View source for Front Range Web Application Security Summit Planning Page

==Front Range Web Application Security Summit Planning==
The purpose of this page is to provide a workspace for Denver/Boulder OWASP members to collaborate and plan the upcoming Front Range Web Application Security Summit.
It is official, and we have the meeting space reservation to prove it!
Date:  June 10, 2008
Location:  Tivoli Baerresen Conference Rooms (located on the Auraria Campus in Downtown Denver)

===Call For Papers===
We are seeking presentations for both the Technical and Management tracks at the June 10th conference.  A Call For Papers has been issued.  The deadline for submissions is March 28th, and speakers who are selected will be notified the week of March 31st.  [http://www.owasp.org/images/b/b1/FrontRangeOWASPConferenceCallForPapers2008_final.doc Please download the Call for Papers here]

===Mission Statement===
The purpose of the Front Range Web Application Security Summit is to provide a one-day workshop/conference during which individuals and organizations interested in Web Application Security can congregate to transfer knowledge, increase awareness of application layer security in the enterprise, and meet other like minded individuals.

;Guiding Principles
:No vendor soap boxes
:Open, friendly environment
:High quality content, professional delivery

===Proposed Summit Agenda===
* 08:00 --> 09:00: Registration, coffee, etc.
* 09:00 --> 10:00: [[FRWASS08_Keynote|Opening Keynote]]
* 10:00 --> 10:30: [[FRWASS08_Visionary|Visionary Speaker]]
* 10:30 --> 12:00: [[FRWASS08_TechSession1|Joint Manager/Developer Hands-on session]]
* 12:00 --> 13:00: Lunch
* 13:00 --> 14:30: Breakout Sessions: [[FRWASS08_TechSession2|Tech :: ]][[FRWASS08_MgtSession1|Management/Policy]]
* 14:45 --> 15:45: Breakout Sessions (cont'd): [[FRWASS08_TechSession2|Tech :: ]][[FRWASS08_MgtSession1|Management/Policy]]
* 16:00 --> 17:00: [[FRWASS08_Keynote|Closing Keynote]]
* 17:00 --> ??? Cocktails, etc.

===[[FRWASS08_Planner_Contacts|Planner Contact Info]]===
'''Project Manager:'''  Dariush Rusta

'''Project Leads:''' 

Overall planning and coordination: Kathy Thaxton kthaxton at businesspartnersolutions d0t c0m

Tech track lead:  David Campbell (dcampbell at owasp dot org)

Management track lead: tbd

[http://froc.projectpath.com Project Planning Site] (Basecamp login required)

=Schedule=
----

== FROCo8 Conference Schedule – June 10th 2008 ==
*PLEASE NOTE - This is just a notional schedule. Speaker times/dates/topics WILL change once we have a full agenda.
{| style="width:80%" border="0" align="center"
 ! colspan="3" align="center" style="background:#4058A0; color:white" | June 10th, 2008
 |-
 | style="width:10%; background:#7B8ABD" | || style="width:30%; background:#BC857A" | Tech Track: 
 | style="width:30%; background:#BCA57A" | Management Track: 
 |-
 | style="width:10%; background:#7B8ABD" | 08:00-09:30 || colspan="2" style="width:80%; background:#C2C2C2" align="center" | '''Registration Opens and Tech Expo'''
 |-
 | style="width:10%; background:#7B8ABD" | 09:30-10:30 || colspan="2" style="width:80%; background:#F2F2F2" align="center" | '''Industry Outlook - Jennifer Bayuk-CISO Bear Stearns, Mark Clancy-EVP Citi, Jim Routh-CISO DTCC, Sunil Seshadri-CISO NYSE-Euronet (unconfirmed), Warren Axelrod-SVP Bank of America
Moderator - Mahi Dontamsetti'''
 |-
| style="width:10%; background:#7B8ABD" | 10:30-11:30 || style="width:30%; background:#BC857A" align="left" | Logic Attacks and Inefficiencies of Robotic Detection
''Robert "RSnake" Hansen''
 | style="width:30%; background:#BCA57A" align="left" | Offensive Assessing Financial Apps
''Daniel Cuthbert''
 |-
| style="width:10%; background:#7B8ABD" | 11:30-12:30 || style="width:30%; background:#BC857A" align="left" | Reverse Engineering .NET
''Adam Boulton''
 | style="width:30%; background:#BCA57A" align="left" | JBroFuzz + Crypto not that hard…
''Yiannis Pavlosoglou''
|-
| style="width:10%; background:#7B8ABD" | 12:30-13:30 || style="width:30%; background:#BC857A" align="left" | Black Art White Hat
''Tom Brennan''
 | style="width:30%; background:#BCA57A" align="left" | OWASP CLASP
''Pravir Chandra''
|-
 | style="width:10%; background:#7B8ABD" | 13:30-14:30 || colspan="2" style="width:80%; background:#C2C2C2" align="center" | '''1 HR BREAK / TECH EXPO / LUNCH BREAK'''
|-
| style="width:10%; background:#7B8ABD" | 14:30-15:30 || style="width:30%; background:#BC857A" align="left" | W3AF Web Application Attack and Audit Framework
''Andres Riancho''
 | style="width:30%; background:#BCA57A" align="left" | WASC Hacking Incidents
''Ofer Shezaf''
|-
| style="width:10%; background:#7B8ABD" | 15:30-16:30 || style="width:30%; background:#BC857A" align="left" | OWASP Enterprise Security API (ESAPI) Project
''Jeff Williams''
 | style="width:30%; background:#BCA57A" align="left" | Next Generation Cross Site Scripting Worms
''Arshan Dabirsiaghi''
|-
| style="width:10%; background:#7B8ABD" | 16:30-17:30 || style="width:30%; background:#BC857A" align="left" | Shhhh Don’t Tell Anybody
''Petko D. Petkov, a.k.a. pdp''
 | style="width:30%; background:#BCA57A" align="left" | Secure PHP
''Hans Zaunere''
| style="width:30%; background:#7B8ABD" align="left" | Payment Card Data Security and the new Enterprise Java
''Dr. B. V. Kumar & Mr. Abhay ''
|-
| style="width:10%; background:#7B8ABD" | 17:30-18:30 || style="width:30%; background:#BC857A" align="left" | Notes Security
''Jian Hui Wang''
 | style="width:30%; background:#BCA57A" align="left" | Full Disclosure vs Non-disclosure vs Responsible Disclosure
''Panel''
| style="width:30%; background:#7B8ABD" align="left" | AppSec Techniques
''JD Glaser''
|-
 | style="width:10%; background:#7B8ABD" | 18:30 || colspan="3" style="width:80%; background:#C2C2C2" align="center" | '''Web Application Capture the Flag (All Night – Bring it!!)'''
|-
 | style="width:10%; background:#7B8ABD" | 20:00 || colspan="3" style="width:80%; background:#C2C2C2" align="center" | '''Tuesday Night Reception at [http://websterhall.com/2007_websterhall/ NYC Famous Webster Hall]'''
|-
! colspan="4" align="center" style="background:#4058A0; color:white" | Day 2 – Oct 8, 2008
|-
 | style="width:10%; background:#7B8ABD" | 08:00-09:30 || colspan="3" style="width:80%; background:#C2C2C2" align="center" | '''Web Application Capture the Flag Results'''
|-
 | style="width:10%; background:#7B8ABD" | 09:30-10:00 || colspan="3" style="width:80%; background:#C2C2C2" align="center" | '''Keynote: OWASP Foundation Board – “This thing, we have”'''
|-
| style="width:10%; background:#7B8ABD" | 10:00-11:00 || style="width:30%; background:#BC857A" align="left" | Practical Advanced Threat Modeling
''John Steven''
 | style="width:30%; background:#BCA57A" align="left" | Taking the Risk out of Web 2.0
''Tom Stracener''
| style="width:30%; background:#7B8ABD" align="left" | Building Usable Security
''Zed Abbadi''
|-
| style="width:10%; background:#7B8ABD" | 11:00-12:00 || style="width:30%; background:#BC857A" align="left" | Offshoring Application Development? Security is Still Your Problem
''Rohyt Belani''
 | style="width:30%; background:#BCA57A" align="left" | OWASP Orizon Project
''Paolo Perego''
| style="width:30%; background:#7B8ABD" align="left" | NIST SAMATE Static Analysis Tool Exposition (SATE)
''Vadim Okun''
|-
| style="width:10%; background:#7B8ABD" | 12:00-13:00 || style="width:30%; background:#BC857A" align="left" | AppSec Research
''Mano Paul''
 | style="width:30%; background:#BCA57A" align="left" | Software Liability
''Jack Danahy''
| style="width:30%; background:#7B8ABD" align="left" | Cross-Site Scripting Filter Evasion
''Alexios Fakos''
|-
 | style="width:10%; background:#7B8ABD" | 13:00-14:00 || colspan="3" style="width:80%; background:#C2C2C2" align="center" | '''1 HR BREAK / TECH EXPO / LUNCH BREAK'''
|-
| style="width:10%; background:#7B8ABD" | 14:00-15:00 || style="width:30%; background:#BC857A" align="left" | Projects with OWASP
''Steve Malson''
 | style="width:30%; background:#BCA57A" align="left" | OWASP Pantera and Web Graph Analysis
''Simon Roses''
| style="width:30%; background:#7B8ABD" align="left" | Software-as-a-Service (SaaS)
''James Landis''
|-
| style="width:10%; background:#7B8ABD" | 15:00-16:00 || style="width:30%; background:#BC857A" align="left" | "Out of Band" Injection
''Vijay Akasapu & Marshall Heilman''
 | style="width:30%; background:#BCA57A" align="left" | OWASP V2 Testing Guide 4.2.3 Spidering and Googling in depth
''Christian Heinrich''
| style="width:30%; background:#7B8ABD" align="left" | Caution, Java ahead
''Jeremiah Grossman''
|-
| style="width:10%; background:#7B8ABD" | 16:00-17:00 || style="width:30%; background:#BC857A" align="left" | TOPIC
''SPEAKERS''
 | style="width:30%; background:#BCA57A" align="left" | TOPIC
''SPEAKERS''
| style="width:30%; background:#7B8ABD" align="left" | TOPIC
''SPEAKERS''
|-
| style="width:10%; background:#7B8ABD" | 17:00-18:00 || style="width:30%; background:#BC857A" align="left" | TOPIC
''SPEAKERS''
 | style="width:30%; background:#BCA57A" align="left" | TOPIC
''SPEAKERS''
| style="width:30%; background:#7B8ABD" align="left" | TOPIC
''SPEAKERS''
|-
 | style="width:10%; background:#7B8ABD" | 18:30 || colspan="3" style="width:80%; background:#C2C2C2" align="center" | '''TBD'''
|-
 | style="width:10%; background:#7B8ABD" | 21:00 || colspan="3" style="width:80%; background:#C2C2C2" align="center" | '''Closing Remarks / Awards / Raffles'''
|}


----
[https://www.owasp.org/index.php/Denver Back to OWASP Denver]

[https://www.owasp.org/index.php/Boulder Back to OWASP Boulder]