View source for Projects/Reports/2013-26-04

__TOC__
= OWASP Global Projects Report =

*'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJucVE&usp=sharing Project Numbers]'''
**Active Projects: 149
**Inactive Projects: 67

*'''New OWASP Projects'''
**[https://www.owasp.org/index.php/OWASP_Web_Application_Security_Quick_Reference_Guide_Project OWASP Web Application Security Quick Reference Guide Project]
**[https://www.owasp.org/index.php/OWASP_Application_Fuzzing_Framework_Project OWASP Application Fuzzing Framework Project]
**[https://www.owasp.org/index.php/OWASP_Security_JDIs_Project OWASP Security JDIs Project]

*'''[https://docs.google.com/a/owasp.org/spreadsheet/ccc?key=0Amvv_7Gz8Z7TdHZfWGhHZ0Z4UFFwZU42djBXcVVLSlE#gid=0 Project Applications]'''
**OWASP WS-Amplification DoS Project
**OWASP Mutillidae 2 (Codename: NOWASP) Project
**OWASP Skanda - SSRF Exploitation Framework Project

*'''Projects Under Review'''
**[https://www.owasp.org/index.php/Cheat_Sheets OWASP Cheat Sheets Project]
**[https://www.owasp.org/index.php/OWASP_Java_HTML_Sanitizer_Project OWASP Java HTML Sanitizer Project]
**[https://www.owasp.org/index.php/OWASP_Xenotix_XSS_Exploit_Framework Xenotix XSS Exploit Framework]
**Project reviews are on hold until we can fill the [https://www.owasp.org/index.php/Projects/Reviews_Management_Proposal_2013 Technical Project Advisor] [http://owasp.force.com/volunteers/GW_Volunteers__VolunteersJobListing?campaignid=701U0000000AUtE volunteer roles]. 

==Currently Working On==    

*'''OWASP Marketing'''
**I worked with Sisterworks Publishing this week on organizing a webinar for our community. 
**They were meant to present their Phase 2 recommendations to us on Thursday during a live webinar. 
** Unfortunately, the presenters were not able to make it during the regular time.
**I stepped in and presented their recommendations to the community. 
**[https://www.dropbox.com/s/q86txkc5d4nizqp/2013-04-25%2010.00%20OWASP%20Global%20Webinar%20April%2025%2C%202013.wmv Webinar Video:] Thank you to Kate for recording and uploading the video. 
**[https://www.owasp.org/images/c/c5/OWASP_Recommendations-Presentation2-April24.pdf Sisterworks Publishing recommendations to OWASP]. 

*'''Determining Active Project Status'''
**All existing project meta data has been entered into SalesForce.
**There are still quite a few challenges with managing all of this data.
**I've determined that we must first confirm that our Active projects are indeed Active, and that the named project leader is accurate as well.
**I am reaching out to each leader individually to confirm these two key pieces of data for all 148 projects. 

*'''Projects at AppSec EU'''
**I have put together several communications pieces, instructions, forms, and scheduled deadlines for the AppSec EU Open Source Showcase (OSS).
**As mentioned in my previous report, the local event organizers are already trying to allocate presenters for the OWASP Projects Track (OPT). 
**I don't anticipate needing to have a call for entries for the OPT, but I am prepared if we find we need to. 
**[https://docs.google.com/document/d/1dOrUYtwlBXwfhPyZa9JYqV1MeUUjSxvjm5mwgMqJXhE/edit?usp=sharing Projects at AppSec EU Document].
**[https://docs.google.com/a/owasp.org/spreadsheet/viewform?formkey=dGhkUUhkeDBWOVZPcVdzcWloYWhla3c6MA#gid=0 AppSec EU OSS Call for Entries].

*'''[https://www.owasp.org/index.php/Projects/Project_Funds_Proposal Project Funds Proposal]'''
**Currently there is $44,654.26 [https://www.owasp.org/images/a/ae/Project_Funds-Q1_2013.pdf due to projects].
** Many projects have a very small budget. 
**In addition, some projects have funds that they have not spent in years.
**Projects that are more active in completing their roadmaps, and moving forward with their milestones, can benefit more from these stagnant funds.
**A project bounty initiative is proposed as well. It aims to help project leaders find talent and reward dedicated contributors. 
**This proposal aims to facilitate the spending of these stagnant funds, and assist project leaders with talent acquisition for their projects and rewards. 

*'''Personal Development'''
**I am always looking for different ways of improving my skills so I have developed a list of personal development activities I wish to undertake for the year.
**I have each activity separated into quarters.
**This quarter, Q2, I am focusing on increasing my Information Security knowledge and understanding. 
**To do this, I am taking a 7 week course on [https://www.coursera.org/course/inforiskman Information Security and Risk Management in Context].
**The course is made available through Coursera. 

*'''Daily Project based queries and requests'''
**This has not changed much since I began the post: questions are very similar in nature. 
**Global AppSec questions.
**Funding queries.
**Travel availability.
**Project based administrative help.
**Project status information.
**Several project donations questions.
**OWASP Social Media Updates.
**What's happening with projects, questions.

==Grants Updates==
*'''Guidebooks Grant'''
#Amount: $25,000
#Status: We have received our first payment from DHS.    

*'''ESAPI Proposal'''
#Amount: $25,000
#Status: The ESAPI proposal is still being reviewed. 

*'''ModSecurity Grant Writing'''
#Amount: $30,000
#Status: The ModSecurity proposal is still being reviewed.  

*'''Google Grants Proposal'''
#Amount: $120,00 in Adwords Funds
#Status: We continue to test different keywords and strategies to try and find the best way to leverage this grant award. We are currently testing a strategy for the AppSec USA conference this year. I have contacted Joseph McElroy who is the CEO of Corporate Performance Artists in New York, USA. Corporate performance Artist is a community management firm that specializes in SEO, Google Analytics, and Google Grants Adwords campaigns. He had some amazing insights for me. I am currently reviewing these recommendations.

*'''LSEC Web Attack Proposal'''
#Amount: TBD (Will be in Euros)
#Status: This proposal is currently being put together by a grant partner. This grant is from the European Commission (EC). They are looking for European organizations to collaborate on research and implementation activities for the EC. If OWASP participates in this initiative, the organization will partner with up to 7 different companies from across the European Union. We are still in the process of writing the proposal and working out logistics. 


*'''Total Grant Funds Awarded: $145,000 for 2013.'''