Cincinnati - Revision history

Aleisring: /* The Softer Side of Security */

2019-11-08T16:10:01Z

‎The Softer Side of Security

Aleisring: /* October 2019 Meeting */

2019-11-08T16:01:14Z

‎October 2019 Meeting

Aleisring: /* October 2019 Meeting */

2019-11-08T15:59:52Z

‎October 2019 Meeting

Aleisring at 18:58, 30 October 2019

2019-10-30T18:58:59Z

Aleisring at 18:58, 30 October 2019

2019-10-30T18:58:32Z

Aleisring at 18:57, 30 October 2019

2019-10-30T18:57:43Z

Aleisring: Editied the "join now" link to point toward the Google Group

2019-10-30T18:54:25Z

Editied the "join now" link to point toward the Google Group

Aleisring: Adding presentation, but better.

2019-09-05T15:35:23Z

Adding presentation, but better.

Aleisring: Adding details and slides

2019-09-05T15:34:36Z

Adding details and slides

Aleisring: /* August 2019 Meeting */

2019-08-06T12:10:12Z

‎August 2019 Meeting

@@ Line 25: / Line 25: @@
 '''Speaker Biography''': Allison Shubert has over 19 years experience in information technology, application security architecture, and risk management. She combines her development background and risk management skills to assists businesses in managing the changing landscape of cyber security. She hold a master’s of science degree in information assurance and the CISSP and the CSSLP certifications. She regularly serves as a SME to ISC@ for the exam creation. She has also served on the paper selection committee for the OWASP global conferences for the last three years.
-'''Presentation:'''
+'''Presentation:''' https://www.owasp.org/images/e/ed/Allison-Shubert_The-Softer-Side-of-Security.pdf
 == August 2019 Meeting ==

@@ Line 25: / Line 25: @@
 '''Speaker Biography''': Allison Shubert has over 19 years experience in information technology, application security architecture, and risk management. She combines her development background and risk management skills to assists businesses in managing the changing landscape of cyber security. She hold a master’s of science degree in information assurance and the CISSP and the CSSLP certifications. She regularly serves as a SME to ISC@ for the exam creation. She has also served on the paper selection committee for the OWASP global conferences for the last three years.
 '''Presentation:'''
 == August 2019 Meeting ==

← Older revision		Revision as of 15:59, 8 November 2019
Line 17:		Line 17:

	If you are interested in presenting at one of the chapter meetings please send an abstract and bio to the [mailto:adam.leisring@owasp.org chapter chair (Adam Leisring)]. Prior to participating, please review the [https://www.owasp.org/index.php/Chapter_Rules Chapter Rules].		If you are interested in presenting at one of the chapter meetings please send an abstract and bio to the [mailto:adam.leisring@owasp.org chapter chair (Adam Leisring)]. Prior to participating, please review the [https://www.owasp.org/index.php/Chapter_Rules Chapter Rules].
		+
		+	== October 2019 Meeting ==
		+
		+	=== The Softer Side of Security ===
		+	'''Discussion Abstract:''' Having technical skills to help solve problems is a necessity, but what about navigating the world of execution? Ultimately we depend on many others to achieve our objectives. As skilled professionals we need to hone more than just our technical skills. Join us in a discussion that explores what a well-rounded security professional needs in order to build an effective application security program.
		+
		+	'''Speaker Biography''': Allison Shubert has over 19 years experience in information technology, application security architecture, and risk management. She combines her development background and risk management skills to assists businesses in managing the changing landscape of cyber security. She hold a master’s of science degree in information assurance and the CISSP and the CSSLP certifications. She regularly serves as a SME to ISC@ for the exam creation. She has also served on the paper selection committee for the OWASP global conferences for the last three years.
		+
		+	'''Presentation:'''

	== August 2019 Meeting ==		== August 2019 Meeting ==

@@ Line 8: / Line 8: @@
 __NOTOC__
-Welcome to the Cincinnati U.S.A. OWASP Local Chapter. The chapter lead is Adam Leisring. The OWASP chapter meetings are free and open to anyone interested in information security, risk management, data protection and application security. Chapter meetings are usually held monthly. <!-- Please consult the [[#2012_Meeting_Calendar|calendar]] for the date of the upcoming meeting.--> If you have never attended a meeting before and you are interested to attend one in the future, please join the [Mailing List https://groups.google.com/a/owasp.org/forum/#!forum/cincinnati-chapter]. The mailing list is also used for sharing application security knowledge among the local community members. You can also review the [https://lists.owasp.org/pipermail/owasp-cincinnati/ email archives] to see what local folks have been talking about.
+Welcome to the Cincinnati U.S.A. OWASP Local Chapter. The chapter lead is Adam Leisring. The OWASP chapter meetings are free and open to anyone interested in information security, risk management, data protection and application security. Chapter meetings are usually held monthly. <!-- Please consult the [[#2012_Meeting_Calendar|calendar]] for the date of the upcoming meeting.--> If you have never attended a meeting before and you are interested to attend one in the future, please join the [https://groups.google.com/a/owasp.org/forum/#!forum/cincinnati-chapter Mailing List]. The mailing list is also used for sharing application security knowledge among the local community members. You can also review the [https://lists.owasp.org/pipermail/owasp-cincinnati/ email archives] to see what local folks have been talking about.
 The board currently includes the following members:

@@ Line 8: / Line 8: @@
 __NOTOC__
-Welcome to the Cincinnati U.S.A. OWASP Local Chapter. The chapter lead is Adam Leisring. The OWASP chapter meetings are free and open to anyone interested in information security, risk management, data protection and application security. Chapter meetings are usually held monthly. <!-- Please consult the [[#2012_Meeting_Calendar|calendar]] for the date of the upcoming meeting.--> If you have never attended a meeting before and you are interested to attend one in the future, please join the [https://groups.google.com/a/owasp.org/forum/#!forum/cincinnati-chapter]. The mailing list is also used for sharing application security knowledge among the local community members. You can also review the [https://lists.owasp.org/pipermail/owasp-cincinnati/ email archives] to see what local folks have been talking about.
+Welcome to the Cincinnati U.S.A. OWASP Local Chapter. The chapter lead is Adam Leisring. The OWASP chapter meetings are free and open to anyone interested in information security, risk management, data protection and application security. Chapter meetings are usually held monthly. <!-- Please consult the [[#2012_Meeting_Calendar|calendar]] for the date of the upcoming meeting.--> If you have never attended a meeting before and you are interested to attend one in the future, please join the [Mailing List https://groups.google.com/a/owasp.org/forum/#!forum/cincinnati-chapter]. The mailing list is also used for sharing application security knowledge among the local community members. You can also review the [https://lists.owasp.org/pipermail/owasp-cincinnati/ email archives] to see what local folks have been talking about.
 The board currently includes the following members:

← Older revision		Revision as of 18:54, 30 October 2019
Line 3:		Line 3:

	{{Chapter Template\|chaptername=Cincinnati\|extra=The chapter leader is [mailto:adam.leisring@owasp.org Adam Leisring].		{{Chapter Template\|chaptername=Cincinnati\|extra=The chapter leader is [mailto:adam.leisring@owasp.org Adam Leisring].
−	\|mailinglistsite=~~http~~://~~lists~~.owasp.org/~~mailman~~/~~listinfo~~/~~owasp~~-~~cincinnati~~\|emailarchives=http://lists.owasp.org/pipermail/owasp-cincinnati}}	+	\|mailinglistsite=https://groups.google.com/a/owasp.org/forum/#!forum/cincinnati-chapter\|emailarchives=http://lists.owasp.org/pipermail/owasp-cincinnati}}

@@ Line 33: / Line 33: @@
 Ryan Hamrick - While gaining experience in a number of business verticals including manufacturing, finance/banking, and technology consultancy, Ryan Hamrick has performed at a high level in the security industry for the past 11 years. In an IT career spanning 20+ years, Ryan has gained expertise in wide variety of areas spanning software engineering, web application design and deployment, desktop support, security incident response, and security engineering. He is currently applying the knowledge gained through these experiences in order to provide expert level security consulting services for CBTS customers focusing on security policy and procedure design, holistic security architecture review, web application assessments, external and internal penetration testing and vulnerability assessments, social engineering assessments, and cloud security assessments.
-'''Link to Presentation''': https://www.owasp.org/index.php/File:SSRF.pdf
+'''Link to Presentation''': https://www.owasp.org/images/6/65/SSRF.pdf
 == June 2019 Meeting ==

@@ Line 20: / Line 20: @@
 == August 2019 Meeting ==
-=== Server Side Request Forgery (SSRF) attack, and how to defend against it ===
+=== Server Side Request Forgery (SSRF) Attack Scenario and Defense Options ===
 '''When''': August 28th, 2019. 11:30 AM
 '''Where''': Paycor, 4811 Montgomery Road, Norwood, Ohio 45212
-'''Discussion Abstract''': Coming soon
+'''Discussion Abstract''': SSRF - Attack scenario and Defense options A relatively new attack in today's threat landscape is the Server Side Request Forgery, or SSRF. Theorized by many to have been the initial attack vector in the recent Capital One breach, this attack could provide external "command proxy" type access to an interested threat actor in a difficult to mitigate fashion. During this session, CBTS will talk about the typical flow of an SSRF attack, execute a demo attack against a target, and discuss possible defense scenarios that can be used to detect and/or protect an organization from this potential exposure.
-'''Speaker Biography''': Coming Soon
+'''Speaker Biography''':
 == June 2019 Meeting ==

← Older revision		Revision as of 12:10, 6 August 2019
Line 21:		Line 21:

	=== Server Side Request Forgery (SSRF) attack, and how to defend against it ===		=== Server Side Request Forgery (SSRF) attack, and how to defend against it ===
		+	'''When''': August 28th, 2019. 11:30 AM
		+
		+	'''Where''': Paycor, 4811 Montgomery Road, Norwood, Ohio 45212
		+
	'''Discussion Abstract''': Coming soon		'''Discussion Abstract''': Coming soon