Summit 2011 Working Sessions/Session052

Global Summit 2011 Home Page
Global Summit 2011 Tracks

OWASP Testing Guide
Please see/use the 'discussion' page for more details about this Working Session
Working Sessions Operational Rules - Please see here the general frame of rules.

WORKING SESSION IDENTIFICATION
Short Work Session Description	We need to define: - an updated vulnerability list to test (from the OWASP Common Vulnerabiltity list) - Create a more readable guide, eliminating some sections that are not really useful, - Insert new testing techniques: HTTP Verb tampering, HTTP Parameter Pollutions, etc., - Rationalize some sections as Session Management Testing, - Debate if create a new section: Client side security and Firefox extensions testing.
Related Projects (if any)	OWASP Testing Project
Email Contacts & Roles	Chair Matteo Meucci @	Operational Manager Giorgio Fedon	Mailing list Subscription Page

WORKING SESSION SPECIFICS
Objectives	Show the v3, and debating what we need to create an excellent v4
Venue/Date&Time/Model	Venue/Room OWASP Global Summit Portugal 2011	Date & Time TODO	Discussion Model participants and attendees

WORKING SESSION OPERATIONAL RESOURCES
Projector, whiteboards, markers, Internet connectivity, power

WORKING SESSION ADDITIONAL DETAILS
The presence of participants on the Working Session Common structure and numbering for all guides is advisable.

WORKING SESSION OUTCOMES / DELIVERABLES
Proposed by Working Group	Approved by OWASP Board
An updated outline for the testing guide that is tied into the OWASP common numbering scheme	After the Board Meeting - fill in here.
A short white paper with ideas for revisions to the Testing Guide for evaluation and discussion by the community at large.	After the Board Meeting - fill in here.
A committed project manager who can reach out to experts to get the document completed.	After the Board Meeting - fill in here.
	After the Board Meeting - fill in here.
	After the Board Meeting - fill in here.
	After the Board Meeting - fill in here.
	After the Board Meeting - fill in here.
	After the Board Meeting - fill in here.

Working Session Participants

(Add you name by clicking "edit" on the tab on the upper left side of this page)

WORKING SESSION PARTICIPANTS
Name	Company	Notes & reason for participating, issues to be discussed/addressed
Nishi Kumar @	FIS
Cecil Su @	GT
Lucas C. Ferreira @
Keith Turpin @
Achim Hoffmann @	sic[!]sec
Tom Neaves @	Verizon Business
Vishal Garg @	AppSecure Labs
Giorgio Fedon @	Minded Security
Stefano Di Paola @	Minded Security
Pavol Luptak @	Nethemba
Andre Gironda @		Will be available remotely
Edward Bonver @	Symantec
Wojciech Dworakowski @	SecuRing
Vlatko Kosturjak @
Antonio Fontes @	L7 Sécurité
Christian Martorella @	Verizon Business