projects''']]&lt;br&gt;[https://www.owasp.org/images/5/51/EUSummit08_OWASP_Tools_Working_Session_Suggestions.doc WS Conclusions]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''The Art and Science of Threat Modeling Web Applications'''&lt;br&gt;[http://uk.youtube.com/watch?v=r04EOuukvMQ Video]&lt;br&gt;Mano Paul <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Web Server Hardening SELinux'''&lt;br&gt;[https://www.owasp.org/images/d/db/SELinux-course-OWASP.pdf PDF Presentation]&lt;br&gt;Pavol Luptak <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Offensive WebApp Hacking'''&lt;br&gt;[http://www.youtube.com/watch?v=cl6BHhi2Dys Video - LDAP, XML and SQL injection]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo02.swf Video - LDAP injection demo]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo04.swf XML injection demo]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo03.swf Video - SQL injection demo ]&lt;br&gt;Marco Slaviero<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Phishing attack'''&lt;br&gt;[http://www.youtube.com/watch?v=uf9hw-qvx-I Video]&lt;br&gt;Matt Teasuro &amp;amp; Brad Causey <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;2&quot; | '''Clickjacking'''&lt;br&gt;[http://www.youtube.com/watch?v=H9srYh0HMP4 Video]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo01.swf Demonstration]&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:30 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;4&quot; | [[:OWASP Working Session Enterprise Security API Project|'''OWASP Enterprise Security API Project (ESAPI)''']]&lt;br&gt;[http://uk.youtube.com/watch?v=-D_bymZ-8vI Video]&lt;br&gt;[https://www.owasp.org/images/7/70/ESAPI_Ideas_List.docx WS Conclusions]&lt;br&gt;Jeff Williams<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 18:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[:OWASP Working Session - OWASP ASDR|'''OWASP Application Security Desk Reference - ASDR''']]&lt;br&gt;Leonardo Cavallari <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - .NET Project|'''.NET Project''']]&lt;br&gt;Dinis Cruz<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Wednesday, November 5th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;4&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''Standards and Education''' <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Positive Security Project|'''OWASP Positive Security Project - SoC 08''']]&lt;br&gt;Eduardo Neves <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Access Control Rules Tester Project|'''OWASP Access Control Rules Tester - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/3/32/OWASP_EU_Summit_2008_AcCoRuTe.pptx PowerPoint Presentation]&lt;br&gt;Andrew Petukhov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Education Project|'''OWASP Education Project - SoC 08''']]&lt;br&gt;Sebastien Deleersnyder, Martin Knobloch <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Teachable Static Analysis Workbench Project|'''OWASP Teachable Static Analysis Workbench - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/6/69/Teachable_static_analysis_workbench.pptx PowerPoint Presentation]&lt;br&gt;Dmitry Kozlov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:OWASP Internationalization|'''OWASP Internationalization Project - Soc 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP AppSensor Project|'''OWASP AppSensor - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/7/77/Presentation_AppSensor.ppt PowerPoint Presentation]&lt;br&gt; Michael Coates<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''PASSWD Project: Metrics and Vulnerabilities'''&lt;br&gt;[https://www.owasp.org/images/f/f6/PASSWD.ppt PowerPoint Presentation]&lt;br&gt;Lucilla Mancini <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Backend Security Project|'''OWASP Backend Security Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/2/20/OWASP_EU_Summit_2008_Presentation_Model.ppt PowerPoint Prsentation]&lt;br&gt;Carlo Pelliccioni<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Open Review Project|'''OWASP Open Review Project''']]&lt;br&gt;Dan Cornell <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Application Security Tool Benchmarking Environment and Site Generator Refresh Project|'''OWASP Application Security Tool Benchmarking Environment and Site Generator Refresh Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/c/c4/Site_generator.pptx PowerPoint Presentation]&lt;br&gt;Dmitry Kozlov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; colspan=&quot;4&quot; | [[OWASP EU Summit 2008#NEW_GLOBAL_COMMITTEE_STRUCTURE|'''OWASP Global Committee Elections''']]<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 12:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[OWASP Working Session Education Project|'''Education Project''']]&lt;br&gt;[https://www.owasp.org/images/3/33/OWASP_Education_Working_Session_Notes_-_Ideas.ppt WS Conclusions]&lt;br&gt;Sebastien Deleersnyder <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Testing Guide|'''Testing Guide''']]&lt;br&gt;Matteo Meucci <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Web Application Framework Security|'''Web Application Framework Security''']]&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Lunch (During Working Sessions)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Flash Player Security'''&lt;br&gt;Peleus Uhley <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''OWASP Top 10'''&lt;br&gt;[http://uk.youtube.com/watch?v=GsRbpshqqII Video]&lt;br&gt;Sebastien Deleersnyder and Martin Knobloch <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Uncovering WebScarab's Secret Treasures'''&lt;br&gt;[https://www.owasp.org/images/8/88/OWASP_EU_Summit_2008_WebScarab_treasures.ppt PowerPoint Presentation]&lt;br&gt;Rogan Dawes <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Hacking the Orizon'''&lt;br&gt;[http://www.owasp.org/index.php/Image:Hacking_the_Owasp_Orizon.ppt PowerPoint Presentation] Training Sessions &lt;br&gt;Paolo Perego<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Code Review Guide|'''Code Review Guide''']]&lt;br&gt;Eoin Keary <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | EU Funding for OWASP Projects&lt;br&gt;Carlos Serrao <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Certification|'''OWASP Certification''']]&lt;br&gt;Tom Brennan <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | Software Assurance Maturity Model&lt;br&gt;Pravir Chandra<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 19:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Website|'''OWASP Website''']]&lt;br&gt;[https://www.owasp.org/images/8/8b/EUSummit08_OWASP_Web_Site_Working_Session_Suggestions.doc WS Conclusions]&lt;br&gt;[https://www.owasp.org/images/2/2e/Website.ppt PPT Presentation]&lt;br&gt;Fabio Cerullo <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | '''Metrics &amp;amp; Vulnerabilities'''&lt;br&gt;[https://www.owasp.org/images/0/0d/PASSWD_description.doc Word Presentation]&lt;br&gt;Lucilla Mancini <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | OWASP Orizon&lt;br&gt;Paolo Perego<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;6&quot; | Agenda for Thursday, November 6th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;5&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''Technology''' <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Classic ASP Security Project|'''OWASP Classic ASP Security Project - SoC 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP Source Code Review OWASP Projects Project|'''OWASP Source Code Review - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/c/c9/OWASPEU_SourceReview.ppt PowerPoint Presentation]&lt;br&gt;James Walden<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Ruby on Rails Security Guide V2|'''OWASP Ruby on Rails Security Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/3/32/Rails_security_2_presentation.pdf PDF Presentation]&lt;br&gt;Heiko Webers <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP OpenPGP Extensions for HTTP - Enigform and mod openpgp|'''OWASP OpenPGP Extensions for HTTP - Enigform and mod openpgp - SoC 08''']]&lt;br&gt;Arturo Alberto Busleiman<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Webslayer Project|'''OWASP Webslayer Project''']]&lt;br&gt;Christian Martorella <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP Securing WebGoat using ModSecurity Project|'''OWASP Securing WebGoat using ModSecurity Project - SoC 08''']]&lt;br&gt;Stephen Evans and Christian Folini<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Skavenger Project|'''OWASP Skavenger Project - SoC 08''']]&lt;br&gt;Matthias Rohr <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP AntiSamy Project .NET|'''OWASP AntiSamy Project - SoC 08''']]&lt;br&gt;Marcin Wielgoszewski<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;5&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session Top 10 2009|'''OWASP Top 10 - 2009''']]&lt;br&gt;Dave Wichers <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Intra Governmental Affairs|'''OWASP Intra Governmental Affairs''']]&lt;br&gt;David Campbell <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | SAMM v2 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Website|'''OWASP Website''']]&lt;br&gt;Fabio Cerullo <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | Handling Web MalWare<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Lunch (During Working Sessions)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;5&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Ajax Security <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;2&quot; | Auditing Flash Applications&lt;br&gt;Peleus Uhley <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | WebApp Assessment&lt;br&gt;Vicente Aguilera Diaz <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Mod Security&lt;br&gt;Lucas C. Ferreira<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;5&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;5&quot; | [[:Working Session OWASP Strategic Planning|'''OWASP Strategic Planning and Business Models compatible with OWASP values''']]&lt;br&gt;Jeff Williams, Dinis Cruz, Dave Wichers, Sebastien Deleersnyder, Tom Brennan &amp;amp; Kate Hartmann and Paulo Combra<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 18:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[:OWASP Working Session - Two-way Internationalization of OWASP Content|'''Two-way Internationalization of OWASP Content''']]&lt;br&gt;Juan Carlos Calderon &amp;amp; Sebastien Deleersnyder <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[:Best Practices for OWASP Chapter Leaders|'''OWASP Best Practices for Chapter Leaders''']]&lt;br&gt;[https://www.owasp.org/images/0/01/BestPractices_2008.pptx WS Conclusions]&lt;br&gt;Georg Hess <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[:OWASP Working Session - OWASP Live CD&amp;DVD|'''OWASP Live CD &amp;amp; DVD''']]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 20:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Gala Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 22:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | OWASP Band<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;2&quot; | Agenda for Friday, November 7th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | OWASP AppSec Agenda 2009: Working Session Outcomes<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Documentation Projects/Guides Integration and Unified 4.0 Version&lt;br&gt;Eduardo Neves<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Browser Security&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | ESAPI&lt;br&gt;Jeff Williams<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Tools Projects&lt;br&gt;Matt Tesauro<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Code Review Guide&lt;br&gt;Eoin Keary<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Certification&lt;br&gt;Tom Brennan<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Software Assurance Maturity Model&lt;br&gt;Pravir Chandra<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Top 10 2009&lt;br&gt;Dave Wichers<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Intra Governmental Affairs&lt;br&gt;David Campbell<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Best Practices for Chapter Leaders&lt;br&gt;Georg Hess<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | Coffee Break and Vote (put your dots on the wall)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Live CD &amp;amp; DVD&lt;br&gt;Matt Tesauro<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | ADSR&lt;br&gt;Leonardo Cavallari<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Education Project&lt;br&gt;Sebastien Deleersnyder<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Web Application Framework Security&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Testing Guide&lt;br&gt;Matteo Meucci<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Censorship&lt;br&gt;Tom Brennan<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | EU Funding for OWASP Projects&lt;br&gt;Carlos Serrao<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Website&lt;br&gt;Fabio Cerullo<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Orizon&lt;br&gt;Paolo Perego<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Handling Web MalWare<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | 2-Way Internationalization&lt;br&gt;Juan Carlos Calderon<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Portuguese Public &amp;amp; Private Organizations&lt;br&gt;Carlos Serrao<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Winter of Code 2009&lt;br&gt;Dinis Cruz and Sebastien Deleersnyder<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | [http://www.owasp.org/index.php/Owasp_Board_Meetings_11-07-08 Board Meeting]<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | Announcement of Summit Procedings<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> &lt;br&gt; &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=92956 Summit 2011 2010-11-15T01:39:39Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> == Browser Day ==<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon ([http://kangax.github.com/es5-compat-table/ currently no support])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> A Day in Lisbon, Portugal: <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> Dinis Cruz (Board)&lt;br&gt; Tom Brennan (Board)&lt;br&gt; Eoin Keary (Board)&lt;br&gt; Jeff Williams (Board)&lt;br&gt; Seba Deleersnyder (Board)&lt;br&gt; Dave Wichers (Board)&lt;br&gt; Matt Tesauro (Board)&lt;br&gt; Paulo Coimbra (OWASP)&lt;br&gt; Alison Shrader (OWASP)&lt;br&gt; Kate Hartmann (OWASP)&lt;br&gt; Larry Casey (OWASP)&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011-DC-update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule (Draft) ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 - 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Securing WebGoat with ModSecurity&lt;br&gt;Stephen Craig Evans <br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | WebSec Apps for Managers and Executives&lt;br&gt;[http://uk.youtube.com/watch?v=r04EOuukvMQ Video]&lt;br&gt;Mano Paul <br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | OWASP Testing Guide&lt;br&gt;Matteo Meucci <br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | OWASP Testing Guide&lt;br&gt;Matteo Meucci<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 - 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Securing WebGoat with ModSecurity&lt;br&gt;Stephen Craig Evans <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | WebSec Apps for Managers and Executives&lt;br&gt;[http://uk.youtube.com/watch?v=r04EOuukvMQ Video]&lt;br&gt;Mano Paul <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | OWASP Testing Guide&lt;br&gt;Matteo Meucci<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 - 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Securing WebGoat with ModSecurity&lt;br&gt;Stephen Craig Evans <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | WebSec Apps for Managers and Executives&lt;br&gt;[http://uk.youtube.com/watch?v=r04EOuukvMQ Video]&lt;br&gt;Mano Paul <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | OWASP Testing Guide&lt;br&gt;Matteo Meucci<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 19:00 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;4&quot; | Summit Briefing&lt;br&gt;Dinis Cruz and Summit Organization Team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 20:00 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Dinner<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Tuesday, November 4th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 08:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Registration<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;4&quot; | Summit Keynote&lt;br&gt;Dinis Cruz and Summit Organization Team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''Documents''' <br /> | align=&quot;center&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Testing Project|'''OWASP Testing Guide - SoC 08''']]&lt;br&gt;[http://www.owasp.org/images/2/2c/OWASP_EU_Summit_2008_OWASP_Testing_Guide_v3.ppt PowerPoint Presentation]&lt;br&gt;Matteo Meucci <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP JSP Testing Tool Project|'''OWASP JSP Testing Tool - SoC 08''']]&lt;br&gt;Jason Li<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Code Review Project|'''OWASP Code Review Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/5/59/Code_Review_Eoin.pptx PowerPoint Presentation]&lt;br&gt;Eoin Keary <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Orizon Project|'''OWASP Orizon Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/9/9b/OWASP_EU_Summit_2008_The_Owasp_Orizon_Project.ppt PowerPoint Presentation]&lt;br&gt;Paolo Perego<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP ASDR Project|'''OWASP Application Security Desk Reference - SoC 08''']]&lt;br&gt;Leonardo Cavallari Militelli <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Live CD 2008 Project|'''OWASP Live CD - SoC 08''']]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:OWASP Spanish|'''OWASP Spanish Project - SoC 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP WebScarab Project|'''OWASP WebScarab Project''']]&lt;br&gt;[https://www.owasp.org/images/8/88/OWASP_EU_Summit_2008_WebScarab_treasures.ppt PowerPoint Presentation]&lt;br&gt;Rogan Dawes<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | .NET ESAPI&lt;br&gt;Alex Smolen <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;4&quot; | Working Sessions Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Working Sessions<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% white;&quot; colspan=&quot;5&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 - 13:00 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Documentation Projects|'''Documentation Projects/Guides Integration and Unified 4.0 Version''']]&lt;br&gt;[https://www.owasp.org/images/9/92/Final_OWASP_Guidelines_Ideas_List_.docx WS Conclusions]&lt;br&gt;Eduardo Neves <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Browser Security|'''OWASP Intrinsic Security Working Group - Browser Security''']]&lt;br&gt;Arshan Dabirsiaghi <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Tools Projects|'''Tools Projects''']]&lt;br&gt;[https://www.owasp.org/images/5/51/EUSummit08_OWASP_Tools_Working_Session_Suggestions.doc WS Conclusions]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''The Art and Science of Threat Modeling Web Applications'''&lt;br&gt;[http://uk.youtube.com/watch?v=r04EOuukvMQ Video]&lt;br&gt;Mano Paul <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Web Server Hardening SELinux'''&lt;br&gt;[https://www.owasp.org/images/d/db/SELinux-course-OWASP.pdf PDF Presentation]&lt;br&gt;Pavol Luptak <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Offensive WebApp Hacking'''&lt;br&gt;[http://www.youtube.com/watch?v=cl6BHhi2Dys Video - LDAP, XML and SQL injection]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo02.swf Video - LDAP injection demo]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo04.swf XML injection demo]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo03.swf Video - SQL injection demo ]&lt;br&gt;Marco Slaviero<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Phishing attack'''&lt;br&gt;[http://www.youtube.com/watch?v=uf9hw-qvx-I Video]&lt;br&gt;Matt Teasuro &amp;amp; Brad Causey <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;2&quot; | '''Clickjacking'''&lt;br&gt;[http://www.youtube.com/watch?v=H9srYh0HMP4 Video]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo01.swf Demonstration]&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:30 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;4&quot; | [[:OWASP Working Session Enterprise Security API Project|'''OWASP Enterprise Security API Project (ESAPI)''']]&lt;br&gt;[http://uk.youtube.com/watch?v=-D_bymZ-8vI Video]&lt;br&gt;[https://www.owasp.org/images/7/70/ESAPI_Ideas_List.docx WS Conclusions]&lt;br&gt;Jeff Williams<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 18:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[:OWASP Working Session - OWASP ASDR|'''OWASP Application Security Desk Reference - ASDR''']]&lt;br&gt;Leonardo Cavallari <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - .NET Project|'''.NET Project''']]&lt;br&gt;Dinis Cruz<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Wednesday, November 5th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;4&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''Standards and Education''' <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Positive Security Project|'''OWASP Positive Security Project - SoC 08''']]&lt;br&gt;Eduardo Neves <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Access Control Rules Tester Project|'''OWASP Access Control Rules Tester - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/3/32/OWASP_EU_Summit_2008_AcCoRuTe.pptx PowerPoint Presentation]&lt;br&gt;Andrew Petukhov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Education Project|'''OWASP Education Project - SoC 08''']]&lt;br&gt;Sebastien Deleersnyder, Martin Knobloch <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Teachable Static Analysis Workbench Project|'''OWASP Teachable Static Analysis Workbench - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/6/69/Teachable_static_analysis_workbench.pptx PowerPoint Presentation]&lt;br&gt;Dmitry Kozlov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:OWASP Internationalization|'''OWASP Internationalization Project - Soc 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP AppSensor Project|'''OWASP AppSensor - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/7/77/Presentation_AppSensor.ppt PowerPoint Presentation]&lt;br&gt; Michael Coates<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''PASSWD Project: Metrics and Vulnerabilities'''&lt;br&gt;[https://www.owasp.org/images/f/f6/PASSWD.ppt PowerPoint Presentation]&lt;br&gt;Lucilla Mancini <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Backend Security Project|'''OWASP Backend Security Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/2/20/OWASP_EU_Summit_2008_Presentation_Model.ppt PowerPoint Prsentation]&lt;br&gt;Carlo Pelliccioni<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Open Review Project|'''OWASP Open Review Project''']]&lt;br&gt;Dan Cornell <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Application Security Tool Benchmarking Environment and Site Generator Refresh Project|'''OWASP Application Security Tool Benchmarking Environment and Site Generator Refresh Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/c/c4/Site_generator.pptx PowerPoint Presentation]&lt;br&gt;Dmitry Kozlov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; colspan=&quot;4&quot; | [[OWASP EU Summit 2008#NEW_GLOBAL_COMMITTEE_STRUCTURE|'''OWASP Global Committee Elections''']]<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 12:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[OWASP Working Session Education Project|'''Education Project''']]&lt;br&gt;[https://www.owasp.org/images/3/33/OWASP_Education_Working_Session_Notes_-_Ideas.ppt WS Conclusions]&lt;br&gt;Sebastien Deleersnyder <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Testing Guide|'''Testing Guide''']]&lt;br&gt;Matteo Meucci <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Web Application Framework Security|'''Web Application Framework Security''']]&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Lunch (During Working Sessions)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Flash Player Security'''&lt;br&gt;Peleus Uhley <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''OWASP Top 10'''&lt;br&gt;[http://uk.youtube.com/watch?v=GsRbpshqqII Video]&lt;br&gt;Sebastien Deleersnyder and Martin Knobloch <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Uncovering WebScarab's Secret Treasures'''&lt;br&gt;[https://www.owasp.org/images/8/88/OWASP_EU_Summit_2008_WebScarab_treasures.ppt PowerPoint Presentation]&lt;br&gt;Rogan Dawes <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Hacking the Orizon'''&lt;br&gt;[http://www.owasp.org/index.php/Image:Hacking_the_Owasp_Orizon.ppt PowerPoint Presentation] Training Sessions &lt;br&gt;Paolo Perego<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Code Review Guide|'''Code Review Guide''']]&lt;br&gt;Eoin Keary <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | EU Funding for OWASP Projects&lt;br&gt;Carlos Serrao <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Certification|'''OWASP Certification''']]&lt;br&gt;Tom Brennan <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | Software Assurance Maturity Model&lt;br&gt;Pravir Chandra<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 19:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Website|'''OWASP Website''']]&lt;br&gt;[https://www.owasp.org/images/8/8b/EUSummit08_OWASP_Web_Site_Working_Session_Suggestions.doc WS Conclusions]&lt;br&gt;[https://www.owasp.org/images/2/2e/Website.ppt PPT Presentation]&lt;br&gt;Fabio Cerullo <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | '''Metrics &amp;amp; Vulnerabilities'''&lt;br&gt;[https://www.owasp.org/images/0/0d/PASSWD_description.doc Word Presentation]&lt;br&gt;Lucilla Mancini <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | OWASP Orizon&lt;br&gt;Paolo Perego<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;6&quot; | Agenda for Thursday, November 6th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;5&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''Technology''' <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Classic ASP Security Project|'''OWASP Classic ASP Security Project - SoC 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP Source Code Review OWASP Projects Project|'''OWASP Source Code Review - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/c/c9/OWASPEU_SourceReview.ppt PowerPoint Presentation]&lt;br&gt;James Walden<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Ruby on Rails Security Guide V2|'''OWASP Ruby on Rails Security Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/3/32/Rails_security_2_presentation.pdf PDF Presentation]&lt;br&gt;Heiko Webers <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP OpenPGP Extensions for HTTP - Enigform and mod openpgp|'''OWASP OpenPGP Extensions for HTTP - Enigform and mod openpgp - SoC 08''']]&lt;br&gt;Arturo Alberto Busleiman<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Webslayer Project|'''OWASP Webslayer Project''']]&lt;br&gt;Christian Martorella <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP Securing WebGoat using ModSecurity Project|'''OWASP Securing WebGoat using ModSecurity Project - SoC 08''']]&lt;br&gt;Stephen Evans and Christian Folini<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Skavenger Project|'''OWASP Skavenger Project - SoC 08''']]&lt;br&gt;Matthias Rohr <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP AntiSamy Project .NET|'''OWASP AntiSamy Project - SoC 08''']]&lt;br&gt;Marcin Wielgoszewski<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;5&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session Top 10 2009|'''OWASP Top 10 - 2009''']]&lt;br&gt;Dave Wichers <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Intra Governmental Affairs|'''OWASP Intra Governmental Affairs''']]&lt;br&gt;David Campbell <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | SAMM v2 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Website|'''OWASP Website''']]&lt;br&gt;Fabio Cerullo <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | Handling Web MalWare<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Lunch (During Working Sessions)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;5&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Ajax Security <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;2&quot; | Auditing Flash Applications&lt;br&gt;Peleus Uhley <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | WebApp Assessment&lt;br&gt;Vicente Aguilera Diaz <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Mod Security&lt;br&gt;Lucas C. Ferreira<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;5&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;5&quot; | [[:Working Session OWASP Strategic Planning|'''OWASP Strategic Planning and Business Models compatible with OWASP values''']]&lt;br&gt;Jeff Williams, Dinis Cruz, Dave Wichers, Sebastien Deleersnyder, Tom Brennan &amp;amp; Kate Hartmann and Paulo Combra<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 18:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[:OWASP Working Session - Two-way Internationalization of OWASP Content|'''Two-way Internationalization of OWASP Content''']]&lt;br&gt;Juan Carlos Calderon &amp;amp; Sebastien Deleersnyder <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[:Best Practices for OWASP Chapter Leaders|'''OWASP Best Practices for Chapter Leaders''']]&lt;br&gt;[https://www.owasp.org/images/0/01/BestPractices_2008.pptx WS Conclusions]&lt;br&gt;Georg Hess <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[:OWASP Working Session - OWASP Live CD&amp;DVD|'''OWASP Live CD &amp;amp; DVD''']]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 20:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Gala Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 22:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | OWASP Band<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;2&quot; | Agenda for Friday, November 7th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | OWASP AppSec Agenda 2009: Working Session Outcomes<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Documentation Projects/Guides Integration and Unified 4.0 Version&lt;br&gt;Eduardo Neves<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Browser Security&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | ESAPI&lt;br&gt;Jeff Williams<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Tools Projects&lt;br&gt;Matt Tesauro<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Code Review Guide&lt;br&gt;Eoin Keary<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Certification&lt;br&gt;Tom Brennan<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Software Assurance Maturity Model&lt;br&gt;Pravir Chandra<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Top 10 2009&lt;br&gt;Dave Wichers<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Intra Governmental Affairs&lt;br&gt;David Campbell<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Best Practices for Chapter Leaders&lt;br&gt;Georg Hess<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | Coffee Break and Vote (put your dots on the wall)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Live CD &amp;amp; DVD&lt;br&gt;Matt Tesauro<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | ADSR&lt;br&gt;Leonardo Cavallari<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Education Project&lt;br&gt;Sebastien Deleersnyder<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Web Application Framework Security&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Testing Guide&lt;br&gt;Matteo Meucci<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Censorship&lt;br&gt;Tom Brennan<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | EU Funding for OWASP Projects&lt;br&gt;Carlos Serrao<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Website&lt;br&gt;Fabio Cerullo<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Orizon&lt;br&gt;Paolo Perego<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Handling Web MalWare<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | 2-Way Internationalization&lt;br&gt;Juan Carlos Calderon<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Portuguese Public &amp;amp; Private Organizations&lt;br&gt;Carlos Serrao<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Winter of Code 2009&lt;br&gt;Dinis Cruz and Sebastien Deleersnyder<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | [http://www.owasp.org/index.php/Owasp_Board_Meetings_11-07-08 Board Meeting]<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | Announcement of Summit Procedings<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> &lt;br&gt; &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=92955 Summit 2011 2010-11-15T01:22:45Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> == Browser Day ==<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon ([http://kangax.github.com/es5-compat-table/ currently no support])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> A Day in Lisbon, Portugal: <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> Dinis Cruz (Board)&lt;br&gt; Tom Brennan (Board)&lt;br&gt; Eoin Keary (Board)&lt;br&gt; Jeff Williams (Board)&lt;br&gt; Seba Deleersnyder (Board)&lt;br&gt; Dave Wichers (Board)&lt;br&gt; Matt Tesauro (Board)&lt;br&gt; Paulo Coimbra (OWASP)&lt;br&gt; Alison Shrader (OWASP)&lt;br&gt; Kate Hartmann (OWASP)&lt;br&gt; Larry Casey (OWASP)&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011-DC-update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule (Draft) ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 - 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Securing WebGoat with ModSecurity&lt;br&gt;Stephen Craig Evans <br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | WebSec Apps for Managers and Executives&lt;br&gt;[http://uk.youtube.com/watch?v=r04EOuukvMQ Video]&lt;br&gt;Mano Paul <br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | OWASP Testing Guide&lt;br&gt;Matteo Meucci<br /> | align=&quot;center&quot; style=&quot;width: 22.5%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | OWASP Testing Guide&lt;br&gt;Matteo Meucci<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 - 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Securing WebGoat with ModSecurity&lt;br&gt;Stephen Craig Evans <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | WebSec Apps for Managers and Executives&lt;br&gt;[http://uk.youtube.com/watch?v=r04EOuukvMQ Video]&lt;br&gt;Mano Paul <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | OWASP Testing Guide&lt;br&gt;Matteo Meucci<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 - 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Securing WebGoat with ModSecurity&lt;br&gt;Stephen Craig Evans <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | WebSec Apps for Managers and Executives&lt;br&gt;[http://uk.youtube.com/watch?v=r04EOuukvMQ Video]&lt;br&gt;Mano Paul <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | OWASP Testing Guide&lt;br&gt;Matteo Meucci<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 19:00 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Summit Briefing&lt;br&gt;Dinis Cruz and Summit Organization Team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 20:00 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Dinner<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Tuesday, November 4th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 08:00 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Registration<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:00 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Summit Keynote&lt;br&gt;Dinis Cruz and Summit Organization Team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | '''Documents''' <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:30 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Testing Project|'''OWASP Testing Guide - SoC 08''']]&lt;br&gt;[http://www.owasp.org/images/2/2c/OWASP_EU_Summit_2008_OWASP_Testing_Guide_v3.ppt PowerPoint Presentation]&lt;br&gt;Matteo Meucci <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP JSP Testing Tool Project|'''OWASP JSP Testing Tool - SoC 08''']]&lt;br&gt;Jason Li<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:45 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Code Review Project|'''OWASP Code Review Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/5/59/Code_Review_Eoin.pptx PowerPoint Presentation]&lt;br&gt;Eoin Keary <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Orizon Project|'''OWASP Orizon Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/9/9b/OWASP_EU_Summit_2008_The_Owasp_Orizon_Project.ppt PowerPoint Presentation]&lt;br&gt;Paolo Perego<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP ASDR Project|'''OWASP Application Security Desk Reference - SoC 08''']]&lt;br&gt;Leonardo Cavallari Militelli <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Live CD 2008 Project|'''OWASP Live CD - SoC 08''']]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:OWASP Spanish|'''OWASP Spanish Project - SoC 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP WebScarab Project|'''OWASP WebScarab Project''']]&lt;br&gt;[https://www.owasp.org/images/8/88/OWASP_EU_Summit_2008_WebScarab_treasures.ppt PowerPoint Presentation]&lt;br&gt;Rogan Dawes<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:45 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | .NET ESAPI&lt;br&gt;Alex Smolen <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Working Sessions Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Working Sessions<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 - 13:00 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Documentation Projects|'''Documentation Projects/Guides Integration and Unified 4.0 Version''']]&lt;br&gt;[https://www.owasp.org/images/9/92/Final_OWASP_Guidelines_Ideas_List_.docx WS Conclusions]&lt;br&gt;Eduardo Neves <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Browser Security|'''OWASP Intrinsic Security Working Group - Browser Security''']]&lt;br&gt;Arshan Dabirsiaghi <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Tools Projects|'''Tools Projects''']]&lt;br&gt;[https://www.owasp.org/images/5/51/EUSummit08_OWASP_Tools_Working_Session_Suggestions.doc WS Conclusions]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''The Art and Science of Threat Modeling Web Applications'''&lt;br&gt;[http://uk.youtube.com/watch?v=r04EOuukvMQ Video]&lt;br&gt;Mano Paul <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Web Server Hardening SELinux'''&lt;br&gt;[https://www.owasp.org/images/d/db/SELinux-course-OWASP.pdf PDF Presentation]&lt;br&gt;Pavol Luptak <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Offensive WebApp Hacking'''&lt;br&gt;[http://www.youtube.com/watch?v=cl6BHhi2Dys Video - LDAP, XML and SQL injection]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo02.swf Video - LDAP injection demo]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo04.swf XML injection demo]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo03.swf Video - SQL injection demo ]&lt;br&gt;Marco Slaviero<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Phishing attack'''&lt;br&gt;[http://www.youtube.com/watch?v=uf9hw-qvx-I Video]&lt;br&gt;Matt Teasuro &amp;amp; Brad Causey <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Clickjacking'''&lt;br&gt;[http://www.youtube.com/watch?v=H9srYh0HMP4 Video]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo01.swf Demonstration]&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:00 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:30 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session Enterprise Security API Project|'''OWASP Enterprise Security API Project (ESAPI)''']]&lt;br&gt;[http://uk.youtube.com/watch?v=-D_bymZ-8vI Video]&lt;br&gt;[https://www.owasp.org/images/7/70/ESAPI_Ideas_List.docx WS Conclusions]&lt;br&gt;Jeff Williams<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 18:30 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP ASDR|'''OWASP Application Security Desk Reference - ASDR''']]&lt;br&gt;Leonardo Cavallari <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - .NET Project|'''.NET Project''']]&lt;br&gt;Dinis Cruz<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Wednesday, November 5th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:15 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | '''Standards and Education''' <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Positive Security Project|'''OWASP Positive Security Project - SoC 08''']]&lt;br&gt;Eduardo Neves <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Access Control Rules Tester Project|'''OWASP Access Control Rules Tester - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/3/32/OWASP_EU_Summit_2008_AcCoRuTe.pptx PowerPoint Presentation]&lt;br&gt;Andrew Petukhov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Education Project|'''OWASP Education Project - SoC 08''']]&lt;br&gt;Sebastien Deleersnyder, Martin Knobloch <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Teachable Static Analysis Workbench Project|'''OWASP Teachable Static Analysis Workbench - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/6/69/Teachable_static_analysis_workbench.pptx PowerPoint Presentation]&lt;br&gt;Dmitry Kozlov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:OWASP Internationalization|'''OWASP Internationalization Project - Soc 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP AppSensor Project|'''OWASP AppSensor - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/7/77/Presentation_AppSensor.ppt PowerPoint Presentation]&lt;br&gt; Michael Coates<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:45 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | '''PASSWD Project: Metrics and Vulnerabilities'''&lt;br&gt;[https://www.owasp.org/images/f/f6/PASSWD.ppt PowerPoint Presentation]&lt;br&gt;Lucilla Mancini <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Backend Security Project|'''OWASP Backend Security Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/2/20/OWASP_EU_Summit_2008_Presentation_Model.ppt PowerPoint Prsentation]&lt;br&gt;Carlo Pelliccioni<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Open Review Project|'''OWASP Open Review Project''']]&lt;br&gt;Dan Cornell <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Application Security Tool Benchmarking Environment and Site Generator Refresh Project|'''OWASP Application Security Tool Benchmarking Environment and Site Generator Refresh Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/c/c4/Site_generator.pptx PowerPoint Presentation]&lt;br&gt;Dmitry Kozlov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | [[OWASP EU Summit 2008#NEW_GLOBAL_COMMITTEE_STRUCTURE|'''OWASP Global Committee Elections''']]<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 12:45 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[OWASP Working Session Education Project|'''Education Project''']]&lt;br&gt;[https://www.owasp.org/images/3/33/OWASP_Education_Working_Session_Notes_-_Ideas.ppt WS Conclusions]&lt;br&gt;Sebastien Deleersnyder <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Testing Guide|'''Testing Guide''']]&lt;br&gt;Matteo Meucci <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Web Application Framework Security|'''Web Application Framework Security''']]&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:45 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Lunch (During Working Sessions)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Flash Player Security'''&lt;br&gt;Peleus Uhley <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''OWASP Top 10'''&lt;br&gt;[http://uk.youtube.com/watch?v=GsRbpshqqII Video]&lt;br&gt;Sebastien Deleersnyder and Martin Knobloch <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Uncovering WebScarab's Secret Treasures'''&lt;br&gt;[https://www.owasp.org/images/8/88/OWASP_EU_Summit_2008_WebScarab_treasures.ppt PowerPoint Presentation]&lt;br&gt;Rogan Dawes <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Hacking the Orizon'''&lt;br&gt;[http://www.owasp.org/index.php/Image:Hacking_the_Owasp_Orizon.ppt PowerPoint Presentation] Training Sessions &lt;br&gt;Paolo Perego<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:00 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Code Review Guide|'''Code Review Guide''']]&lt;br&gt;Eoin Keary <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | EU Funding for OWASP Projects&lt;br&gt;Carlos Serrao <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Certification|'''OWASP Certification''']]&lt;br&gt;Tom Brennan <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | Software Assurance Maturity Model&lt;br&gt;Pravir Chandra<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 19:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Website|'''OWASP Website''']]&lt;br&gt;[https://www.owasp.org/images/8/8b/EUSummit08_OWASP_Web_Site_Working_Session_Suggestions.doc WS Conclusions]&lt;br&gt;[https://www.owasp.org/images/2/2e/Website.ppt PPT Presentation]&lt;br&gt;Fabio Cerullo <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | '''Metrics &amp;amp; Vulnerabilities'''&lt;br&gt;[https://www.owasp.org/images/0/0d/PASSWD_description.doc Word Presentation]&lt;br&gt;Lucilla Mancini <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | OWASP Orizon&lt;br&gt;Paolo Perego<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;6&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Thursday, November 6th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:15 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | '''Technology''' <br /> | align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Classic ASP Security Project|'''OWASP Classic ASP Security Project - SoC 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Source Code Review OWASP Projects Project|'''OWASP Source Code Review - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/c/c9/OWASPEU_SourceReview.ppt PowerPoint Presentation]&lt;br&gt;James Walden<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Ruby on Rails Security Guide V2|'''OWASP Ruby on Rails Security Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/3/32/Rails_security_2_presentation.pdf PDF Presentation]&lt;br&gt;Heiko Webers <br /> | align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP OpenPGP Extensions for HTTP - Enigform and mod openpgp|'''OWASP OpenPGP Extensions for HTTP - Enigform and mod openpgp - SoC 08''']]&lt;br&gt;Arturo Alberto Busleiman<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Webslayer Project|'''OWASP Webslayer Project''']]&lt;br&gt;Christian Martorella <br /> | align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Securing WebGoat using ModSecurity Project|'''OWASP Securing WebGoat using ModSecurity Project - SoC 08''']]&lt;br&gt;Stephen Evans and Christian Folini<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Skavenger Project|'''OWASP Skavenger Project - SoC 08''']]&lt;br&gt;Matthias Rohr <br /> | align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP AntiSamy Project .NET|'''OWASP AntiSamy Project - SoC 08''']]&lt;br&gt;Marcin Wielgoszewski<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session Top 10 2009|'''OWASP Top 10 - 2009''']]&lt;br&gt;Dave Wichers <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Intra Governmental Affairs|'''OWASP Intra Governmental Affairs''']]&lt;br&gt;David Campbell <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | SAMM v2 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Website|'''OWASP Website''']]&lt;br&gt;Fabio Cerullo <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | Handling Web MalWare<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Lunch (During Working Sessions)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Ajax Security <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Auditing Flash Applications&lt;br&gt;Peleus Uhley <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | WebApp Assessment&lt;br&gt;Vicente Aguilera Diaz <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Mod Security&lt;br&gt;Lucas C. Ferreira<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:30 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:Working Session OWASP Strategic Planning|'''OWASP Strategic Planning and Business Models compatible with OWASP values''']]&lt;br&gt;Jeff Williams, Dinis Cruz, Dave Wichers, Sebastien Deleersnyder, Tom Brennan &amp;amp; Kate Hartmann and Paulo Combra<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 18:30 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Two-way Internationalization of OWASP Content|'''Two-way Internationalization of OWASP Content''']]&lt;br&gt;Juan Carlos Calderon &amp;amp; Sebastien Deleersnyder <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:Best Practices for OWASP Chapter Leaders|'''OWASP Best Practices for Chapter Leaders''']]&lt;br&gt;[https://www.owasp.org/images/0/01/BestPractices_2008.pptx WS Conclusions]&lt;br&gt;Georg Hess <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Live CD&amp;DVD|'''OWASP Live CD &amp;amp; DVD''']]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 20:00 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Gala Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 22:00 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Band<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Friday, November 7th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | OWASP AppSec Agenda 2009: Working Session Outcomes<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Documentation Projects/Guides Integration and Unified 4.0 Version&lt;br&gt;Eduardo Neves<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Browser Security&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | ESAPI&lt;br&gt;Jeff Williams<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Tools Projects&lt;br&gt;Matt Tesauro<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Code Review Guide&lt;br&gt;Eoin Keary<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Certification&lt;br&gt;Tom Brennan<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Software Assurance Maturity Model&lt;br&gt;Pravir Chandra<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Top 10 2009&lt;br&gt;Dave Wichers<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Intra Governmental Affairs&lt;br&gt;David Campbell<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Best Practices for Chapter Leaders&lt;br&gt;Georg Hess<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | Coffee Break and Vote (put your dots on the wall)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Live CD &amp;amp; DVD&lt;br&gt;Matt Tesauro<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | ADSR&lt;br&gt;Leonardo Cavallari<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Education Project&lt;br&gt;Sebastien Deleersnyder<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Web Application Framework Security&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Testing Guide&lt;br&gt;Matteo Meucci<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Censorship&lt;br&gt;Tom Brennan<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | EU Funding for OWASP Projects&lt;br&gt;Carlos Serrao<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Website&lt;br&gt;Fabio Cerullo<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Orizon&lt;br&gt;Paolo Perego<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Handling Web MalWare<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | 2-Way Internationalization&lt;br&gt;Juan Carlos Calderon<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Portuguese Public &amp;amp; Private Organizations&lt;br&gt;Carlos Serrao<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt; <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Winter of Code 2009&lt;br&gt;Dinis Cruz and Sebastien Deleersnyder<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | [http://www.owasp.org/index.php/Owasp_Board_Meetings_11-07-08 Board Meeting]<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | Announcement of Summit Procedings<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> &lt;br&gt; &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=92954 Summit 2011 2010-11-15T01:16:19Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> == Browser Day ==<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon ([http://kangax.github.com/es5-compat-table/ currently no support])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> A Day in Lisbon, Portugal: <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> Dinis Cruz (Board)&lt;br&gt; Tom Brennan (Board)&lt;br&gt; Eoin Keary (Board)&lt;br&gt; Jeff Williams (Board)&lt;br&gt; Seba Deleersnyder (Board)&lt;br&gt; Dave Wichers (Board)&lt;br&gt; Matt Tesauro (Board)&lt;br&gt; Paulo Coimbra (OWASP)&lt;br&gt; Alison Shrader (OWASP)&lt;br&gt; Kate Hartmann (OWASP)&lt;br&gt; Larry Casey (OWASP)&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011-DC-update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule (Draft) ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Tuesday, February the 8th, 2011&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 0900 - 1000 &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Registration, Meet &amp;amp; Greet&lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 - 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Securing WebGoat with ModSecurity&lt;br&gt;Stephen Craig Evans <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | WebSec Apps for Managers and Executives&lt;br&gt;[http://uk.youtube.com/watch?v=r04EOuukvMQ Video]&lt;br&gt;Mano Paul <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | OWASP Testing Guide&lt;br&gt;Matteo Meucci<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 19:00 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;4&quot; | Summit Briefing&lt;br&gt;Dinis Cruz and Summit Organization Team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 20:00 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Dinner<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Tuesday, November 4th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 08:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Registration<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;4&quot; | Summit Keynote&lt;br&gt;Dinis Cruz and Summit Organization Team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''Documents''' <br /> | align=&quot;center&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Testing Project|'''OWASP Testing Guide - SoC 08''']]&lt;br&gt;[http://www.owasp.org/images/2/2c/OWASP_EU_Summit_2008_OWASP_Testing_Guide_v3.ppt PowerPoint Presentation]&lt;br&gt;Matteo Meucci <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP JSP Testing Tool Project|'''OWASP JSP Testing Tool - SoC 08''']]&lt;br&gt;Jason Li<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Code Review Project|'''OWASP Code Review Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/5/59/Code_Review_Eoin.pptx PowerPoint Presentation]&lt;br&gt;Eoin Keary <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Orizon Project|'''OWASP Orizon Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/9/9b/OWASP_EU_Summit_2008_The_Owasp_Orizon_Project.ppt PowerPoint Presentation]&lt;br&gt;Paolo Perego<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP ASDR Project|'''OWASP Application Security Desk Reference - SoC 08''']]&lt;br&gt;Leonardo Cavallari Militelli <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Live CD 2008 Project|'''OWASP Live CD - SoC 08''']]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:OWASP Spanish|'''OWASP Spanish Project - SoC 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP WebScarab Project|'''OWASP WebScarab Project''']]&lt;br&gt;[https://www.owasp.org/images/8/88/OWASP_EU_Summit_2008_WebScarab_treasures.ppt PowerPoint Presentation]&lt;br&gt;Rogan Dawes<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | .NET ESAPI&lt;br&gt;Alex Smolen <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;4&quot; | Working Sessions Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Working Sessions<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% white;&quot; colspan=&quot;5&quot; | &lt;br&gt;<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 - 13:00 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Documentation Projects|'''Documentation Projects/Guides Integration and Unified 4.0 Version''']]&lt;br&gt;[https://www.owasp.org/images/9/92/Final_OWASP_Guidelines_Ideas_List_.docx WS Conclusions]&lt;br&gt;Eduardo Neves <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Browser Security|'''OWASP Intrinsic Security Working Group - Browser Security''']]&lt;br&gt;Arshan Dabirsiaghi <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Tools Projects|'''Tools Projects''']]&lt;br&gt;[https://www.owasp.org/images/5/51/EUSummit08_OWASP_Tools_Working_Session_Suggestions.doc WS Conclusions]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''The Art and Science of Threat Modeling Web Applications'''&lt;br&gt;[http://uk.youtube.com/watch?v=r04EOuukvMQ Video]&lt;br&gt;Mano Paul <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Web Server Hardening SELinux'''&lt;br&gt;[https://www.owasp.org/images/d/db/SELinux-course-OWASP.pdf PDF Presentation]&lt;br&gt;Pavol Luptak <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Offensive WebApp Hacking'''&lt;br&gt;[http://www.youtube.com/watch?v=cl6BHhi2Dys Video - LDAP, XML and SQL injection]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo02.swf Video - LDAP injection demo]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo04.swf XML injection demo]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo03.swf Video - SQL injection demo ]&lt;br&gt;Marco Slaviero<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Phishing attack'''&lt;br&gt;[http://www.youtube.com/watch?v=uf9hw-qvx-I Video]&lt;br&gt;Matt Teasuro &amp;amp; Brad Causey <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;2&quot; | '''Clickjacking'''&lt;br&gt;[http://www.youtube.com/watch?v=H9srYh0HMP4 Video]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo01.swf Demonstration]&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:30 <br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;4&quot; | [[:OWASP Working Session Enterprise Security API Project|'''OWASP Enterprise Security API Project (ESAPI)''']]&lt;br&gt;[http://uk.youtube.com/watch?v=-D_bymZ-8vI Video]&lt;br&gt;[https://www.owasp.org/images/7/70/ESAPI_Ideas_List.docx WS Conclusions]&lt;br&gt;Jeff Williams<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 18:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[:OWASP Working Session - OWASP ASDR|'''OWASP Application Security Desk Reference - ASDR''']]&lt;br&gt;Leonardo Cavallari <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - .NET Project|'''.NET Project''']]&lt;br&gt;Dinis Cruz<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;5&quot; | Agenda for Wednesday, November 5th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;4&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''Standards and Education''' <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Positive Security Project|'''OWASP Positive Security Project - SoC 08''']]&lt;br&gt;Eduardo Neves <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Access Control Rules Tester Project|'''OWASP Access Control Rules Tester - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/3/32/OWASP_EU_Summit_2008_AcCoRuTe.pptx PowerPoint Presentation]&lt;br&gt;Andrew Petukhov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Education Project|'''OWASP Education Project - SoC 08''']]&lt;br&gt;Sebastien Deleersnyder, Martin Knobloch <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Teachable Static Analysis Workbench Project|'''OWASP Teachable Static Analysis Workbench - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/6/69/Teachable_static_analysis_workbench.pptx PowerPoint Presentation]&lt;br&gt;Dmitry Kozlov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:OWASP Internationalization|'''OWASP Internationalization Project - Soc 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP AppSensor Project|'''OWASP AppSensor - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/7/77/Presentation_AppSensor.ppt PowerPoint Presentation]&lt;br&gt; Michael Coates<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''PASSWD Project: Metrics and Vulnerabilities'''&lt;br&gt;[https://www.owasp.org/images/f/f6/PASSWD.ppt PowerPoint Presentation]&lt;br&gt;Lucilla Mancini <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Backend Security Project|'''OWASP Backend Security Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/2/20/OWASP_EU_Summit_2008_Presentation_Model.ppt PowerPoint Prsentation]&lt;br&gt;Carlo Pelliccioni<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Open Review Project|'''OWASP Open Review Project''']]&lt;br&gt;Dan Cornell <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Application Security Tool Benchmarking Environment and Site Generator Refresh Project|'''OWASP Application Security Tool Benchmarking Environment and Site Generator Refresh Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/c/c4/Site_generator.pptx PowerPoint Presentation]&lt;br&gt;Dmitry Kozlov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; colspan=&quot;4&quot; | [[OWASP EU Summit 2008#NEW_GLOBAL_COMMITTEE_STRUCTURE|'''OWASP Global Committee Elections''']]<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 12:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[OWASP Working Session Education Project|'''Education Project''']]&lt;br&gt;[https://www.owasp.org/images/3/33/OWASP_Education_Working_Session_Notes_-_Ideas.ppt WS Conclusions]&lt;br&gt;Sebastien Deleersnyder <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Testing Guide|'''Testing Guide''']]&lt;br&gt;Matteo Meucci <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Web Application Framework Security|'''Web Application Framework Security''']]&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:45 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;4&quot; | Lunch (During Working Sessions)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Flash Player Security'''&lt;br&gt;Peleus Uhley <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''OWASP Top 10'''&lt;br&gt;[http://uk.youtube.com/watch?v=GsRbpshqqII Video]&lt;br&gt;Sebastien Deleersnyder and Martin Knobloch <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Uncovering WebScarab's Secret Treasures'''&lt;br&gt;[https://www.owasp.org/images/8/88/OWASP_EU_Summit_2008_WebScarab_treasures.ppt PowerPoint Presentation]&lt;br&gt;Rogan Dawes <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Hacking the Orizon'''&lt;br&gt;[http://www.owasp.org/index.php/Image:Hacking_the_Owasp_Orizon.ppt PowerPoint Presentation]&lt;br&gt;Paolo Perego<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;4&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Code Review Guide|'''Code Review Guide''']]&lt;br&gt;Eoin Keary <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | EU Funding for OWASP Projects&lt;br&gt;Carlos Serrao <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Certification|'''OWASP Certification''']]&lt;br&gt;Tom Brennan <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | Software Assurance Maturity Model&lt;br&gt;Pravir Chandra<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 19:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Website|'''OWASP Website''']]&lt;br&gt;[https://www.owasp.org/images/8/8b/EUSummit08_OWASP_Web_Site_Working_Session_Suggestions.doc WS Conclusions]&lt;br&gt;[https://www.owasp.org/images/2/2e/Website.ppt PPT Presentation]&lt;br&gt;Fabio Cerullo <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | '''Metrics &amp;amp; Vulnerabilities'''&lt;br&gt;[https://www.owasp.org/images/0/0d/PASSWD_description.doc Word Presentation]&lt;br&gt;Lucilla Mancini <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | OWASP Orizon&lt;br&gt;Paolo Perego<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;6&quot; | Agenda for Thursday, November 6th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; colspan=&quot;5&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | '''Technology''' <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Classic ASP Security Project|'''OWASP Classic ASP Security Project - SoC 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP Source Code Review OWASP Projects Project|'''OWASP Source Code Review - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/c/c9/OWASPEU_SourceReview.ppt PowerPoint Presentation]&lt;br&gt;James Walden<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Ruby on Rails Security Guide V2|'''OWASP Ruby on Rails Security Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/3/32/Rails_security_2_presentation.pdf PDF Presentation]&lt;br&gt;Heiko Webers <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP OpenPGP Extensions for HTTP - Enigform and mod openpgp|'''OWASP OpenPGP Extensions for HTTP - Enigform and mod openpgp - SoC 08''']]&lt;br&gt;Arturo Alberto Busleiman<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Webslayer Project|'''OWASP Webslayer Project''']]&lt;br&gt;Christian Martorella <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP Securing WebGoat using ModSecurity Project|'''OWASP Securing WebGoat using ModSecurity Project - SoC 08''']]&lt;br&gt;Stephen Evans and Christian Folini<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; colspan=&quot;2&quot; | [[:Category:OWASP Skavenger Project|'''OWASP Skavenger Project - SoC 08''']]&lt;br&gt;Matthias Rohr <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; colspan=&quot;3&quot; | [[:Category:OWASP AntiSamy Project .NET|'''OWASP AntiSamy Project - SoC 08''']]&lt;br&gt;Marcin Wielgoszewski<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;5&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session Top 10 2009|'''OWASP Top 10 - 2009''']]&lt;br&gt;Dave Wichers <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Intra Governmental Affairs|'''OWASP Intra Governmental Affairs''']]&lt;br&gt;David Campbell <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | SAMM v2 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Website|'''OWASP Website''']]&lt;br&gt;Fabio Cerullo <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | Handling Web MalWare<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Lunch (During Working Sessions)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;5&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Ajax Security <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; colspan=&quot;2&quot; | Auditing Flash Applications&lt;br&gt;Peleus Uhley <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | WebApp Assessment&lt;br&gt;Vicente Aguilera Diaz <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Mod Security&lt;br&gt;Lucas C. Ferreira<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; colspan=&quot;5&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;5&quot; | [[:Working Session OWASP Strategic Planning|'''OWASP Strategic Planning and Business Models compatible with OWASP values''']]&lt;br&gt;Jeff Williams, Dinis Cruz, Dave Wichers, Sebastien Deleersnyder, Tom Brennan &amp;amp; Kate Hartmann and Paulo Combra<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 18:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[:OWASP Working Session - Two-way Internationalization of OWASP Content|'''Two-way Internationalization of OWASP Content''']]&lt;br&gt;Juan Carlos Calderon &amp;amp; Sebastien Deleersnyder <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[:Best Practices for OWASP Chapter Leaders|'''OWASP Best Practices for Chapter Leaders''']]&lt;br&gt;[https://www.owasp.org/images/0/01/BestPractices_2008.pptx WS Conclusions]&lt;br&gt;Georg Hess <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; colspan=&quot;2&quot; | [[:OWASP Working Session - OWASP Live CD&amp;DVD|'''OWASP Live CD &amp;amp; DVD''']]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 20:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | Gala Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 22:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; colspan=&quot;5&quot; | OWASP Band<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; colspan=&quot;2&quot; | Agenda for Friday, November 7th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | OWASP AppSec Agenda 2009: Working Session Outcomes<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Documentation Projects/Guides Integration and Unified 4.0 Version&lt;br&gt;Eduardo Neves<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Browser Security&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | ESAPI&lt;br&gt;Jeff Williams<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Tools Projects&lt;br&gt;Matt Tesauro<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Code Review Guide&lt;br&gt;Eoin Keary<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Certification&lt;br&gt;Tom Brennan<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Software Assurance Maturity Model&lt;br&gt;Pravir Chandra<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Top 10 2009&lt;br&gt;Dave Wichers<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Intra Governmental Affairs&lt;br&gt;David Campbell<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Best Practices for Chapter Leaders&lt;br&gt;Georg Hess<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | Coffee Break and Vote (put your dots on the wall)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Live CD &amp;amp; DVD&lt;br&gt;Matt Tesauro<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | ADSR&lt;br&gt;Leonardo Cavallari<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Education Project&lt;br&gt;Sebastien Deleersnyder<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Web Application Framework Security&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Testing Guide&lt;br&gt;Matteo Meucci<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Censorship&lt;br&gt;Tom Brennan<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | EU Funding for OWASP Projects&lt;br&gt;Carlos Serrao<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Website&lt;br&gt;Fabio Cerullo<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Orizon&lt;br&gt;Paolo Perego<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Handling Web MalWare<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | 2-Way Internationalization&lt;br&gt;Juan Carlos Calderon<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Portuguese Public &amp;amp; Private Organizations&lt;br&gt;Carlos Serrao<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | &lt;br&gt;<br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Winter of Code 2009&lt;br&gt;Dinis Cruz and Sebastien Deleersnyder<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | [http://www.owasp.org/index.php/Owasp_Board_Meetings_11-07-08 Board Meeting]<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | Announcement of Summit Procedings<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> &lt;br&gt; &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=92953 Summit 2011 2010-11-15T01:11:33Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; class=&quot;FCK__ShowTableBorders&quot;<br /> |-<br /> | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt;The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt;&lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, [[User:Sarah Baso|Sarah Baso]] . <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> == Browser Day ==<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language? Much focus has been on execution performance but what about security? Will EcmaScript 5 strict-mode be supported anytime soon ([http://kangax.github.com/es5-compat-table/ currently no support])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> <br /> == XSS Eradication ==<br /> <br /> We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt; <br /> <br /> == Enterprise Web Defense Roundtable ==<br /> <br /> How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense. (Session Leader: Michael Coates, Mozilla) <br /> <br /> == University Outreach ==<br /> <br /> This summit will be the place to bring OWASP Educational Supporters together! What security major and minor educations are out there? How can OWASP participate and influence their curricula? How can the relationship between Universities and OWASP be standardized? What does OWASP have to offer Universities and what can they, in turn, expect from each other? <br /> <br /> == OWASP Projects ==<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes:&lt;br&gt;-Assessment criteria&lt;br&gt;-Orphaned projects&lt;br&gt;-Funding&lt;br&gt;-Marketing&lt;br&gt;-Commercial services <br /> <br /> &lt;br&gt; <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> A Day in Lisbon, Portugal: <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt;&lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Active member of a Global Committee (as determined by the OWASP Board) <br /> #Operational personnel that are necessary for the operation of the Summit<br /> <br /> '''Current sponsorship budget is $50,000 for the Summit.''' <br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact {{Template:Contact | name = Brad Causey | email = bradcausey@owasp.org}} or {{Template:Contact | name = Jason Li | email = jason.li@owasp.org}} <br /> <br /> &lt;br&gt; <br /> <br /> ==== Applying for Chapter or Project Sponsorship ====<br /> <br /> [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt; &lt;br&gt;[[Image:WorkflowProcesstoApplyforChapterorProjectFunding.png|800x600px]] &lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Confirmed Summit Attendees ====<br /> <br /> Dinis Cruz (Board)&lt;br&gt; Tom Brennan (Board)&lt;br&gt; Eoin Keary (Board)&lt;br&gt; Jeff Williams (Board)&lt;br&gt; Seba Deleersnyder (Board)&lt;br&gt; Dave Wichers (Board)&lt;br&gt; Matt Tesauro (Board)&lt;br&gt; Paulo Coimbra (OWASP)&lt;br&gt; Alison Shrader (OWASP)&lt;br&gt; Kate Hartmann (OWASP)&lt;br&gt; Larry Casey (OWASP)&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Letters and Summit Materials ====<br /> <br /> [[Media:OWASP_summit2011-DC-update.pdf|Summit 2011 Presentation for AppSec DC]] &lt;br&gt; [https://docs.google.com/document/d/1TBj0BxBnzx8P7SegtEc8dSUNlQdLEZ5xXTbwfbdh6Bg/edit?hl=en&amp;authkey=CNvixYEL Application for OWASP Chapter or Project Funding] &lt;br&gt;&lt;br&gt; [https://docs.google.com/document/d/1sDeYKk6HuJiQ-CvihS4r1QVs21W3LhtLYfPyyLBwtQc/edit?hl=en&amp;authkey=CPXmjJkK Template Letter - 2011 Global Summit Basic Invitation] &lt;br&gt; [https://docs.google.com/document/d/1Hi2Rc6wsaDMVEEssKuWqpBZe0IxtR51dLEbNIYsQaR0/edit?hl=en&amp;authkey=CJbSpfEI Template Letter - 2011 Global Summit University Outreach Invitation]&lt;br&gt; [https://docs.google.com/document/d/13H-iGoHeUrAC0Pdm9mkA40no1M71YwgMdNA1829rLs0/edit?hl=en&amp;authkey=CMaG0pIK Template Letter - 2011 Global Summit Government Invitation]&lt;br&gt; [https://docs.google.com/document/d/1u0ydRKuDOlzoxM4pI9Gyka_Goh_RDz5rLlMcLohUtdU/edit?hl=en&amp;authkey=CMOizEs Template Letter - 2011 Global Summit Request for Employer Funding and Sponsorship]&lt;br&gt; [https://docs.google.com/document/d/10mE4EcsfwNOl3X43fKaTMERU79X2z5jUxLvAKkrlgqQ/edit?hl=en&amp;authkey=CN2x0qoN Template Letter - 2011 Global Summit Request for Employer Funding, Version 2]&lt;br&gt; <br /> <br /> ==== Schedule (Draft) ====<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Monday, November 3rd, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Title Here<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 - 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Securing WebGoat with ModSecurity&lt;br&gt;Stephen Craig Evans <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | WebSec Apps for Managers and Executives&lt;br&gt;[http://uk.youtube.com/watch?v=r04EOuukvMQ Video]&lt;br&gt;Mano Paul <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | OWASP Testing Guide&lt;br&gt;Matteo Meucci<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 19:00 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Summit Briefing&lt;br&gt;Dinis Cruz and Summit Organization Team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 20:00 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Dinner<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Tuesday, November 4th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 08:00 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Registration<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:00 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Summit Keynote&lt;br&gt;Dinis Cruz and Summit Organization Team<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | '''Documents''' <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 45%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:30 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Testing Project|'''OWASP Testing Guide - SoC 08''']]&lt;br&gt;[http://www.owasp.org/images/2/2c/OWASP_EU_Summit_2008_OWASP_Testing_Guide_v3.ppt PowerPoint Presentation]&lt;br&gt;Matteo Meucci <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP JSP Testing Tool Project|'''OWASP JSP Testing Tool - SoC 08''']]&lt;br&gt;Jason Li<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:45 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Code Review Project|'''OWASP Code Review Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/5/59/Code_Review_Eoin.pptx PowerPoint Presentation]&lt;br&gt;Eoin Keary <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Orizon Project|'''OWASP Orizon Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/9/9b/OWASP_EU_Summit_2008_The_Owasp_Orizon_Project.ppt PowerPoint Presentation]&lt;br&gt;Paolo Perego<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP ASDR Project|'''OWASP Application Security Desk Reference - SoC 08''']]&lt;br&gt;Leonardo Cavallari Militelli <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Live CD 2008 Project|'''OWASP Live CD - SoC 08''']]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:OWASP Spanish|'''OWASP Spanish Project - SoC 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP WebScarab Project|'''OWASP WebScarab Project''']]&lt;br&gt;[https://www.owasp.org/images/8/88/OWASP_EU_Summit_2008_WebScarab_treasures.ppt PowerPoint Presentation]&lt;br&gt;Rogan Dawes<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:45 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | .NET ESAPI&lt;br&gt;Alex Smolen <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Working Sessions Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Working Sessions<br /> |}<br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% white;&quot; | <br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 - 13:00 <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Documentation Projects|'''Documentation Projects/Guides Integration and Unified 4.0 Version''']]&lt;br&gt;[https://www.owasp.org/images/9/92/Final_OWASP_Guidelines_Ideas_List_.docx WS Conclusions]&lt;br&gt;Eduardo Neves <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Browser Security|'''OWASP Intrinsic Security Working Group - Browser Security''']]&lt;br&gt;Arshan Dabirsiaghi <br /> | align=&quot;center&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Tools Projects|'''Tools Projects''']]&lt;br&gt;[https://www.owasp.org/images/5/51/EUSummit08_OWASP_Tools_Working_Session_Suggestions.doc WS Conclusions]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''The Art and Science of Threat Modeling Web Applications'''&lt;br&gt;[http://uk.youtube.com/watch?v=r04EOuukvMQ Video]&lt;br&gt;Mano Paul <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Web Server Hardening SELinux'''&lt;br&gt;[https://www.owasp.org/images/d/db/SELinux-course-OWASP.pdf PDF Presentation]&lt;br&gt;Pavol Luptak <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Offensive WebApp Hacking'''&lt;br&gt;[http://www.youtube.com/watch?v=cl6BHhi2Dys Video - LDAP, XML and SQL injection]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo02.swf Video - LDAP injection demo]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo04.swf XML injection demo]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo03.swf Video - SQL injection demo ]&lt;br&gt;Marco Slaviero<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Phishing attack'''&lt;br&gt;[http://www.youtube.com/watch?v=uf9hw-qvx-I Video]&lt;br&gt;Matt Teasuro &amp;amp; Brad Causey <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Clickjacking'''&lt;br&gt;[http://www.youtube.com/watch?v=H9srYh0HMP4 Video]&lt;br&gt;[http://www.carlosserrao.net/files/owasp/owaspdemo01.swf Demonstration]&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:00 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:30 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session Enterprise Security API Project|'''OWASP Enterprise Security API Project (ESAPI)''']]&lt;br&gt;[http://uk.youtube.com/watch?v=-D_bymZ-8vI Video]&lt;br&gt;[https://www.owasp.org/images/7/70/ESAPI_Ideas_List.docx WS Conclusions]&lt;br&gt;Jeff Williams<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 18:30 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP ASDR|'''OWASP Application Security Desk Reference - ASDR''']]&lt;br&gt;Leonardo Cavallari <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - .NET Project|'''.NET Project''']]&lt;br&gt;Dinis Cruz<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Wednesday, November 5th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:15 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | '''Standards and Education''' <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Positive Security Project|'''OWASP Positive Security Project - SoC 08''']]&lt;br&gt;Eduardo Neves <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Access Control Rules Tester Project|'''OWASP Access Control Rules Tester - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/3/32/OWASP_EU_Summit_2008_AcCoRuTe.pptx PowerPoint Presentation]&lt;br&gt;Andrew Petukhov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Education Project|'''OWASP Education Project - SoC 08''']]&lt;br&gt;Sebastien Deleersnyder, Martin Knobloch <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Teachable Static Analysis Workbench Project|'''OWASP Teachable Static Analysis Workbench - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/6/69/Teachable_static_analysis_workbench.pptx PowerPoint Presentation]&lt;br&gt;Dmitry Kozlov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:OWASP Internationalization|'''OWASP Internationalization Project - Soc 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP AppSensor Project|'''OWASP AppSensor - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/7/77/Presentation_AppSensor.ppt PowerPoint Presentation]&lt;br&gt; Michael Coates<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:45 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | '''PASSWD Project: Metrics and Vulnerabilities'''&lt;br&gt;[https://www.owasp.org/images/f/f6/PASSWD.ppt PowerPoint Presentation]&lt;br&gt;Lucilla Mancini <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Backend Security Project|'''OWASP Backend Security Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/2/20/OWASP_EU_Summit_2008_Presentation_Model.ppt PowerPoint Prsentation]&lt;br&gt;Carlo Pelliccioni<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Open Review Project|'''OWASP Open Review Project''']]&lt;br&gt;Dan Cornell <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Application Security Tool Benchmarking Environment and Site Generator Refresh Project|'''OWASP Application Security Tool Benchmarking Environment and Site Generator Refresh Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/c/c4/Site_generator.pptx PowerPoint Presentation]&lt;br&gt;Dmitry Kozlov<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | [[OWASP EU Summit 2008#NEW_GLOBAL_COMMITTEE_STRUCTURE|'''OWASP Global Committee Elections''']]<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 12:45 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[OWASP Working Session Education Project|'''Education Project''']]&lt;br&gt;[https://www.owasp.org/images/3/33/OWASP_Education_Working_Session_Notes_-_Ideas.ppt WS Conclusions]&lt;br&gt;Sebastien Deleersnyder <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Testing Guide|'''Testing Guide''']]&lt;br&gt;Matteo Meucci <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Web Application Framework Security|'''Web Application Framework Security''']]&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:45 <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Lunch (During Working Sessions)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 15:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Flash Player Security'''&lt;br&gt;Peleus Uhley <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''OWASP Top 10'''&lt;br&gt;[http://uk.youtube.com/watch?v=GsRbpshqqII Video]&lt;br&gt;Sebastien Deleersnyder and Martin Knobloch <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Uncovering WebScarab's Secret Treasures'''&lt;br&gt;[https://www.owasp.org/images/8/88/OWASP_EU_Summit_2008_WebScarab_treasures.ppt PowerPoint Presentation]&lt;br&gt;Rogan Dawes <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | '''Hacking the Orizon'''&lt;br&gt;[http://www.owasp.org/index.php/Image:Hacking_the_Owasp_Orizon.ppt PowerPoint Presentation]&lt;br&gt;Paolo Perego<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:00 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | <br /> | align=&quot;center&quot; colspan=&quot;4&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Code Review Guide|'''Code Review Guide''']]&lt;br&gt;Eoin Keary <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | EU Funding for OWASP Projects&lt;br&gt;Carlos Serrao <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Certification|'''OWASP Certification''']]&lt;br&gt;Tom Brennan <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | Software Assurance Maturity Model&lt;br&gt;Pravir Chandra<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 19:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Website|'''OWASP Website''']]&lt;br&gt;[https://www.owasp.org/images/8/8b/EUSummit08_OWASP_Web_Site_Working_Session_Suggestions.doc WS Conclusions]&lt;br&gt;[https://www.owasp.org/images/2/2e/Website.ppt PPT Presentation]&lt;br&gt;Fabio Cerullo <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | '''Metrics &amp;amp; Vulnerabilities'''&lt;br&gt;[https://www.owasp.org/images/0/0d/PASSWD_description.doc Word Presentation]&lt;br&gt;Lucilla Mancini <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | OWASP Orizon&lt;br&gt;Paolo Perego<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;6&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Thursday, November 6th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 09:15 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | '''Technology''' <br /> | align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;width: 30%; background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | '''Tools'''<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Classic ASP Security Project|'''OWASP Classic ASP Security Project - SoC 08''']]&lt;br&gt;Juan Carlos Calderon <br /> | align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Source Code Review OWASP Projects Project|'''OWASP Source Code Review - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/c/c9/OWASPEU_SourceReview.ppt PowerPoint Presentation]&lt;br&gt;James Walden<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Ruby on Rails Security Guide V2|'''OWASP Ruby on Rails Security Project - SoC 08''']]&lt;br&gt;[https://www.owasp.org/images/3/32/Rails_security_2_presentation.pdf PDF Presentation]&lt;br&gt;Heiko Webers <br /> | align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP OpenPGP Extensions for HTTP - Enigform and mod openpgp|'''OWASP OpenPGP Extensions for HTTP - Enigform and mod openpgp - SoC 08''']]&lt;br&gt;Arturo Alberto Busleiman<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:30 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Webslayer Project|'''OWASP Webslayer Project''']]&lt;br&gt;Christian Martorella <br /> | align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP Securing WebGoat using ModSecurity Project|'''OWASP Securing WebGoat using ModSecurity Project - SoC 08''']]&lt;br&gt;Stephen Evans and Christian Folini<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:00 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(255, 223, 128);&quot; | [[:Category:OWASP Skavenger Project|'''OWASP Skavenger Project - SoC 08''']]&lt;br&gt;Matthias Rohr <br /> | align=&quot;center&quot; colspan=&quot;3&quot; style=&quot;background: none repeat scroll 0% 0% rgb(160, 192, 224);&quot; | [[:Category:OWASP AntiSamy Project .NET|'''OWASP AntiSamy Project - SoC 08''']]&lt;br&gt;Marcin Wielgoszewski<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Coffee Break<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session Top 10 2009|'''OWASP Top 10 - 2009''']]&lt;br&gt;Dave Wichers <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Intra Governmental Affairs|'''OWASP Intra Governmental Affairs''']]&lt;br&gt;David Campbell <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | SAMM v2 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Website|'''OWASP Website''']]&lt;br&gt;Fabio Cerullo <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | Handling Web MalWare<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Lunch (During Working Sessions)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Training Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Ajax Security <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Auditing Flash Applications&lt;br&gt;Peleus Uhley <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | WebApp Assessment&lt;br&gt;Vicente Aguilera Diaz <br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(192, 160, 160);&quot; | Mod Security&lt;br&gt;Lucas C. Ferreira<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% white;&quot; | <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;width: 90%; background: none repeat scroll 0% 0% white;&quot; | Working Sessions<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 16:30 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:Working Session OWASP Strategic Planning|'''OWASP Strategic Planning and Business Models compatible with OWASP values''']]&lt;br&gt;Jeff Williams, Dinis Cruz, Dave Wichers, Sebastien Deleersnyder, Tom Brennan &amp;amp; Kate Hartmann and Paulo Combra<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 18:30 <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - Two-way Internationalization of OWASP Content|'''Two-way Internationalization of OWASP Content''']]&lt;br&gt;Juan Carlos Calderon &amp;amp; Sebastien Deleersnyder <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:Best Practices for OWASP Chapter Leaders|'''OWASP Best Practices for Chapter Leaders''']]&lt;br&gt;[https://www.owasp.org/images/0/01/BestPractices_2008.pptx WS Conclusions]&lt;br&gt;Georg Hess <br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(179, 255, 153);&quot; | [[:OWASP Working Session - OWASP Live CD&amp;DVD|'''OWASP Live CD &amp;amp; DVD''']]&lt;br&gt;Matt Tesauro<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 20:00 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Gala Dinner<br /> |-<br /> | align=&quot;center&quot; style=&quot;background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 22:00 <br /> | align=&quot;center&quot; colspan=&quot;5&quot; style=&quot;background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Band<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> {| border=&quot;0&quot; align=&quot;center&quot; style=&quot;width: 80%;&quot;<br /> |-<br /> | align=&quot;center&quot; colspan=&quot;2&quot; style=&quot;background: none repeat scroll 0% 0% rgb(64, 88, 160); color: white;&quot; | Agenda for Friday, November 7th, 2008<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Daily Briefing&lt;br&gt;Dinis Cruz<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 10:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | OWASP AppSec Agenda 2009: Working Session Outcomes<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Documentation Projects/Guides Integration and Unified 4.0 Version&lt;br&gt;Eduardo Neves<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Browser Security&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | ESAPI&lt;br&gt;Jeff Williams<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Tools Projects&lt;br&gt;Matt Tesauro<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Code Review Guide&lt;br&gt;Eoin Keary<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Certification&lt;br&gt;Tom Brennan<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Software Assurance Maturity Model&lt;br&gt;Pravir Chandra<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Top 10 2009&lt;br&gt;Dave Wichers<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Intra Governmental Affairs&lt;br&gt;David Campbell<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Best Practices for Chapter Leaders&lt;br&gt;Georg Hess<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:15 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | Coffee Break and Vote (put your dots on the wall)<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 11:30 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Live CD &amp;amp; DVD&lt;br&gt;Matt Tesauro<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | ADSR&lt;br&gt;Leonardo Cavallari<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Education Project&lt;br&gt;Sebastien Deleersnyder<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Web Application Framework Security&lt;br&gt;Arshan Dabirsiaghi<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Testing Guide&lt;br&gt;Matteo Meucci<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Censorship&lt;br&gt;Tom Brennan<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | EU Funding for OWASP Projects&lt;br&gt;Carlos Serrao<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Website&lt;br&gt;Fabio Cerullo<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | OWASP Orizon&lt;br&gt;Paolo Perego<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Handling Web MalWare<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | 2-Way Internationalization&lt;br&gt;Juan Carlos Calderon<br /> |-<br /> | style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Portuguese Public &amp;amp; Private Organizations&lt;br&gt;Carlos Serrao<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(194, 194, 194);&quot; | Winter of Code 2009&lt;br&gt;Dinis Cruz and Sebastien Deleersnyder<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 13:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 242, 242);&quot; | Lunch<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 14:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | [http://www.owasp.org/index.php/Owasp_Board_Meetings_11-07-08 Board Meeting]<br /> |-<br /> | align=&quot;center&quot; style=&quot;width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);&quot; | 17:00 <br /> | align=&quot;center&quot; style=&quot;width: 80%; background: none repeat scroll 0% 0% rgb(242, 152, 76);&quot; | Announcement of Summit Procedings<br /> |}<br /> <br /> &lt;br&gt; <br /> <br /> &lt;br&gt; &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=92228 Summit 2011 2010-11-02T04:15:52Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; style=&quot;&quot;<br /> |-<br /> | height=&quot;&quot; width=&quot;&quot; | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt; The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt; &lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, Sarah Baso. <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Attendees that qualify to be sponsored by OWASP'''&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria: <br /> <br /> #Member of the OWASP Board <br /> #Member of a global committee that has been active in the last 6 months. This will be verified by the leader(s) of the committee. <br /> #Key personnel that are integral to the operation of the summit<br /> <br /> If you feel you might qualify, please contact [[Bradcausey@owasp.org|Brad Causey]] or [[Jasonli@owasp.org|Jason Li]]. If you do not meet these criteria, and still feel that you should be sponsored, please contact [[Bradcausey@owasp.org|Brad Causey]] or [[Jasonli@owasp.org|Jason Li]]. <br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> &lt;br&gt; <br /> <br /> ==== Agenda (draft) ====<br /> <br /> *'''Browser Day!''' One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.Do not miss this chance to influence what's important in browser security in the coming years. <br /> *'''XSS Eradication'''.We will have a half day working session on Cross Site Scripting - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. &lt;br&gt;<br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language. Much focus has been on execution performance but what about security? Is EcmaScript 5 strict-mode coming anytime soon ([http://kangax.github.com/es5-compat-table/ currently none does])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].&lt;br&gt;<br /> *'''University Reachout'''. This summit will be the place to bring the OWASP Educational Supporters together! What security major and minor educations are out there? Can it be standardized?<br /> *'''OWASP Projects'''. We will have a session on how OWASP should support, grow, and manage projects. This includes:<br /> <br /> -Assessment criteria&lt;br&gt; -Orphaned projects&lt;br&gt; -Funding&lt;br&gt; -Marketing&lt;br&gt;-Commercial services<br /> <br /> &lt;br&gt;<br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> Hotel Quinta da Marinha Resort <br /> <br /> [[Image:2011venue.jpg]] <br /> <br /> &lt;br&gt; <br /> <br /> Between city and nature, between the beach and the mountain, Hotel Quinta da Marinha Resort - located in the excellent area of Cascais / Sintra, a mere 25 km from Lisbon - is the perfect setting to feel like all your wishes always come true. Discover one of the finest Resorts in Portugal. <br /> <br /> &lt;br&gt; <br /> <br /> *Total Rooms: 11 <br /> *“All In One” with 474 m2 <br /> *Capacity for 450 persons <br /> *Moveable walls in 4 rooms (“All in One”) <br /> *Wireless Internet access in all rooms and public areas <br /> *Available Av systems, top of the line, for rent <br /> *9 rooms with natural light <br /> *Air conditioning<br /> <br /> &lt;br&gt; <br /> <br /> [[Image:Inside-venue2011.jpg]]&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> [http://www.quintadamarinha.com Website] <br /> <br /> &lt;br&gt; <br /> <br /> A Day in Lisbon, Portugal: <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt; &lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Member of a global committee that has been active in the last 6 months. This will be verified by the leader(s) of the committee. <br /> #Key personnel that are integral to the operation of the summit<br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact Brad Causey or Jason Li. <br /> <br /> &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=92227 Summit 2011 2010-11-02T03:59:47Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; style=&quot;&quot;<br /> |-<br /> | height=&quot;&quot; width=&quot;&quot; | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt; The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt; &lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, Sarah Baso. <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Attendees that qualify to be sponsored by OWASP'''&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria: <br /> <br /> #Member of the OWASP Board <br /> #Member of a global committee that has been active in the last 6 months. This will be verified by the leader(s) of the committee. <br /> #Key personnel that are integral to the operation of the summit<br /> <br /> If you feel you might qualify, please contact [[Bradcausey@owasp.org|Brad Causey]] or [[Jasonli@owasp.org|Jason Li]]. If you do not meet these criteria, and still feel that you should be sponsored, please contact [[Bradcausey@owasp.org|Brad Causey]] or [[Jasonli@owasp.org|Jason Li]]. <br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> <br /> <br /> ==== Agenda (draft) ====<br /> <br /> Browser Day!<br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies.<br /> <br /> Therefore we will spend a full day working together with the leading browser vendors to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers.<br /> <br /> Do not miss this chance to influence what's important in browser security in the coming years.<br /> <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language. Much focus has been on execution performance but what about security? Is EcmaScript 5 strict-mode coming anytime soon ([http://kangax.github.com/es5-compat-table/ currently none does])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].<br /> <br /> ==== XSS Eradication ====<br /> <br /> We will have a '''half day working session on Cross Site Scripting''' - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. <br /> <br /> === Agenda ===<br /> <br /> Please '''edit this tab and enter topics we should cover''' during the XSS session. If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Outreach to frameworks/other constituent parties /Justin Clarke <br /> *OWASP XSS Awareness resources and partner freely available resources /Justin Clarke <br /> *[Your topic here]<br /> <br /> ==== University Reachout ====<br /> <br /> This summit will be the place to bring the OWASP Educational Supporters together! What security major and minor educations are out there? Can it be standardized? <br /> <br /> === Agenda ===<br /> <br /> Outreach to OWASP Educational Supporters /Martin Knobloch <br /> <br /> *Introduction of the represented Universities and College Chapters <br /> **Where from and what focus? <br /> *What security educations, majors and minors, are out there? <br /> **What security educations are available? <br /> *What OWASP material is and can be used? <br /> **What OWASP material is used / other resources? <br /> *How can OWASP further support security educations on Universities? <br /> *[more?]<br /> <br /> ==== OWASP Projects ====<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes: <br /> <br /> *Assessment criteria <br /> *Orphaned projects <br /> *Funding <br /> *Marketing <br /> *Commercial services<br /> <br /> As an OWASP leader you have most probably seen some of the above topics discussed on the leaders list. Now is the time to boil down to consensus. <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> Hotel Quinta da Marinha Resort <br /> <br /> [[Image:2011venue.jpg]] <br /> <br /> &lt;br&gt; <br /> <br /> Between city and nature, between the beach and the mountain, Hotel Quinta da Marinha Resort - located in the excellent area of Cascais / Sintra, a mere 25 km from Lisbon - is the perfect setting to feel like all your wishes always come true. Discover one of the finest Resorts in Portugal. <br /> <br /> &lt;br&gt; <br /> <br /> *Total Rooms: 11 <br /> *“All In One” with 474 m2 <br /> *Capacity for 450 persons <br /> *Moveable walls in 4 rooms (“All in One”) <br /> *Wireless Internet access in all rooms and public areas <br /> *Available Av systems, top of the line, for rent <br /> *9 rooms with natural light <br /> *Air conditioning<br /> <br /> &lt;br&gt; <br /> <br /> [[Image:Inside-venue2011.jpg]]&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> [http://www.quintadamarinha.com Website] <br /> <br /> &lt;br&gt; <br /> <br /> A Day in Lisbon, Portugal: <br /> <br /> [[Image:Cascais2.jpg]]&lt;br&gt; &lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Member of a global committee that has been active in the last 6 months. This will be verified by the leader(s) of the committee. <br /> #Key personnel that are integral to the operation of the summit<br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact Brad Causey or Jason Li. <br /> <br /> &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=92226 Summit 2011 2010-11-02T03:53:56Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; style=&quot;&quot;<br /> |-<br /> | height=&quot;&quot; width=&quot;&quot; | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt; The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt; &lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, Sarah Baso. <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Attendees that qualify to be sponsored by OWASP'''&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria: <br /> <br /> #Member of the OWASP Board <br /> #Member of a global committee that has been active in the last 6 months. This will be verified by the leader(s) of the committee. <br /> #Key personnel that are integral to the operation of the summit<br /> <br /> If you feel you might qualify, please contact [[Bradcausey@owasp.org|Brad Causey]] or [[Jasonli@owasp.org|Jason Li]]. If you do not meet these criteria, and still feel that you should be sponsored, please contact [[Bradcausey@owasp.org|Brad Causey]] or [[Jasonli@owasp.org|Jason Li]]. <br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> ==== Browser Day! ====<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies. <br /> <br /> Therefore we will spend '''a full day working together with the leading browser vendors''' to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers. <br /> <br /> Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> === Agenda (draft) ===<br /> <br /> *'''The browser as an operating system'''. Do attackers even need to target the underlying OS or is browser compromise enough? Will this put new requirements on the browser such as full-fledged user accounts, auto updates, and backup? <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language. Much focus has been on execution performance but what about security? Is EcmaScript 5 strict-mode coming anytime soon ([http://kangax.github.com/es5-compat-table/ currently none does])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].<br /> <br /> ==== XSS Eradication ====<br /> <br /> We will have a '''half day working session on Cross Site Scripting''' - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. <br /> <br /> === Agenda ===<br /> <br /> Please '''edit this tab and enter topics we should cover''' during the XSS session. If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Outreach to frameworks/other constituent parties /Justin Clarke <br /> *OWASP XSS Awareness resources and partner freely available resources /Justin Clarke <br /> *[Your topic here]<br /> <br /> ==== University Reachout ====<br /> <br /> This summit will be the place to bring the OWASP Educational Supporters together! What security major and minor educations are out there? Can it be standardized? <br /> <br /> === Agenda ===<br /> <br /> Outreach to OWASP Educational Supporters /Martin Knobloch <br /> <br /> *Introduction of the represented Universities and College Chapters <br /> **Where from and what focus? <br /> *What security educations, majors and minors, are out there? <br /> **What security educations are available? <br /> *What OWASP material is and can be used? <br /> **What OWASP material is used / other resources? <br /> *How can OWASP further support security educations on Universities? <br /> *[more?]<br /> <br /> ==== OWASP Projects ====<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes: <br /> <br /> *Assessment criteria <br /> *Orphaned projects <br /> *Funding <br /> *Marketing <br /> *Commercial services<br /> <br /> As an OWASP leader you have most probably seen some of the above topics discussed on the leaders list. Now is the time to boil down to consensus. <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> Hotel Quinta da Marinha Resort <br /> <br /> [[Image:2011venue.jpg]] <br /> <br /> &lt;br&gt; <br /> <br /> Between city and nature, between the beach and the mountain, Hotel Quinta da Marinha Resort - located in the excellent area of Cascais / Sintra, a mere 25 km from Lisbon - is the perfect setting to feel like all your wishes always come true. Discover one of the finest Resorts in Portugal. <br /> <br /> &lt;br&gt; <br /> <br /> *Total Rooms: 11 <br /> *“All In One” with 474 m2 <br /> *Capacity for 450 persons <br /> *Moveable walls in 4 rooms (“All in One”) <br /> *Wireless Internet access in all rooms and public areas <br /> *Available Av systems, top of the line, for rent <br /> *9 rooms with natural light <br /> *Air conditioning<br /> <br /> &lt;br&gt; <br /> <br /> [[Image:Inside-venue2011.jpg]]&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> [http://www.quintadamarinha.com Website] <br /> <br /> &lt;br&gt; <br /> <br /> A Day in Lisbon, Portugal: <br /> <br /> [[Image:cascais2.jpg]]&lt;br&gt; &lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;[http://www.golisbon.com/portugal/cities/cascais.html http://www.golisbon.com/portugal/cities/cascais.html]&lt;br&gt;or&lt;br&gt;[http://www.travel-in-portugal.com/Cascais/ http://www.travel-in-portugal.com/Cascais/]&lt;br&gt;'''Lisbon''' - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.[http://www.portugalvirtual.pt/0/83.html &lt;br&gt;Museums:] Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;[http://www.portugalvirtual.pt/0/60.html Shopping:] Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;[http://www.portugalvirtual.pt/0/80.html Nightlife:] Bairro Alto and Avenida 24 de Julho.&lt;br&gt;[http://www.portugalvirtual.pt/tours/index.html Guided Tours]&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Member of a global committee that has been active in the last 6 months. This will be verified by the leader(s) of the committee. <br /> #Key personnel that are integral to the operation of the summit<br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact Brad Causey or Jason Li. <br /> <br /> &lt;headertabs /&gt;</div> Tara Causey https://wiki.owasp.org/index.php?title=File:Cascais2.jpg&diff=92225 File:Cascais2.jpg 2010-11-02T03:45:55Z <p>Tara Causey: </p> <hr /> <div></div> Tara Causey https://wiki.owasp.org/index.php?title=Summit_2011&diff=92224 Summit 2011 2010-11-02T03:40:40Z <p>Tara Causey: </p> <hr /> <div>__NOTOC__ <br /> <br /> ==== Welcome ====<br /> <br /> {| cellspacing=&quot;0&quot; cellpadding=&quot;20&quot; border=&quot;0&quot; style=&quot;&quot;<br /> |-<br /> | height=&quot;&quot; width=&quot;&quot; | [[Image:OWASPGlobalSummitLogo-3THISONEHASTHEMOSTVOTESSOFAR.jpg|border|center|462x347px]] <br /> | <br /> === Dear OWASP Leaders and appsec community, ===<br /> <br /> &lt;br&gt; The Summit will be held February 8th-11th in (Cascais) Lisbon, Portugal. This will be the place where appsec experts meet, discuss, work, socialize, and set the roadmap for OWASP in coming years. &lt;br&gt; &lt;br&gt; <br /> <br /> === The Summit Activates *You* ===<br /> <br /> Whereas the OWASP AppSec conferences are great places to listen to interesting talks, go for training, and meet with OWASP people, the Global Summit is the place where we all sit down together and take the time to discuss and work out plans, projects and solutions for the appsec future. <br /> <br /> Examples of topics: <br /> <br /> *How should we support the OWASP projects? <br /> *How can we work with browser vendors to enhance security (see &quot;Browser Day&quot; tab above)? <br /> *How should the community reach out to developers and education institutions? <br /> *How often should we publish the OWASP Top 10? <br /> *How can OWASP support your chapter?<br /> <br /> |-<br /> | valign=&quot;top&quot; | <br /> === Organizing Committee ===<br /> <br /> [[User:Lorna Alamri|Lorna Alamri]], [[User:Bradcausey|Brad Causey]], [[User:Justin42|Justin Clarke]], [[User:Paulo Coimbra|Paulo Coimbra]], [[User:Dinis.cruz|Dinis Cruz]], [[User:Knoblochmartin|Martin Knobloch]], [[User:Wichers|Dave Wichers]], [[User:John.wilander|John Wilander]], [[User:Jason Li|Jason Li]], Tara Causey, Sarah Baso. <br /> <br /> | valign=&quot;top&quot; | <br /> === Who's Invited? ===<br /> <br /> As an OWASP leader you are automatically invited to the summit, but we also welcome leading experts from industry and academia. Together we can create a more secure web. Check the &quot;How Do I Join?&quot; tab above for more info. <br /> <br /> |}<br /> <br /> &lt;!---[[Image:Summit Group 4.jpg|border|OWASP Summit 2008 in Portugal]] ---&gt; <br /> <br /> ==== Operational guidelines ====<br /> <br /> Following the first meeting of the Summit 2011 Organizational team, here are the current proposed operational guidelines: <br /> <br /> #the summit is an annual event <br /> #outside OWASP conference <br /> #the summit should take place in January not later then begin of February <br /> #the summit takes 3 to 4 days <br /> #budget aim is US$ 150'000 US$ where 50'000 from OWASP and US$100'000 from sponsors <br /> #attendees targets are: <br /> ##OWASP Funded: <br /> ###Board <br /> ###Committee Members <br /> ##Chapter / sponsor Funded: <br /> ###Chapter Leaders <br /> ##Project Leaders <br /> #venue / location criteria (no decision on the venue) <br /> ##1 key organizer in close contact with the venue <br /> ##hosting 30 to 100 people <br /> ##US$2'000 a head (flight/accommodation/food/beers) <br /> ##conference facilities <br /> ###multiple meeting rooms <br /> ###one big meeting room e.g. auditorium <br /> ###hotel with the conference facilities or conference venue within walking distance <br /> ###apartments if possible (to share apartments/rooms and save money) <br /> ###4 to 5 star hotel <br /> ###local food supplier for apartment crashing <br /> ###has to be negotiated with the hotel <br /> ###max 50 km's form international airport <br /> ###sufficient Internet access!<br /> <br /> '''Attendees that qualify to be sponsored by OWASP'''&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria: <br /> <br /> #Member of the OWASP Board <br /> #Member of a global committee that has been active in the last 6 months. This will be verified by the leader(s) of the committee. <br /> #Key personnel that are integral to the operation of the summit<br /> <br /> If you feel you might qualify, please contact [[Bradcausey@owasp.org|Brad Causey]] or [[Jasonli@owasp.org|Jason Li]]. If you do not meet these criteria, and still feel that you should be sponsored, please contact [[Bradcausey@owasp.org|Brad Causey]] or [[Jasonli@owasp.org|Jason Li]]. <br /> <br /> '''Success factors (what indicates the summit as success)''' <br /> <br /> #break even <br /> #the summits are the place to go to discus about and working on Web Application Security <br /> #review of the past year <br /> #working sessions on committees, projects and industry sectors (e.g. browsers and frameworks) <br /> ##universities / education sessions <br /> ##committee member election <br /> ##board election <br /> ##strategic OWASP issues <br /> ##road map and action plans for the next 12 month<br /> <br /> Other local Summit(s): <br /> <br /> *The conferences are free to organize small, conference bound summit <br /> *this are not sponsored by OWASP of OWASP summit budget<br /> <br /> ==== Browser Day! ====<br /> <br /> One of the great challenges of application security is browser security. The browser is becoming our de facto runtime platform for applications and it comprises a whole ecosystem of plugins and web technologies. <br /> <br /> Therefore we will spend '''a full day working together with the leading browser vendors''' to penetrate current problems, new ideas, and how security fits in alongside other requirements from developers and endusers. <br /> <br /> Do not miss this chance to influence what's important in browser security in the coming years. <br /> <br /> === Agenda (draft) ===<br /> <br /> *'''The browser as an operating system'''. Do attackers even need to target the underlying OS or is browser compromise enough? Will this put new requirements on the browser such as full-fledged user accounts, auto updates, and backup? <br /> *'''Sandboxing'''. Is sandboxing the right way forward? Can sandboxing be harmonized with the origin policies for cookies, scripting, and ajax – i e share the same compartmentalization? How should we apply sandboxing to plugins? <br /> *'''Securing plugins'''. Should browsers ship with default plugins? Should plugins be auto-updated? Can plugins or versions of plugins be blacklisted centrally? <br /> *'''Enduser warnings'''. How should browsers signal invalid SSL certs to the enduser? Are we helping security right now? What to do about 50&amp;nbsp;% of users clicking through warnings? <br /> *'''Blacklisting'''. Can we cooperate better on blacklisting? Does it work between cultures, i e can we have the same process for reporting throughout the world? <br /> *'''OS integration'''. More and more features in browsers get integrated with the underlying operating system. Processes, fonts, filesystem, 3D graphics. How do we secure this? <br /> *'''JavaScript'''. How do we secure the universally deployed web application language. Much focus has been on execution performance but what about security? Is EcmaScript 5 strict-mode coming anytime soon ([http://kangax.github.com/es5-compat-table/ currently none does])? Are (more) secure &quot;dialects&quot; such as [http://developers.facebook.com/docs/fbjs FBJS] and [http://en.wikipedia.org/wiki/Caja_project Caja] the way to go? What's happening in EcmaScript Harmony? <br /> *'''New HTTP headers'''. Are new opt-in HTTP headers the right way to add security features? For example [http://en.wikipedia.org/wiki/Strict_Transport_Security Strict Transport Security], [http://blogs.msdn.com/b/ieinternals/archive/2010/03/30/combating-clickjacking-with-x-frame-options.aspx x-frame-options], [http://people.mozilla.com/~bsterne/content-security-policy/origin-header-proposal.html origin] and [http://people.mozilla.com/~bsterne/content-security-policy/ Content Security Policy].<br /> <br /> ==== XSS Eradication ====<br /> <br /> We will have a '''half day working session on Cross Site Scripting''' - specifically how OWASP can make 2011 the year of XSS... going away. How we help bring this about through contributing our knowledge to cornerstone projects, how we can raise the awareness through advocacy, and what we can do to ensure that OWASP and other freely available resources and made available to the wider community, and that they are aware of them. <br /> <br /> === Agenda ===<br /> <br /> Please '''edit this tab and enter topics we should cover''' during the XSS session. If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Outreach to frameworks/other constituent parties /Justin Clarke <br /> *OWASP XSS Awareness resources and partner freely available resources /Justin Clarke <br /> *[Your topic here]<br /> <br /> ==== University Reachout ====<br /> <br /> This summit will be the place to bring the OWASP Educational Supporters together! What security major and minor educations are out there? Can it be standardized? <br /> <br /> === Agenda ===<br /> <br /> Outreach to OWASP Educational Supporters /Martin Knobloch <br /> <br /> *Introduction of the represented Universities and College Chapters <br /> **Where from and what focus? <br /> *What security educations, majors and minors, are out there? <br /> **What security educations are available? <br /> *What OWASP material is and can be used? <br /> **What OWASP material is used / other resources? <br /> *How can OWASP further support security educations on Universities? <br /> *[more?]<br /> <br /> ==== OWASP Projects ====<br /> <br /> We will have a session on how OWASP should support, grow, and manage projects. This includes: <br /> <br /> *Assessment criteria <br /> *Orphaned projects <br /> *Funding <br /> *Marketing <br /> *Commercial services<br /> <br /> As an OWASP leader you have most probably seen some of the above topics discussed on the leaders list. Now is the time to boil down to consensus. <br /> <br /> ==== OWASP Around the World ====<br /> <br /> OWASP is a fast growing global community. How should we support and manage this growth? During this session we'll look into issues of: <br /> <br /> *[http://www.owasp.org/index.php/OWASP_Internationalization Internationalization] <br /> *The [http://www.owasp.org/index.php/OWASP_Jobs global job board] <br /> *New OWASP chapters in parts of the world where we have not spread much yet<br /> <br /> ==== More Topics ====<br /> <br /> You know how OWASP works – it's all up to you. Please '''edit this tab and enter topics we should cover''' during the Global Summit 2011! If you want you can add your name after each suggestion and we can work out the details with you. <br /> <br /> *Discussion on Douglas Crockford's bold statement that we should stop HTML5 development, fix XSS, and then start over. Is he right? How is OWASP active in the HTML5 development? Check [http://blip.tv/file/3755495 this webcast], jump to 20:50 to hear the XSS part. /John Wilander <br /> *[Your topic here]<br /> <br /> ==== How Do I Join? / Mailing list ====<br /> <br /> As an OWASP leader you are automatically invited to the summit. <br /> <br /> The first thing to do is to join the [https://lists.owasp.org/mailman/listinfo/owasp-summit-2011 Summit 2011 mailing list]. <br /> <br /> On the mailing list you'll get first hand information on how to register, exact dates, updates to the agenda, funding for your trip etc. <br /> <br /> If you are a leading appsec expert from industry or academia but not yet an OWASP leader you can just contact John.Wilander at owasp.org and we'll try to get you in. <br /> <br /> ==== Social Events ====<br /> <br /> It goes without saying – the summit is all about meeting people. So there will be a constant mixture of workshops, dinners, beers and wine. We like to think of the summit as a very social event in itself. <br /> <br /> ==== Venue ====<br /> <br /> Hotel Quinta da Marinha Resort <br /> <br /> [[Image:2011venue.jpg]] <br /> <br /> &lt;br&gt; <br /> <br /> Between city and nature, between the beach and the mountain, Hotel Quinta da Marinha Resort - located in the excellent area of Cascais / Sintra, a mere 25 km from Lisbon - is the perfect setting to feel like all your wishes always come true. Discover one of the finest Resorts in Portugal. <br /> <br /> &lt;br&gt; <br /> <br /> *Total Rooms: 11 <br /> *“All In One” with 474 m2 <br /> *Capacity for 450 persons <br /> *Moveable walls in 4 rooms (“All in One”) <br /> *Wireless Internet access in all rooms and public areas <br /> *Available Av systems, top of the line, for rent <br /> *9 rooms with natural light <br /> *Air conditioning<br /> <br /> &lt;br&gt; <br /> <br /> [[Image:Inside-venue2011.jpg]]&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> [http://www.quintadamarinha.com Website] <br /> <br /> &lt;br&gt; <br /> <br /> A Day in Lisbon, Portugal:<br /> <br /> &lt;br&gt; &lt;br&gt;Click this link to see all the City of Lisbon has to offer, which is only a short train ride from the resort.&lt;br&gt;http://www.golisbon.com/portugal/cities/cascais.html&lt;br&gt;or&lt;br&gt;http://www.travel-in-portugal.com/Cascais/&lt;br&gt;Lisbon - Spreading out along the right bank of the Tagus, its downtown, the Baixa, is located in the 18th-century area around Rossio. East of the arcade Praça do Comércio, are the medieval quarters of Alfama and Mouraria, crowned by the magnificent St. George's Castle. To the west lie Bairro Alto and Madragoa, with their typical streets, and on the western extreme is Belém, with its Belém Tower, (the sentinel over the Tagus river that protects the entrance into Lisbon), the Jerónimos Monastery (masterpieces of Manueline architecture and classified in UNESCO's International Heritage list) and the Cultural Center of Belém.&lt;br&gt;Museums: Ancient Art, Chiado (Contemporary Art), Tile, Archaeology, Ethnology, Coach, Costume, Theater, Maritime, Military, City, Gulbenkian, Modern Art Center, and the Ricardo Espirito Santo Silva Foundation. Palaces open to the public: Ajuda and Fronteira. Churches: Cathedral (with Treasury); São Vicente de Fora; Conceição Velha (Manueline), São Roque and Sacred Art; Madre Deus; Santa Engrácia Pantheon (Baroque), and the Estrela Basilica.&lt;br&gt;Shopping: Downtown; Avenida de Roma, Praça de Londres, Avenida Guerra Junqueiro, and Amoreiras. &lt;br&gt;Nightlife: Bairro Alto and Avenida 24 de Julho.&lt;br&gt;Guided Tours&lt;br&gt;&lt;br&gt; <br /> <br /> &lt;br&gt; <br /> <br /> ==== Sponsoring ====<br /> <br /> We will welcome a few sponsors of this very special event, typically organization that participate in the summit. If you are interested in supporting the global summit, please contact Lorna.Alamri at owasp.org. <br /> <br /> &lt;br&gt; <br /> <br /> '''Attendees that qualify to be sponsored by OWASP&lt;br&gt;Some leaders that are active within OWASP may qualify to have all or partial transportation and lodging paid for by OWASP.&lt;br&gt;To be considered for qualification, you must meet one or more of the following criteria:''' <br /> <br /> #Member of the OWASP Board <br /> #Member of a global committee that has been active in the last 6 months. This will be verified by the leader(s) of the committee. <br /> #Key personnel that are integral to the operation of the summit<br /> <br /> If you feel you might qualify, please contact Brad Causey or Jason Li. If you do not meet these criteria, and still feel that you should be sponsored, please contact Brad Causey or Jason Li. <br /> <br /> &lt;headertabs /&gt;</div> Tara Causey