Gothenburg - Revision history

Mfalkvidd: Update slack invite link

2019-08-13T20:33:06Z

Update slack invite link

Cina at 20:10, 28 March 2019

2019-03-28T20:10:18Z

Cina at 20:04, 28 March 2019

2019-03-28T20:04:40Z

Cina at 20:22, 17 March 2019

2019-03-17T20:22:26Z

Cina: Updated with our latest event.

2019-03-17T20:19:00Z

Updated with our latest event.

Cina: /* Welcome to the Gothenburg chapter homepage */

2019-02-16T19:51:30Z

‎Welcome to the Gothenburg chapter homepage

Cina at 16:57, 23 January 2019

2019-01-23T16:57:20Z

Cina at 16:45, 23 January 2019

2019-01-23T16:45:45Z

Cina: /* OWASP Gothenburg 2018 */

2018-05-30T19:00:24Z

‎OWASP Gothenburg 2018

Anders Rosdahl: /* Next Event 2018 */

2018-02-14T20:40:27Z

‎Next Event 2018

← Older revision		Revision as of 20:33, 13 August 2019
Line 57:		Line 57:
	Check out our YouTube-kanal:[http://www.youtube.com/user/owaspgbg owaspgbg] for video recordings of previous presentations.		Check out our YouTube-kanal:[http://www.youtube.com/user/owaspgbg owaspgbg] for video recordings of previous presentations.

−	You can also talk to us on [https://owasp.slack.com/ Slack] ( [https://~~owasp~~.slack.com/~~join~~/shared_invite/~~enQtNDI5MzgxMDQ2MTAwLTEyNzIzYWQ2NDZiMGIwNmJhYzYxZDJiNTM0ZmZiZmJlY2EwZmMwYjAyNmJjNzQxNzMyMWY4OTk3ZTQ0MzFhMDY~~ register here] and join our channel #chapter-gothenburg), follow us on [https://twitter.com/owaspgbg Twitter] (@owaspgbg) and check us out on [https://www.facebook.com/owaspgbg/ Facebook].	+	You can also talk to us on [https://owasp.slack.com/ Slack] ( [https://join.slack.com/t/owasp/shared_invite/enQtNjExMTc3MTg0MzU4LTViMDg1MmJiMzMwZGUxZjgxZWQ1MTE0NTBlOTBhNjhhZDIzZTZiNmEwOTJlYjdkMzAxMGVhNDkwNDNiNjZiOWQ register here] and join our channel #chapter-gothenburg), follow us on [https://twitter.com/owaspgbg Twitter] (@owaspgbg) and check us out on [https://www.facebook.com/owaspgbg/ Facebook].

@@ Line 15: / Line 15: @@
 <paypal>Gothenburg</paypal>
 -->
@@ Line 44: / Line 40: @@
 * Daniel Hedemalm
 The vision for OWASP Gothenburg is to increase interest in and spread knowledge of how to architect and build secure software systems. It is to provide a balanced mix of the latest word in academic security research (cutting edge), established security practices and design principles for direct application (breadth and maturity). The most important elements in the construction of secure applications are design- and development methodologies, OWASP Gothenburg will hence strive to increase the security-mindedness of application developers.
 OWASP Gothenburg brings together a great community of developers, project leaders and security professionals by offering interesting presentations and demonstrations on a wide range of security-related topics. Community hacks, social get-togethers and local as well as international speakers make us a platform and forum for anyone interested to meet like-minded people, exchange ideas and discuss the latest developments and news in security.
 Everyone is free to participate in, and attend any of our meetings!
 If you are interested in helping out or if you have a suggestion on e.g. an exciting and interesting speaker or topic, please get in touch with us!
 Our primary communication channel is the [https://groups.google.com/a/owasp.org/forum/#!forum/gothenburg-chapter owasp-gothenburg mailinglist], all meetings, events and other news are announced on the mailing list.
 Check out our YouTube-kanal:[http://www.youtube.com/user/owaspgbg owaspgbg] for video recordings of previous presentations.
@@ Line 58: / Line 59: @@
 You can also talk to us on [https://owasp.slack.com/ Slack] ( [https://owasp.slack.com/join/shared_invite/enQtNDI5MzgxMDQ2MTAwLTEyNzIzYWQ2NDZiMGIwNmJhYzYxZDJiNTM0ZmZiZmJlY2EwZmMwYjAyNmJjNzQxNzMyMWY4OTk3ZTQ0MzFhMDY register here] and join our channel #chapter-gothenburg), follow us on [https://twitter.com/owaspgbg Twitter] (@owaspgbg) and check us out on [https://www.facebook.com/owaspgbg/ Facebook].
-Some of the historical information below (speaker bios, presentation abstracts and event information) is in Swedish, we are sorry for any inconvenience caused by this and will gladly answer any questions you might have through any of the communication channels listed above.<!--[https://owaspgbgday.se OWASP Gothenburg Day] var skall vi göra av denna?/Cina -->
 __TOC__

@@ Line 44: / Line 44: @@
 * Daniel Hedemalm
-OWASP Göteborgs vision är att väcka intresse för och sprida kunskap om hur man bygger säkra mjukvarusystem. Den är att tillhandahålla en balanserad mix av de senaste rönen inom akademisk säkerhetsforskning (spets och framkant), etablerade säkerhetstekniker och designprinciper för direkt tillämpning (bredd och mogenhet). De viktigaste elementen i konstruktionen av säkra applikationer är design och utvecklingsmetodik. OWASP Göteborg skall därför bidra till att öka säkerhetstänkandet hos programvaruutvecklare.
+OWASP Gothenburg brings together a great community of developers, project leaders and security professionals by offering interesting presentations and demonstrations on a wide range of security-related topics. Community hacks, social get-togethers and local as well as international speakers make us a platform and forum for anyone interested to meet like-minded people, exchange ideas and discuss the latest developments and news in security.
-OWASP Göteborg når ut till utvecklare, projektledare och säkerhetspersoner genom att erbjuda intressanta föredrag och demonstrationer kring säkerhet - både i stort och i smått. Communityhack-dagar, mingel, inhemska och utländska talare profilerar oss som en seriös aktör som erbjuder intresserade en mötesplats där de kan träffa likasinnade, utbyta idéer samt diskutera de senaste inom området.
+Everyone is free to participate in, and attend any of our meetings!
-Alla är varmt välkommen till våra möten!
+If you are interested in helping out or if you have a suggestion on e.g. an exciting and interesting speaker or topic, please get in touch with us!
-<!--För att delta i mötena måste du gå med i våran Google Group som ersätter vår tidigare mailinglista. Det står Stockholm chapter men den gäller alla chapter i Sverige.
+Our primary communication channel is the [https://groups.google.com/a/owasp.org/forum/#!forum/gothenburg-chapter owasp-gothenburg mailinglist], all meetings, events and other news are announced on the mailing list.
-Du behöver INTE ha ett Google-konto för att gå med: https://groups.google.com/a/owasp.org/forum/#!forum/stockholm-chapter/join
+Check out our YouTube-kanal:[http://www.youtube.com/user/owaspgbg owaspgbg] for video recordings of previous presentations.
-Är du intresserad av att hjälpa till eller har förslag på spännande och intressanta föredrag och/eller talare är du välkommen att kontakta oss.
+You can also talk to us on [https://owasp.slack.com/ Slack] ( [https://owasp.slack.com/join/shared_invite/enQtNDI5MzgxMDQ2MTAwLTEyNzIzYWQ2NDZiMGIwNmJhYzYxZDJiNTM0ZmZiZmJlY2EwZmMwYjAyNmJjNzQxNzMyMWY4OTk3ZTQ0MzFhMDY register here] and join our channel #chapter-gothenburg), follow us on [https://twitter.com/owaspgbg Twitter] (@owaspgbg) and check us out on [https://www.facebook.com/owaspgbg/ Facebook].
-Tidigare presentationer hittar du i våran YouTube-kanal:[http://www.youtube.com/user/owaspgbg owaspgbg].
+Some of the historical information below (speaker bios, presentation abstracts and event information) is in Swedish, we are sorry for any inconvenience caused by this and will gladly answer any questions you might have through any of the communication channels listed above.<!--[https://owaspgbgday.se OWASP Gothenburg Day] var skall vi göra av denna?/Cina -->
 __TOC__
@@ Line 71: / Line 66: @@
 * 2019-03-14 Anne Marie Eklund Löwinder - Securing parts of the Internet - DNS extravaganza![https://youtu.be/uNm4wjx_uN8]
 * 2019-03-14 Per Thorsheim - DNS Security - DNS extravaganza![https://www.youtube.com/watch?v=5VyYkfR3Fp8]
-* 2019-03-14 Per Thorsheim - Password Security - DNS extravaganza!
+* 2019-03-14 Per Thorsheim - Password Security - DNS extravaganza![https://youtu.be/nK9hc18MFBc]
 == OWASP Gothenburg 2018 ==

@@ Line 51: / Line 51: @@
 Alla är varmt välkommen till våra möten!
-För att delta i mötena måste du gå med i våran Google Group som ersätter vår tidigare mailinglista. Det står Stockholm chapter men den gäller alla chapter i Sverige.
+<!--För att delta i mötena måste du gå med i våran Google Group som ersätter vår tidigare mailinglista. Det står Stockholm chapter men den gäller alla chapter i Sverige.
 Du behöver INTE ha ett Google-konto för att gå med: https://groups.google.com/a/owasp.org/forum/#!forum/stockholm-chapter/join
 Är du intresserad av att hjälpa till eller har förslag på spännande och intressanta föredrag och/eller talare är du välkommen att kontakta oss.

@@ Line 49: / Line 49: @@
 OWASP Göteborg når ut till utvecklare, projektledare och säkerhetspersoner genom att erbjuda intressanta föredrag och demonstrationer kring säkerhet - både i stort och i smått. Communityhack-dagar, mingel, inhemska och utländska talare profilerar oss som en seriös aktör som erbjuder intresserade en mötesplats där de kan träffa likasinnade, utbyta idéer samt diskutera de senaste inom området.
-Vem som helst är varmt välkommen till våra möten!
+Alla är varmt välkommen till våra möten!
-För att delta i mötena måste du gå med i våran: [http://lists.owasp.org/mailman/listinfo/owasp-sweden OWASP Sweden-mailinglistan].
+För att delta i mötena måste du gå med i våran Google Group som ersätter vår tidigare mailinglista. Det står Stockholm chapter men den gäller alla chapter i Sverige.
-Är du intresserad av att hjälpa till eller har förslag på spännande och intressanta föredrag och/eller talare är du välkommen att kontakta oss.
+Du behöver INTE ha ett Google-konto för att gå med: https://groups.google.com/a/owasp.org/forum/#!forum/stockholm-chapter/join
 Tidigare presentationer hittar du i våran YouTube-kanal:[http://www.youtube.com/user/owaspgbg owaspgbg].
@@ Line 66: / Line 68: @@
 == OWASP Gothenburg 2019 ==
 * 2019-01-07: Autosec.se + OWASP vol. II Tomas Olovsson and Jonas Magazinius: focused on automotive security.
 == OWASP Gothenburg 2018 ==

@@ Line 40: / Line 40: @@
 * Viktor Hedberg
 * Cina Hellman
 * Mikael Wecksten
 * Daniel Hedemalm
@@ Line 164: / Line 165: @@
 ''' 2015-04-15 - D-FENS'''
 Let's talk defense.
 Offense might be a bit more fun (admit it - there is a small evil mini-me inside all of us that wants nothing but wielding the mighty power of the hack that ruled them all) but let's face it, there are only so many wrongdoing organisations with world domination aspirations that will hire you to develop attacks on company time. For most of us that wants a paycheck within security, defence is on the menu. So, how should we effectively use our company’s sparse resources to make it harder for an attacker to breach our defenses and when that inevitably happens anyway; how do we find the bad code and remove it?
@@ Line 497: / Line 496: @@
 In a heterogeneous system like the web, information is exchanged between components in versatile formats. A new breed of attacks is on the rise that exploit the mismatch between the expected and provided content. This paper focuses on the root cause of a large class of attacks: polyglots. A polyglot is a program that is valid in multiple programming languages. Polyglots allow multiple interpretation of the content, providing a new space of attack vectors. We characterize what constitutes a dangerous format in the web setting and identify particularly dangerous formats, with PDF as the prime example. We demonstrate that polyglot-based attacks on the web open up for insecure communication across Internet origins. The paper presents novel attack vectors that infiltrate the trusted origin by syntax injection across multiple languages and by content smuggling of malicious payload that appears formatted as benign content. The attacks lead to both cross-domain leakage and cross-site request forgery. We perform a systematic study of PDF-based injection and content smuggling attacks. We evaluate the current practice in client/server content filtering and PDF readers for polyglot-based attacks, and report on vulnerabilities in the top 100 Alexa web sites. We identify five web sites to be vulnerable to syntax injection attacks. Further, we have found two major enterprise cloud storage services to be susceptible to content smuggling attacks. Our recommendations for protective measures on server side, in browsers, and in content interpreters (in particular, PDF readers) show how to mitigate the attacks.
 '''2013-04-29 - OWASP Göteborg - An evening with Mario Heiderich'''
@@ Line 534: / Line 531: @@
 The InnerHTML Apocalypse - How mXSS Attacks change everything we believed we knew so far
 This talk introduces and discusses a novel, mostly unpublished technique to successfully attack websites that are applied with state-of-the-art XSS protection. This attack labeled Mutation-XSS (mXSS) is capable of bypassing high-end filter systems by utilizing the browser and its unknown capabilities - every single f***** one of them. We analyzed the type and number of high-profile websites and applications that are affected by this kind of attack. Several live demos during the presentation will share these impressions and help understanding, what mXSS is, why mXSS is possible and why it is of importance for defenders as well as professional attackers to understand and examine mXSS even further. The talk wraps up several years of research on this field, shows the abhorrent findings, discusses the consequences and delivers a step-by-step guide on how to protect against this kind of mayhem - with a strong focus on feasibility and scalability.
 XSS from 1999 to 2013: The "Doctrine Classique" of Websecurity
@@ Line 556: / Line 551: @@
 Mortens slides: [[Media:Morten schionning OWASPGPG 20130228.odp|Incidents and forensics]]
 '''2013-01-31 - OWASP Göteborg - IT-forensik, 28e februari'''
@@ Line 739: / Line 732: @@
 In the first part of the talk, Mikko will take a quick look at various hybrid environments available for ‘mobile’ app developers – showing how the ‘desktop web’ and ‘mobile web’ are converging and what kind of fundamental security mechanisms do or do not exist in them to protect the user. The second part will take a look at recent developments in the web standards bridging these two worlds even closer to each other than ever before – perhaps even making native apps … redundant at some point? Finally, switching to something completely different, Mikko will share his experiences working with an agile team and helping them build more secure products. The talks are accompanied with small demos and use cases to show some of the discussed topics in real life.
 '''2012-06-01 - Slides från OWASP Göteborg 2012-04-26 nu tillgängliga'''
@@ Line 936: / Line 927: @@
 Mötet kommer denna gång att sponsras av Adecco IT & Engineering och hållas på Götgatan 11, 41105 Göteborg (mitt i Nordstan). Mötet startar 17:00 och slutar runt 20:00, följt av öl och mingel. För att anmäla dig till mötet ber vi dig besöka/To sign up for the event, please visit [http://owaspgbg-nov2011.eventbrite.com/ Eventbrite].
 '''2011-09-17 - OWASP Göteborg den 3e november'''
@@ Line 993: / Line 982: @@
 ''19:30 - 20:30, Beer''
-[http://www.omegapoint.se Omegapoint] are sponsors and there will be lighter food and beers. Omegapoint is located at Rosenlundsgatan 3, Göteborg. The event will start at 5 pm and end around 8 pm. To sign up for the event, please visit [http://owaspgbg-aug2011.eventbrite.com/ this] site.
+[http://www.omegapoint.se Omegapoint] are sponsors and there will be lighter food and beers. Omegapoint is located at Rosenlundsgatan 3, Göteborg. The event will start at 5 pm and end around 8 pm. To sign up for the event, please visit [http://owaspgbg-aug2011.eventbrite.com/ this] site.<br>
 '''July 4th, 2011 - OWASP-Gothenburg opens!'''

@@ Line 62: / Line 62: @@
 <!--[https://owaspgbgday.se OWASP Gothenburg Day] var skall vi göra av denna?/Cina -->
 __TOC__
 == OWASP Gothenburg 2018 ==
 * 2018-05-30: Tanya Janca - Pushing Left Like a Boss (video will be added in a short while)
 * 2018-04-11: Jonathan Jogenfors - Hacking Quantum Cryptograhy [https://youtu.be/Bl9br3kzhws]

@@ Line 64: / Line 64: @@
 == OWASP Gothenburg 2018 ==
 * 2018-01-16: Sven Schleier - OWASP Mobile Security Testing Guide (MSTG) [https://youtu.be/HLeAIScDMNM]
 * 2018-01-16: Jeroen Willemsen - All about the keying material [https://youtu.be/Yeybnej03lw]