Kansas City September 2007 Meeting - Revision history

Bkmarshall at 15:35, 18 September 2007

2007-09-18T15:35:00Z

Bkmarshall at 17:29, 14 September 2007

2007-09-14T17:29:21Z

Bkmarshall at 17:28, 14 September 2007

2007-09-14T17:28:52Z

Bkmarshall at 19:10, 12 September 2007

2007-09-12T19:10:13Z

Bkmarshall at 19:09, 12 September 2007

2007-09-12T19:09:42Z

Bkmarshall at 18:44, 12 September 2007

2007-09-12T18:44:09Z

Bkmarshall at 18:41, 12 September 2007

2007-09-12T18:41:51Z

Bkmarshall: New page: == Kansas City OWASP Chapter - September 2007 Meeting == We had speakers Here are their presentations

2007-09-12T18:39:16Z

New page: == Kansas City OWASP Chapter - September 2007 Meeting == We had speakers Here are their presentations

New page

== Kansas City OWASP Chapter - September 2007 Meeting ==

We had speakers

Here are their presentations

@@ Line 14: / Line 14: @@
 '''Speaker 1: Bob Phelps, National Bank Examiner with the Office of the Comptroller of the Currency (OCC)'''
-Bob will provide his insight on the financial regulatory environment and how laws lead to specific information security standards and guidance.  Through his job he has performed a review of application security practices in about a dozen midsize and large banks.  Bob will share the results of this review and provide his recommendations on how to establish a sound application security management program.
+Bob provided his insights on the financial regulatory environment and how laws lead to specific information security standards and guidance.  Through his job he has performed a review of application security practices in about a dozen midsize and large banks.  Bob shared the results of this review and provided his recommendations on how to establish a sound application security management program.
 At the OCC Bob both works with the Policy division in Washington DC and has bank supervisory responsibilities.  He leads and participates in examinations of National Banks in NYC, KC, Omaha, and Minneapolis.  His Policy responsibilities include evaluating emerging technologies and their impact on the banking system, evaluating trends in information security, and developing and delivering various training programs to other examiners.
@@ Line 21: / Line 21: @@
 '''Speaker 2: Bruce K. Marshall, Senior Security Consultant with Security PS'''
-Bruce will be speaking about how to avoid improperly using challenge questions (e.g. “What is your pet’s name?”) for web app authentication. While challenge questions tend to be user friendly they can also expose your application to new security threats.  He will share his experience on both choosing the best challenge questions and how to properly integrate them into your application.
+Bruce spoke about how to avoid improperly using challenge questions (e.g. “What is your pet’s name?”) for web app authentication.  While challenge questions tend to be user friendly they can also expose your application to new security threats.  He shared his experience on both choosing the best challenge questions and how to properly integrate them into your application.
 Bruce consults with clients like American Express, Garmin, Microsoft, and Commerce Bank to assess and improve their information security strategies in areas like network security, web app security, authentication, and program management.

← Older revision		Revision as of 17:29, 14 September 2007
Line 27:		Line 27:
	=== Documents ===		=== Documents ===

−	Bruce's [http://www.passwordresearch.com/files/AvoidingPoorChallengeQuestionAuthentication-OWASP.pdf presentation slides]	+	* Bruce's [http://www.passwordresearch.com/files/AvoidingPoorChallengeQuestionAuthentication-OWASP.pdf presentation slides]

← Older revision		Revision as of 17:28, 14 September 2007
Line 27:		Line 27:
	=== Documents ===		=== Documents ===

−	~~Links to the presentations will be posted as soon as possible~~.	+	Bruce's [http://www.passwordresearch.com/files/AvoidingPoorChallengeQuestionAuthentication-OWASP.pdf presentation slides]

@@ Line 4: / Line 4: @@
 '''Chapter Business'''
 Current chapter priorities include the following:
 * Volunteer to give an OWASP presentation
@@ Line 9: / Line 10: @@
 * Volunteer your organization to host an OWASP meeting
 * Invite other professionals or students to attend our next OWASP meeting
 '''Speaker 1: Bob Phelps, National Bank Examiner with the Office of the Comptroller of the Currency (OCC)'''
@@ Line 15: / Line 17: @@
 At the OCC Bob both works with the Policy division in Washington DC and has bank supervisory responsibilities.  He leads and participates in examinations of National Banks in NYC, KC, Omaha, and Minneapolis.  His Policy responsibilities include evaluating emerging technologies and their impact on the banking system, evaluating trends in information security, and developing and delivering various training programs to other examiners.
 '''Speaker 2: Bruce K. Marshall, Senior Security Consultant with Security PS'''

@@ Line 1: / Line 1: @@
 The [[Kansas_City]] OWASP chapter met on September 6, 2007 at Centriq Training in Leawood, KS.
 === Meeting Summary ===
 '''Speaker 1: Bob Phelps, National Bank Examiner with the Office of the Comptroller of the Currency (OCC)'''
@@ Line 17: / Line 23: @@
 === Documents ===