ESAPI Summit - Revision history

Chris Schmidt at 05:45, 24 August 2011

2011-08-24T05:45:51Z

Webappsecguy: Adding Google Form hyperlink for self sign up.

2011-08-24T04:36:43Z

Adding Google Form hyperlink for self sign up.

Sarah Baso at 21:53, 21 August 2011

2011-08-21T21:53:06Z

Kevin W. Wall at 04:53, 21 August 2011

2011-08-21T04:53:20Z

Chris Schmidt at 22:21, 20 August 2011

2011-08-20T22:21:06Z

Webappsecguy: Updating date of the AppSec USA-specific ESAPI summit to September 21, 2011 (it was previously the 20th), and hyperlinking to appsecusa.org.

2011-08-18T11:17:55Z

Updating date of the AppSec USA-specific ESAPI summit to September 21, 2011 (it was previously the 20th), and hyperlinking to appsecusa.org.

Chris Schmidt at 18:02, 13 June 2011

2011-06-13T18:02:45Z

John Steven: /* Attending the ESAPI Summit */

2011-06-02T16:57:48Z

‎Attending the ESAPI Summit

Jmanico: /* Attending the ESAPI Summit */

2011-06-02T16:53:21Z

‎Attending the ESAPI Summit

Chris Schmidt at 16:34, 2 June 2011

2011-06-02T16:34:40Z

@@ Line 1: / Line 1: @@
-== Summit 2011 ==
+== Summit 2011  ==
-=== Summit Overview ===
+=== Summit Overview  ===
 The ESAPI Summit will be held on September 21, 2011 at [http://www.appsecusa.org OWASP AppSec USA 2011] in Minneapolis, Minnesota.
-=== Agenda ===
+=== Agenda  ===
-{|  cellpadding="2" cellspacing="2" style="border: 2px solid black;"
+{| cellspacing="2" cellpadding="2" style="border: 2px solid black;"
 |- style="background-color: navy;"
 ! style="color: white;" | Start
 ! style="color: white;" | End
 ! style="color: white;" | Topic
 ! style="color: white;" | Description
 ! style="color: white;" | Deliverables
-|-style="background-color: lightgray;"
+|- style="background-color: lightgray;"
 | 0900
 | 0930
 | Mission Briefing
 | Brief summary of where we've been, administrative changes, and outlining the goals and purpose of the Summit
 | n/a
 |-
 | 0930
 | 1030
 | The ESAPI Specification 1.0
 | Review the high level API and determine what methods should remain as '''core''' API's and what should be moved upstream to higher level API's (ie ESAPI-Web, ESAPI-Mobile, etc)
+|
-* [[ESAPI Specification Overview]]
+*[[ESAPI Specification Overview]]
 |- style="background-color: lightblue;"
 | 1030
 | 1045
 | colspan="3" | Coffee Break
 |- style="background-color: lightgray;"
 | 1045
 | 1200
-| The ESAPI Specification 1.0
+| The ESAPI Roadmap
-| colspan="2" | Continuation of the API Specification
+| Take a look at the existing Roadmap, create the roadmap for the next several release cycles.
 |- style="background-color: lightblue;"
 | 1200
 | 1300
 | colspan="3" | Lunch Break and Open Conversation (Provided by OWASP/ESAPI)
 |- style="background-color: lightgray;"
 | 1300
 | 1400
-| The ESAPI Roadmap
+| ESAPI Policies
 | Formally define how to processes for contributers, community, sponsors, submitting issues, reporting security vulnerabilities
+|
-* [[ESAPI How To Contribute]]
+*[[ESAPI How To Contribute]]
-* [[ESAPI Community Contributions]]
+*[[ESAPI Community Contributions]]
-* [[ESAPI Sponsoring]]
+*[[ESAPI Sponsoring]]
-* [[ESAPI Submitting Issues]]
+*[[ESAPI Submitting Issues]]
-* [[ESAPI Vulnerability Reporting]]
+*[[ESAPI Vulnerability Reporting]]
 |- style="background-color: lightgray;"
-| 1500
+| 1400
-| 1630
+| 1500
 | ESTAPI Framework
 | How do we test and ensure that implementations meet the specifications defined in the API in a cross-platform and demonstratible manner?
+|
-* [[ESAPI Testing Framework]]
+*[[ESAPI Testing Framework]]
 |- style="background-color: lightblue;"
-| 1630
+| 1500
-| 1645
+| 1515
 | colspan="3" | Coffee Break
 |-
-| 1645
+| 1515
-| 1745
+| 1615
 | Documentation
 | Identify a Roadmap for ESAPI Documentation. Elect someone to champion this cause and find resources to address the documentation needs. Determine funding levels and budget needed for documentation to happen.
-−
+|
-* [[ESAPI Documentation Roadmap]]
+*[[ESAPI Documentation Roadmap]]
-* [[ESAPI Documentation Sub-Project]]
+*[[ESAPI Documentation Sub-Project]]
-* [[ESAPI Documentation Sub-Project Budget]]
+*[[ESAPI Documentation Sub-Project Budget]]
 |- style="background-color: lightgray;"
-| 1745
+| 1615
-| 1800
+| 1630
 | Mission De-Briefing
 | We have accomplished a lot in the last 3 years as a team. This will be a quick wrap-up by Chris on the 2nd ESAPI Summit Day.
 | n/a
 |- style="background-color: lightblue;"
-| 1800
+| 2100
 | ????
 | ESAPI 2.0GA Release Celebration
-| Celebrate the release of ESAPI 2.0GA (and beyond) with beers with the ESAPI Team (Sponsors: TBA)
+| Celebrate the release of ESAPI 2.0GA (and beyond) with beers with the ESAPI Team (Sponsors/Location: TBA)
 | n/a
 |}
 <noinclude>
 === Attending the ESAPI Summit ===

@@ Line 94: / Line 94: @@
 === Attending the ESAPI Summit ===
-If you are planning to attend this summit, please list your name below so that we can ensure that we have adequate space and materials for everyone.
+If you are planning to attend this summit, please [https://docs.google.com/a/owasp.org/spreadsheet/viewform?formkey=dHBEQ1YtVlcyWHp1RTZ6cHJHdENDc1E6MQ add your name here] so that we can ensure that we have adequate space and materials for everyone.
 * [[User:Chris Schmidt|Chris Schmidt]] - Meeting Leader
@@ Line 102: / Line 102: @@
 <noinclude>
 == Summit 2008 ==

@@ Line 91: / Line 91: @@
 | n/a
 |}
+<noinclude>
 === Attending the ESAPI Summit ===
@@ Line 101: / Line 101: @@
 * [[User:Kevin W. Wall|Kevin Wall]] - CenturyLink; ESAPI crypto guy
 == Summit 2008 ==
@@ Line 168: / Line 169: @@
 __NOTOC__
 [[Category:OWASP Enterprise Security API]]

@@ Line 99: / Line 99: @@
 * [[User:jmanico|Jim Manico]] - ESAPI Project Manager
 * [[User:John Steven|jOHN Steven]] - Cigital Principal, ESAPI Malcontent
 == Summit 2008 ==

@@ Line 7: / Line 7: @@
 === Agenda ===
-* 09:00 - 09:30 Mission Briefing
+{|  cellpadding="2" cellspacing="2" style="border: 2px solid black;"
-** Review Project Definition and Mission Statement (update if necc.)
+|- style="background-color: navy;"
-* 09:30 - 10:30 Brain Dump
+! style="color: white;" | Start
-** Get everyones "big-picture" ideas up on the board
+! style="color: white;" | End
-** Brief statement about each, this should be a fast-paced Mind-Mapping Exercise aimed to get as many ideas as we can on the board as quickly as possible
+! style="color: white;" | Topic
-* 10:30 - 10:45 Break time
+! style="color: white;" | Description
-** Good job, get some coffee and some air and get prepared for the real work.
+! style="color: white;" | Deliverables
-* 10:45 - 12:00 Bug Hunt
+|-style="background-color: lightgray;"
-** Review the list of existing ESAPI Bugs, assign a champion to them, and prioritize per champion
+| 0900
-* 12:00 - 13:00 Lunch - Open Conversation
+| 0930
-** Lunch to be provided by OWASP/ESAPI
+| Mission Briefing
-* 13:00 - 15:00 Where do we go now?
+| Brief summary of where we've been, administrative changes, and outlining the goals and purpose of the Summit
-** Now that the bugs are fresh in our heads, let's revisit our master wish-list from earlier and prioritize future enhancements, lay them out into a version roadmap (not a calendar roadmap). Some of these enhancements will likely jump out as high-priority and others as nice-to-haves. It should also be remembered, that a version roadmap is a organic document, it will constantly change and evolve to meet the demands of our users. This is just a first step in getting such a roadmap in place.
+| n/a
-* 15:00 - 15:15 Break time
+|-
-** Get some air, there is sure to be some great debate to reflect on
+| 0930
-* 15:15 - 16:00 Formally define the following policies
+| 1030
-** Becoming a Committer
+| The ESAPI Specification 1.0
-** Submitting Contributed Components
+| Review the high level API and determine what methods should remain as '''core''' API's and what should be moved upstream to higher level API's (ie ESAPI-Web, ESAPI-Mobile, etc)
-** Reporting Security Vulnerabilities
-* 16:00 - 18:00 Aligning the ESAPI Projects
+* [[ESAPI Specification Overview]]
-** How do we bring all of the implementations into alignment as far as the API is concerned
+|- style="background-color: lightblue;"
-** How do we ensure that all implements adhere to the contract of the API
+| 1030
-** What level of adherement to the specification do we enforce to "sign off" on various implementations
+| 1045
+| colspan="3" | Coffee Break
-=== Deliverables ===
+|- style="background-color: lightgray;"
+| 1045
 * [[ESAPI Roadmap]]
-* [[How to become a committer]]
+|-
-* [[How to submit contributions]]
+| 1400
-* [[How to report security vulnerabilities]]
+| 1500
-* [[ESAPI Cross Platform Specification]]
+| ESAPI Policies
 === Attending the ESAPI Summit ===

← Older revision		Revision as of 16:53, 2 June 2011
Line 44:		Line 44:

	* [[User:Chris Schmidt\|Chris Schmidt]] - Meeting Leader		* [[User:Chris Schmidt\|Chris Schmidt]] - Meeting Leader
		+	* [[User:jmanico\|Jim Manico]] - ESAPI Project Manager

	== Summit 2008 ==		== Summit 2008 ==