GPC/Meetings/2013-29-03 - Revision history

Samantha Groves at 13:21, 29 March 2013

2013-03-29T13:21:38Z

Samantha Groves at 13:18, 29 March 2013

2013-03-29T13:18:19Z

Samantha Groves at 13:06, 29 March 2013

2013-03-29T13:06:45Z

Samantha Groves at 12:57, 29 March 2013

2013-03-29T12:57:55Z

Samantha Groves at 12:56, 29 March 2013

2013-03-29T12:56:26Z

Samantha Groves at 12:52, 29 March 2013

2013-03-29T12:52:28Z

Samantha Groves at 12:49, 29 March 2013

2013-03-29T12:49:46Z

Samantha Groves at 12:49, 29 March 2013

2013-03-29T12:49:14Z

Samantha Groves: Created page with "TOC = Project Division Updates = *'''[https://docs.google.com/a/owasp.org/spreadsheet/ccc?key=0AllOCxlYdf1AdFdaYXJ6SDFXNXBaemNwbnNHN3N5RVE#gid=16 Project Numbers]''' **Ac..."

2013-03-29T12:46:12Z

Created page with "__TOC__ = Project Division Updates = *'''[https://docs.google.com/a/owasp.org/spreadsheet/ccc?key=0AllOCxlYdf1AdFdaYXJ6SDFXNXBaemNwbnNHN3N5RVE#gid=16 Project Numbers]''' **Ac..."

New page

__TOC__
= Project Division Updates =

*'''[https://docs.google.com/a/owasp.org/spreadsheet/ccc?key=0AllOCxlYdf1AdFdaYXJ6SDFXNXBaemNwbnNHN3N5RVE#gid=16 Project Numbers]'''
**Active Projects: 139
**Inactive Projects: 67

*'''Projects Under Review'''
**[https://www.owasp.org/index.php/Cheat_Sheets OWASP Cheat Sheets Project]
**[https://www.owasp.org/index.php/OWASP_Java_HTML_Sanitizer_Project OWASP Java HTML Sanitizer Project]
**[https://www.owasp.org/index.php/OWASP_Codes_of_Conduct OWASP Codes of Conduct]
**[https://www.owasp.org/index.php/OWASP_Xenotix_XSS_Exploit_Framework Xenotix XSS Exploit Framework]

*'''[https://docs.google.com/a/owasp.org/spreadsheet/ccc?key=0Amvv_7Gz8Z7TdHZfWGhHZ0Z4UFFwZU42djBXcVVLSlE#gid=0 Project Applications]'''
**OWASP Top 10 fuer Entwickler

==Currently Working On==

*'''OWASP Asia Leadership Outreach Project'''
**This Asia Leadership Outreach Project came about during the discussion Dhillon and I had about OWASP at the Kuala Lumpur, Hack in the Box event.
**He mentioned that he has offered OWASP a booth at the Kuala Lumpur, Hack in the Box event for a few years, but local chapters have not represented OWASP very well.
**We suggested developing an OWASP Malaysia and Singapore outreach project that would involve a workshop, and the co-running of the Hack in the Box booth by members of both chapters.
**I have put together a proposal where I outline a 3 day outreach initiative that aims to bring more experienced chapter leaders to the region for a workshop.
**Read the [https://www.owasp.org/index.php/Projects/Asia_Leadership_Outreach_Proposal_2013 full proposal] for more information.

*'''Development of Technical Project Advisor Requirements'''
**This item involves the new management work flow for project reviews that was proposed for 2013.
**[https://www.owasp.org/index.php/Projects/Reviews_Management_Proposal_2013 Projects Review Process Proposal]
**It will involve a working group of technical project advisors headed by a member of the board.
**The working group will be made up of the following areas: Secure Development, Secure Lifecycle Activity, Static Analysis, Dynamic Analysis, Governance, and Education.
**These roles will be responsible for reviewing projects, and increasing the quality of the project review process and criteria.
**I have put together experience requirements for each technical advisor volunteer role.
**To read the full descriptions, please visit the [https://docs.google.com/document/d/1zqDf9CJeCj-uE5kFA_DwkDbHWTQDI9NNPdxOpU-KTl4/edit?usp=sharing advisory role descriptions document].

*'''Categorization of OWASP Projects'''
**I have begun categorizing our OWASP projects into the Builder, Breaker, and Defender categories.
**Currently, our categorization is limited so I have begun to increase the search criteria for our projects.
**Additionally, I have begun to label our projects based on OWASP Open SAMM criteria.
**The labels are as follows: Governance, Construction, Verification, Deployment.
**The plan is to allow users to find projects based on these labels on our projects wiki page.

*'''Project Leader Responsibilities & Expectations'''
**I am currently working on putting together documentation that outlines a project leader's responsibilities, and our organizational expectations of them.
**I am also developing a "How to run a successful OWASP project" document.
**Jim and I are developing brand usage guidelines for our project leaders.
**An OWASP project lifecycle info graphic is being developed as well.
**I hope that these "How To" documents and graphics will help project leaders understand their responsibilities, and how to leverage the OWASP project infrastructure for success.

*'''Daily Project based queries and requests'''
**This has not changed much since I began the post: questions are very similar in nature.
**Global AppSec questions.
**Funding queries.
**Travel availability.
**Project based administrative help.
**Project status information.
**Several project donations questions.
**OWASP LinkedIn Updates.
**What's happening with projects, questions.

==Grants Updates==
*'''Guidebooks Grant'''
#Amount: $25,000
#Status: We are still waiting for payment from DHS. I have reached out to our DHS and Georgia Tech representatives once again to ask for payment.

*'''ESAPI Proposal'''
#Amount: $25,000
#Status: The ESAPI proposal is still being reviewed.

*'''ModSecurity Grant Writing'''
#Amount: $30,000
#Status: The ModSecurity proposal is still being reviewed.

*'''Google Grants Proposal'''
#Amount: $120,00 in Adwords Funds
#Status: I have begun managing the Adwords account regularly. I am waiting until we reach the implementation phase with our marketing company.

*'''Total Grant Funds Awarded: $145,000 for 2013.'''

[[Category:GPC_Meetings]]
[[Category:GPC_Meetings/2013]]

@@ Line 27: / Line 27: @@
 **I have begun developing brand usage guidelines for our project leaders with Jim Manico's help.
 **We have decided to use the Apache Software Foundation's documentation on the subject as a guide for our own.
-**We feel they develop excellent material, and we plan to use their guidelines as a starting point.
+**We feel they developed excellent material, and we plan to use their guidelines as a starting point.
 **I have spent this week researching their materials, and outlining our usage requirements.
@@ Line 33: / Line 33: @@
 **We have decided to take a different approach to our grant research, writing, and management.
 **This is primarily due to the limited number of resources and staff bandwidth.
-**The plan is to source a handfull of grants for the foundation.
+**The plan is to source a hand full of grants for the foundation.
 **Then focus on grant writing and management of these proposed grants for the year.
 **Q2 will start the research stage of this plan.

@@ Line 18: / Line 18: @@
 *'''OWASP Projects at Global AppSec Events'''
-**This Asia Leadership Outreach Project came about during the discussion Dhillon and I had about OWASP at the Kuala Lumpur, Hack in the Box event.
+**I have developed a first draft of the event modules that I plan to coordinate at AppSec EU and USA.
-**He mentioned that he has offered OWASP a booth at the Kuala Lumpur, Hack in the Box event for a few years, but local chapters have not represented OWASP very well.
+**AppSec EU: Open Source Showcase & OWASP Projects Track.
-**We suggested developing an OWASP Malaysia and Singapore outreach project that would involve a workshop, and the co-running of the Hack in the Box booth by members of both chapters.
+**AppSec USA: Project Leader Workshop, Open Source Showcase (modified: 30 minute, presentation style demos), Project Summit.
-**I have put together a proposal where I outline a 3 day outreach initiative that aims to bring more experienced chapter leaders to the region for a workshop.
+**The proposals have now been sent to the local event planning teams.
-**Read the [https://www.owasp.org/index.php/Projects/Asia_Leadership_Outreach_Proposal_2013 full proposal] for more information.
+**I am waiting to hear back from them now.
 *'''OWASP Project Leaders: Brand Usage Guidelines'''
-**I have begun categorizing our OWASP projects into the Builder, Breaker, and Defender categories.
+**I have begun developing brand usage guidelines for our project leaders with Jim Manico's help.
-**Currently, our categorization is limited so I have begun to increase the search criteria for our projects.
+**We have decided to use the Apache Software Foundation's documentation on the subject as a guide for our own.
-**Additionally, I have begun to label our projects based on OWASP Open SAMM criteria.
+**We feel they develop excellent material, and we plan to use their guidelines as a starting point.
-**The labels are as follows: Governance, Construction, Verification, Deployment.
+**I have spent this week researching their materials, and outlining our usage requirements.
 *'''OWASP Grants'''
-**I have begun categorizing our OWASP projects into the Builder, Breaker, and Defender categories.
+**We have decided to take a different approach to our grant research, writing, and management.
-**Currently, our categorization is limited so I have begun to increase the search criteria for our projects.
+**This is primarily due to the limited number of resources and staff bandwidth.
-**Additionally, I have begun to label our projects based on OWASP Open SAMM criteria.
+**The plan is to source a handfull of grants for the foundation.
-**The labels are as follows: Governance, Construction, Verification, Deployment.
+**Then focus on grant writing and management of these proposed grants for the year.
-**The plan is to allow users to find projects based on these labels on our projects wiki page.
+**Q2 will start the research stage of this plan.
 *'''Development of Technical Project Advisor Requirements'''
 **This item involves the new management work flow for project reviews that was proposed for 2013.
 **[https://www.owasp.org/index.php/Projects/Reviews_Management_Proposal_2013 Projects Review Process Proposal]
 **To read the full descriptions, please visit the [https://docs.google.com/document/d/1zqDf9CJeCj-uE5kFA_DwkDbHWTQDI9NNPdxOpU-KTl4/edit?usp=sharing advisory role descriptions document].
 *'''Project Leader Responsibilities & Expectations'''
-**I am currently working on putting together documentation that outlines a project leader's responsibilities, and our organizational expectations of them.
+**I am currently working on putting together documentation that outlines a project leader's responsibilities, and our foundation's expectations of them.
 **I am also developing a "How to run a successful OWASP project" document.
 **An OWASP project lifecycle info graphic is being developed as well.
 **I hope that these "How To" documents and graphics will help project leaders understand their responsibilities, and how to leverage the OWASP project infrastructure for success.
 *'''Daily Project based queries and requests'''

@@ Line 1: / Line 1: @@
 __TOC__
-= Project Division Updates =
+= OWASP Global Projects Report =
 *'''[https://docs.google.com/a/owasp.org/spreadsheet/ccc?key=0AllOCxlYdf1AdFdaYXJ6SDFXNXBaemNwbnNHN3N5RVE#gid=16 Project Numbers]'''

@@ Line 61: / Line 61: @@
 *'''Guidebooks Grant'''
 #Amount: $25,000
-#Status: We are still waiting for payment from DHS. I have reached out to our DHS and Georgia Tech representatives once again to ask for payment.
+#Status: I have sent in our first project report to the DHS outlining the set backs we have had due to insufficient funds. This has prompted payment. We are due to receive our first check next week.
 *'''ESAPI Proposal'''
@@ Line 73: / Line 73: @@
 *'''Google Grants Proposal'''
 #Amount: $120,00 in Adwords Funds
-#Status: I have begun managing the Adwords account regularly. I am waiting until we reach the implementation phase with our marketing company.
+#Status: We are now testing different keyword and campaign strategies for our global AppSec conferences.
 *'''Total Grant Funds Awarded: $145,000 for 2013.'''

@@ Line 13: / Line 13: @@
 *'''[https://docs.google.com/a/owasp.org/spreadsheet/ccc?key=0Amvv_7Gz8Z7TdHZfWGhHZ0Z4UFFwZU42djBXcVVLSlE#gid=0 Project Applications]'''
-**OWASP Top 10 fuer Entwickler
+**OWASP RailsGoat Project
 ==Currently Working On==

@@ Line 3: / Line 3: @@
 *'''[https://docs.google.com/a/owasp.org/spreadsheet/ccc?key=0AllOCxlYdf1AdFdaYXJ6SDFXNXBaemNwbnNHN3N5RVE#gid=16 Project Numbers]'''
-**Active Projects: 139
+**Active Projects: 141
 **Inactive Projects: 67

GPC/Meetings/2013-29-03 - Revision history

Samantha Groves at 13:21, 29 March 2013

Samantha Groves at 13:18, 29 March 2013

Samantha Groves at 13:06, 29 March 2013

Samantha Groves at 12:57, 29 March 2013

Samantha Groves at 12:56, 29 March 2013

Samantha Groves at 12:52, 29 March 2013

Samantha Groves at 12:49, 29 March 2013

Samantha Groves at 12:49, 29 March 2013

Samantha Groves: Created page with "__TOC__ = Project Division Updates = *'''[https://docs.google.com/a/owasp.org/spreadsheet/ccc?key=0AllOCxlYdf1AdFdaYXJ6SDFXNXBaemNwbnNHN3N5RVE#gid=16 Project Numbers]''' **Ac..."

Samantha Groves: Created page with "TOC = Project Division Updates = *'''[https://docs.google.com/a/owasp.org/spreadsheet/ccc?key=0AllOCxlYdf1AdFdaYXJ6SDFXNXBaemNwbnNHN3N5RVE#gid=16 Project Numbers]''' **Ac..."