AppSec US 2010, CA/Attending Owasp Leaders

Page to manage the participation of the OWASP leaders at the AppSec USA in Irvine USA

Attending Leaders - Confirmed

1. Dan Cornell- San Antonio Chapter and Global Membership Committee
2. Tony UV - Atlanta Chapter
3. Jim Manico - Podcast Project
4. Michael Coates - AppSensor project and Global Membership Committee
5. Martin Knobloch - Education and Connections Committee
6. Robert Hansen - Connections Committee
7. Matt Tesauro - Live CD project, Board Member
8. Dave Wichers - Top 10 project, Board Member
9. Tom Brennan - NYC Chapter Leader, RFP Criteria project, OWASP-CRM, Board Member
10. Jeff Williams - ESAPI project, Board Member
11. Dinis Cruz - O2 Platform project, Board Member
12. David Campbell - Denver Chapter, Industry Committee
13. Eric Duprey - Denver Chapter
14. Justin Clarke - London Chapter and Connections Committee
15. Roman Hustad - Sacramento Chapter
16. Peter Dean - NYC Chapter Leader
17. Georg Hess - German Chapter, Industry Committee
18. John Steven - NoVA Chapter Lead
19. Lorna Alamri - Connections Committee
20. Chris Schmidt - ESAPI Project
21. David Bryan - MSP Chapter Leader
22. Eric Duprey - Denver Chapter Leader
23. Mandeep Khera -

Part of the conference organization

1. Cassio Goldschmidt - Los Angeles Chapter
2. Tin Zaw - Los Angeles Chapter
3. Richard Greenberg - Los Angeles Chapter
4. Neil Matatall - [Orange County Chapter]
5. Kate Hartmann - OWASP Foundation
6. Alison McNamee - OWASP Foundation (remote support)

Also attending (part of OWASP community)

1. Joseph Dawson
2. Howard Fore - Atlanta Chapter (Bring a Developer Attendee)
3. Jon Bango - Atlanta Chapter (Bring a Developer Attendee)
4. August Detlefsen - (Bring a Developer Attendee)

Key WebAppSec players

objective: identfy potential synergies between WebAppSec industry players and OWASP leaders (for example too meet and have a meeting)

• Firefox Browser
  • There are a number of Firefox employees participating and they have shown interest in talking to OWASP about how we can work together
    • Michael Coates (Owasp Leader)
    • Sid Stamm
    • Brandon Sterne
    • Dan Veditz

Developers and QA participating

Sponsored by the Atlanta Chapter

1. Howard Fore (Atlanta Developer) - Howard Fore is a senior web developer in Atlanta, Georgia. He's involved in some high-visibility web projects at the Federal Reserve Bank of Atlanta. Increasing awareness of secure software development practices is an departmental objective for 2010 and he's a member of the security workgroup, which is leading the way in that endeavor. Other practices the security workgroup are implementing include static code analysis and code inspection.
2. Jon Bango (Atlanta Developer) - Jon Bango is an Information Technology professional with over 13 years experience in the education, financial services and retail industries. Primarily working at the enterprise level, Jon has utilized the J2EE stack in building web applications for the largest home improvement retailer in the world. Most recently he has branched out into RIA technologies working in Adobe Flex and Microsoft Silverlight. Currently, Jon has transitioned into the dark arts at his company’s Information Assurance department in which the groundwork has been laid to utilize his developer talents to create a company wide secure coding initiative.
3. August Detlefsen (Oakland Developer) - August Detlefsen is a 13+ year Java web architect veteran. As an independent contractor he has developed solutions for such companies as Sun Microsystems, Oracle, VMware, NetApp and others, managing all phases of the software development lifecycle from initial specification to final disposal. August recently began focusing on web application security and has worked on projects for WhiteHat Security, Security Compass, and AppSec Consulting and donated time on the OWASP ESAPI and AppSensor projects.

Meetings and sessions

So far we have identified 6 slots were there will be an event happening around this group

• Wed Lunch Break : 'ESAPI4JS: Where do we go from here?'
• Wed Night : 9PM-12PM Drinks at TDB
• Thursday Lunch Break : 'OWASP and the Browsers: How can we work together?'
• Thursday After the conference : OWASP Leaders meeting
• Thursday Night : TBD (and maybe the OWASP band?)
• Friday Lunch Break : OWASP Summit 2011
• Friday After the conference : AppSec Soccer Tournament
• Friday Night : TDB

Note that there are meeting facilities available, so if you need a quite space to meet and talk about OWASP let us know.

How to track an OWASP Leader

Ideally we should be able to track OWASP leaders, the question is how?

What could we give the leaders that would easily identify them (in practical and usable way):

• a special wristband
  • with a particular color?
  • with a particular logo or message?
  • wth a GPC tag? (or auto-location-tweet)
• an armband
• a hat
• a scarf
• a t-shirt
• a bag
• with a paintball gun?

AppSec Soccer Tournament

When: Friday after the conference
Where: TBC
Participants:

• Dinis Cruz
• Kate Hartmann (can also be a referre)

To do (tasks)

• for each each participant
  • link to MediaWiki user page
  • add twitter accounts
• Travel arrangements
  • map travel dates
  • when/where they are arriving
  • where are they staying
• figure out what to do with the leaders when they are there
• should we create a welcome pack for these leaders?
• should we see if they need help in their travel arrangements?
• should we see if its possible to find a local host for the accomodation (it is always better than going into an hotel)?
• do we need a budget? if so, how much?