GPC/Meetings/2013-22-03 - Revision history

Samantha Groves at 20:22, 21 March 2013

2013-03-21T20:22:03Z

Samantha Groves at 20:15, 21 March 2013

2013-03-21T20:15:50Z

Samantha Groves at 18:58, 21 March 2013

2013-03-21T18:58:13Z

Samantha Groves at 18:48, 21 March 2013

2013-03-21T18:48:53Z

Samantha Groves: Created page with "TOC = Project Division Updates = *'''[https://docs.google.com/a/owasp.org/spreadsheet/ccc?key=0AllOCxlYdf1AdFdaYXJ6SDFXNXBaemNwbnNHN3N5RVE#gid=16 Project Numbers]''' **Ac..."

2013-03-21T18:23:21Z

Created page with "__TOC__ = Project Division Updates = *'''[https://docs.google.com/a/owasp.org/spreadsheet/ccc?key=0AllOCxlYdf1AdFdaYXJ6SDFXNXBaemNwbnNHN3N5RVE#gid=16 Project Numbers]''' **Ac..."

New page

__TOC__
= Project Division Updates =

*'''[https://docs.google.com/a/owasp.org/spreadsheet/ccc?key=0AllOCxlYdf1AdFdaYXJ6SDFXNXBaemNwbnNHN3N5RVE#gid=16 Project Numbers]'''
**Active Projects: 139
**Inactive Projects: 67

*'''Projects Under Review'''
**[https://www.owasp.org/index.php/Cheat_Sheets OWASP Cheat Sheets Project]
**[https://www.owasp.org/index.php/OWASP_Java_HTML_Sanitizer_Project OWASP Java HTML Sanitizer Project]
**[https://www.owasp.org/index.php/OWASP_Codes_of_Conduct OWASP Codes of Conduct]
**[https://www.owasp.org/index.php/OWASP_Xenotix_XSS_Exploit_Framework Xenotix XSS Exploit Framework]

*'''[https://docs.google.com/a/owasp.org/spreadsheet/ccc?key=0Amvv_7Gz8Z7TdHZfWGhHZ0Z4UFFwZU42djBXcVVLSlE#gid=0 Project Applications]'''
**OWASP Top 10 fuer Entwickler

==Currently Working On==

*'''Black Hat EU 2013'''
**I attended the Black Hat EU conference this week.
**I helped set up and manage our OWASP Booth for two days.
**I was also able to attend the Netherlands Chapter meeting.
**Martin Knobloch, Dennis Groves, and Anil Pazvant volunteered at the event as well.
**For more details, please read my [https://docs.google.com/document/d/1ghKPMKla3Ol1hhoCZWOhAgdnInRNmZr_7D1A6CULKyc/edit?usp=sharing Black Hat EU 2013 Post Conference Report.]

*'''OWASP University Challenge & CTF at Global AppSecs'''
**Martin Knobloch and I were able to meet and talk about how to bring University Challenge and the Capture the Flag event modules to AppSec EU Research, USA, and Latam.
**There were some concerns over space availability for these event modules.
**We proposed having the OSS, CTF, and University Challenge event modules share a room.
**We are waiting to hear back from Dirk regarding logistics.

*'''OWASP at Hack in the Box: Kuala Lumpur, Malaysia'''
**I had the fantastic opportunity to meet with the CEO of Hack in the Box, Mr. Dhillon Kannabhiran.
**We spoke about a possible partnership between OWASP and Hack in the Box.
**We currently have a booth for the Amsterdam event, and I negotiated a booth for us at the Kuala Lumpar, Malaysia event as well.
**Logistics are currently being developed and planned.

*'''OWASP Asia Leadership Outreach Project'''
**This Asia Leadership Outreach Project came about during the discussion Dhillon and I had about OWASP at the Kuala Lumpar, Hack in the Box event.
**He mentioned that he has offered OWASP a booth at the Kuala Lumpar, Hack in the Box event for a few years.
**However, the local OWASP chapter volunteers have not been able to represent OWASP very well at his conference.
**We suggested developing an OWASP Malaysia and Singapore outreach project that would involve a workshop, and the co-running of the Hack in the Box booth by members of both chapters.
**Dhillon agreed that developing a workshop with more experienced leaders giving primary direction, will help the Malaysian and Singaporean chapters understand their responsibilities at similar outreach events.
**I am currently putting together a proposal for this project.

*'''Daily Project based queries and requests'''
**This has not changed much since I began the post: questions are very similar in nature.
**Global AppSec questions.
**Funding queries.
**Travel availability.
**Project based administrative help.
**Project status information.
**Several project donations questions.
**OWASP LinkedIn Updates.
**What's happening with projects, questions.

==Grants Updates==
*'''Guidebooks Grant'''
#Amount: $25,000
#Status: We are still waiting for payment from DHS.

*'''ESAPI Proposal'''
#Amount: $25,000
#Status: The ESAPI proposal is still being reviewed.

*'''ModSecurity Grant Writing'''
#Amount: $30,000
#Status: The ModSecurity proposal is still being reviewed.

*'''Google Grants Proposal'''
#Amount: $120,00 in Adwords Funds
#Status: I have begun managing the Adwords account regularly. I am waiting until we reach the implementation phase with our marketing company.

*'''Total Grant Funds Awarded: $145,000 for 2013.'''

[[Category:GPC_Meetings]]
[[Category:GPC_Meetings/2013]]

@@ Line 30: / Line 30: @@
 **The working group will be made up of the following areas: Secure Development, Secure Lifecycle Activity, Static Analysis, Dynamic Analysis, Governance, and Education.
 **These roles will be responsible for reviewing projects, and increasing the quality of the project review process and criteria.
-**I have put together role description and experience requirements for each technical advisor volunteer role.
+**I have put together experience requirements for each technical advisor volunteer role.
 **To read the full descriptions, please visit the [https://docs.google.com/document/d/1zqDf9CJeCj-uE5kFA_DwkDbHWTQDI9NNPdxOpU-KTl4/edit?usp=sharing advisory role descriptions document].
@@ Line 41: / Line 41: @@
 *'''Project Leader Responsibilities & Expectations'''
-**I am currently working on putting together documentation that outlines a Project Leader's responsibilities, and our organizational expectations of them.
+**I am currently working on putting together documentation that outlines a project leader's responsibilities, and our organizational expectations of them.
 **I am also developing a "How to run a successful OWASP project" document.
-**Jim and I are developing a brand usage guideline for our projects.
+**Jim and I are developing brand usage guidelines for our project leaders.
-**An OWASP Project Lifecycle info graphic is being developed as well.
+**An OWASP project lifecycle info graphic is being developed as well.
-**I hope that these "How To" documents and graphics will help project leaders understand their responsibilities, and how to leverage the OWASP Project infrastructure for success.
+**I hope that these "How To" documents and graphics will help project leaders understand their responsibilities, and how to leverage the OWASP project infrastructure for success.
 *'''Daily Project based queries and requests'''

@@ Line 18: / Line 18: @@
 *'''OWASP Asia Leadership Outreach Project'''
-**This Asia Leadership Outreach Project came about during the discussion Dhillon and I had about OWASP at the Kuala Lumpar, Hack in the Box event.
+**This Asia Leadership Outreach Project came about during the discussion Dhillon and I had about OWASP at the Kuala Lumpur, Hack in the Box event.
-**He mentioned that he has offered OWASP a booth at the Kuala Lumpar, Hack in the Box event for a few years, but local chapters have not represented OWASP very well.
+**He mentioned that he has offered OWASP a booth at the Kuala Lumpur, Hack in the Box event for a few years, but local chapters have not represented OWASP very well.
 **We suggested developing an OWASP Malaysia and Singapore outreach project that would involve a workshop, and the co-running of the Hack in the Box booth by members of both chapters.
 **I have put together a proposal where I outline a 3 day outreach initiative that aims to bring more experienced chapter leaders to the region for a workshop.
@@ Line 33: / Line 33: @@
 **To read the full descriptions, please visit the [https://docs.google.com/document/d/1zqDf9CJeCj-uE5kFA_DwkDbHWTQDI9NNPdxOpU-KTl4/edit?usp=sharing advisory role descriptions document].
-*'''Categorisation of OWASP Projects'''
+*'''Categorization of OWASP Projects'''
-**I have begun categorising our OWASP projects into the Builder, Breaker, and Defender categories.
+**I have begun categorizing our OWASP projects into the Builder, Breaker, and Defender categories.
-**Currently, our categorisation is limited so I have begun to increase the search criteria for our projects.
+**Currently, our categorization is limited so I have begun to increase the search criteria for our projects.
 **Additionally, I have begun to label our projects based on OWASP Open SAMM criteria.
 **The labels are as follows: Governance, Construction, Verification, Deployment.
@@ Line 41: / Line 41: @@
 *'''Project Leader Responsibilities & Expectations'''
-**I am currently working on putting together documentation that outlines a Project Leader's responsibilities, and our organisational expectations of them.
+**I am currently working on putting together documentation that outlines a Project Leader's responsibilities, and our organizational expectations of them.
 **I am also developing a "How to run a successful OWASP project" document.
 **Jim and I are developing a brand usage guideline for our projects.
-**An OWASP Project Lifecycle infographic is being developed as well.
+**An OWASP Project Lifecycle info graphic is being developed as well.
 **I hope that these "How To" documents and graphics will help project leaders understand their responsibilities, and how to leverage the OWASP Project infrastructure for success.

@@ Line 31: / Line 31: @@
 **These roles will be responsible for reviewing projects, and increasing the quality of the project review process and criteria.
 **I have put together role description and experience requirements for each technical advisor volunteer role.
-**To read the full descriptions, please visit the [ advisory role descriptions document].
+**To read the full descriptions, please visit the [https://docs.google.com/document/d/1zqDf9CJeCj-uE5kFA_DwkDbHWTQDI9NNPdxOpU-KTl4/edit?usp=sharing advisory role descriptions document].
 *'''Categorisation of OWASP Projects'''
-**I had the fantastic opportunity to meet with the CEO of Hack in the Box, Mr. Dhillon Kannabhiran.
+**I have begun categorising our OWASP projects into the Builder, Breaker, and Defender categories.
-**We spoke about a possible partnership between OWASP and Hack in the Box.
+**Currently, our categorisation is limited so I have begun to increase the search criteria for our projects.
-**We currently have a booth for the Amsterdam event, and I negotiated a booth for us at the Kuala Lumpar, Malaysia event as well.
+**Additionally, I have begun to label our projects based on OWASP Open SAMM criteria.
-**Logistics are currently being developed and planned.
+**The labels are as follows: Governance, Construction, Verification, Deployment.
 *'''Project Leader Responsibilities & Expectations'''
-**I had the fantastic opportunity to meet with the CEO of Hack in the Box, Mr. Dhillon Kannabhiran.
+**I am currently working on putting together documentation that outlines a Project Leader's responsibilities, and our organisational expectations of them.
-**We spoke about a possible partnership between OWASP and Hack in the Box.
+**I am also developing a "How to run a successful OWASP project" document.
-**We currently have a booth for the Amsterdam event, and I negotiated a booth for us at the Kuala Lumpar, Malaysia event as well.
+**Jim and I are developing a brand usage guideline for our projects.
-**Logistics are currently being developed and planned.
+**An OWASP Project Lifecycle infographic is being developed as well.
 *'''Daily Project based queries and requests'''