Montréal - Revision history

Svieg: /* Insecurity in Information Technology */

2018-06-17T20:52:48Z

‎Insecurity in Information Technology

Svieg: /* SecurityRAT - Handling of Security Requirements in SDLC */

2018-06-17T20:52:24Z

‎SecurityRAT - Handling of Security Requirements in SDLC

Svieg: /* Insecurity in Information Technology */

2018-06-17T20:50:44Z

‎Insecurity in Information Technology

Svieg: add two conferences

2018-06-17T20:25:09Z

add two conferences

Svieg: /* Operate PCI DSS infrastructure using DevOps approach */

2018-06-17T20:13:40Z

‎Operate PCI DSS infrastructure using DevOps approach

Svieg: /* Operate PCI DSS infrastructure using DevOps approach */

2018-05-13T02:25:34Z

‎Operate PCI DSS infrastructure using DevOps approach

Svieg: reorganise the folder and add presentation

2018-03-05T18:33:45Z

reorganise the folder and add presentation

Svieg: /* Pourquoi un hacker peut-il contourner les mesures et solutions de sécurité... */

2017-10-14T20:19:55Z

‎Pourquoi un hacker peut-il contourner les mesures et solutions de sécurité...

Svieg: /* Chapter Leaders / Responsables du chapitre */

2017-10-14T20:11:02Z

‎Chapter Leaders / Responsables du chapitre

Svieg: What we do / Nos activités

2017-10-13T02:35:13Z

What we do / Nos activités

@@ Line 139: / Line 139: @@
 OWASP dans le cadre des Midis conférence est heureux d'accueillir Greg Castle.<br/>
-A lot is expected of software developers these days; they are expected to be experts in everything despite very little training. Throw in the IT security team (often with little-to-no knowledge of how to build software) telling developers what to do and how to do it, and the situation becomes strained. This silo-filled, tension-laced situation, coupled with short deadlines and pressure from management, often leads to stress, anxiety and less-than-ideal reactions from developers and security people alike.</br>
+A lot is expected of software developers these days; they are expected to be experts in everything despite very little training. Throw in the IT security team (often with little-to-no knowledge of how to build software) telling developers what to do and how to do it, and the situation becomes strained. This silo-filled, tension-laced situation, coupled with short deadlines and pressure from management, often leads to stress, anxiety and less-than-ideal reactions from developers and security people alike.<br/>
-This talk will explain how job insecurities can be brought out by IT leadership decisions, and how this can lead to real-life vulnerabilities in software. This is not a talk about “feelings”, this is a talk about creating programs, governance and policies that ensure security throughout the entire SDLC.</br></br>
+This talk will explain how job insecurities can be brought out by IT leadership decisions, and how this can lead to real-life vulnerabilities in software. This is not a talk about “feelings”, this is a talk about creating programs, governance and policies that ensure security throughout the entire SDLC.<br/><br/>
 No more laying blame and pointing fingers, it’s time to put our egos aside and focus on building high-quality software that is secure. The cause and effect of insecurities and other behavioral influencers, as well as several detailed and specific solutions will be presented that can be implemented at your own place of work, immediately. No more ambiguity or uncertainty from now on, only crystal-clear expectations.

@@ Line 120: / Line 120: @@
   Espace Desjardins
-OWASP dans le cadre des Midis conférence est heureux d'accueillir Daniel Kefer et Rene Reuter. Tous les deux viennent d'Allemagne et seront de passage à Montréal.<.br></br>
+OWASP dans le cadre des Midis conférence est heureux d'accueillir Daniel Kefer et Rene Reuter. Tous les deux viennent d'Allemagne et seront de passage à Montréal.<br/><br/>
 Nos conférenciers viendront présenter SecurityRAT, un projet OWASP pour gérer les requis de sécurité pendant le cycle de vie des dévelopements applicatifs (SDLC).
 <br /><br />
 Biographie :<br />
-Daniel Kefer travaille en sécurité depuis 2007 et a commencé en tant que pentester. Il travaille depuis 2011 chez 1&1 où il mène l'équipe AppSec interne.</br></br>
+Daniel Kefer travaille en sécurité depuis 2007 et a commencé en tant que pentester. Il travaille depuis 2011 chez 1&1 où il mène l'équipe AppSec interne.<br/><br/>
 René Reuter est ingénieur sécurité depuis 6 ans. Il travaille chez Robert Bosch GmbH en tant que consultant en charge d'identifier les vulnérabilités et problèmes de conception dans les applications internes.

@@ Line 133: / Line 133: @@
 <br />
 WHEN
-  Fri, 1 June 2018
+  Wed, 16 May 2018
 WHERE
   Marché Bonsecours, salle 1847

← Older revision		Revision as of 20:25, 17 June 2018
Line 111:		Line 111:

	= Lunch & Learn / Workshops 2018 =		= Lunch & Learn / Workshops 2018 =
		+
		+	== SecurityRAT - Handling of Security Requirements in SDLC ==
		+
		+	<br />
		+	WHEN
		+	Fri, 1 June 2018
		+	WHERE
		+	Espace Desjardins
		+
		+	OWASP dans le cadre des Midis conférence est heureux d'accueillir Daniel Kefer et Rene Reuter. Tous les deux viennent d'Allemagne et seront de passage à Montréal.<.br></br>
		+
		+	Nos conférenciers viendront présenter SecurityRAT, un projet OWASP pour gérer les requis de sécurité pendant le cycle de vie des dévelopements applicatifs (SDLC).
		+	<br /><br />
		+	Biographie :<br />
		+	Daniel Kefer travaille en sécurité depuis 2007 et a commencé en tant que pentester. Il travaille depuis 2011 chez 1&1 où il mène l'équipe AppSec interne.</br></br>
		+
		+	René Reuter est ingénieur sécurité depuis 6 ans. Il travaille chez Robert Bosch GmbH en tant que consultant en charge d'identifier les vulnérabilités et problèmes de conception dans les applications internes.
		+	<br />
		+
		+	== Insecurity in Information Technology ==
		+	<br />
		+	WHEN
		+	Fri, 1 June 2018
		+	WHERE
		+	Marché Bonsecours, salle 1847
		+
		+	OWASP dans le cadre des Midis conférence est heureux d'accueillir Greg Castle.<br/>
		+
		+	A lot is expected of software developers these days; they are expected to be experts in everything despite very little training. Throw in the IT security team (often with little-to-no knowledge of how to build software) telling developers what to do and how to do it, and the situation becomes strained. This silo-filled, tension-laced situation, coupled with short deadlines and pressure from management, often leads to stress, anxiety and less-than-ideal reactions from developers and security people alike.</br>
		+	This talk will explain how job insecurities can be brought out by IT leadership decisions, and how this can lead to real-life vulnerabilities in software. This is not a talk about “feelings”, this is a talk about creating programs, governance and policies that ensure security throughout the entire SDLC.</br></br>
		+
		+	No more laying blame and pointing fingers, it’s time to put our egos aside and focus on building high-quality software that is secure. The cause and effect of insecurities and other behavioral influencers, as well as several detailed and specific solutions will be presented that can be implemented at your own place of work, immediately. No more ambiguity or uncertainty from now on, only crystal-clear expectations.
		+	<br /><br />
		+	Biographie :<br />
		+	Tanya Janca is a senior cloud advocate for Microsoft, specializing in application security; evangelizing software security and advocating for developers through public speaking, her open source project OWASP DevSlop, and various forms of teaching via workshops, blogs and community events. As an ethical hacker, OWASP Project and Chapter Leader, software developer, effective altruist and professional computer geek of 20+ years, she is a person who is truly fascinated by the ‘science’ of computer science.
		+	<br />

	== Shipping in Pirate-Infested Waters: Practical Attack and Defense in Kubernetes ==		== Shipping in Pirate-Infested Waters: Practical Attack and Defense in Kubernetes ==

@@ Line 112: / Line 112: @@
 = Lunch & Learn / Workshops 2018 =
-== Operate PCI DSS infrastructure using DevOps approach ==
+== Shipping in Pirate-Infested Waters: Practical Attack and Defense in Kubernetes ==
 [[Image:Owasp-avril-2018.JPG  ]]
@@ Line 130: / Line 130: @@
 Greg est Tech Lead pour l'équipe sécurité Kubernetes et Google Container Engine chez Google. Avant GKE, Greg a travaillé dans l'équipe de réponse aux incidents de sécurité de Google, dévelopant des outils opensource d'investigations et à l'amélioration de la sécurité de Macos. Avant google, il a occupé de nombreuses positions incluant pentester, incident responder et analyste forensics.
 <br />
 == Operate PCI DSS infrastructure using DevOps approach ==

← Older revision		Revision as of 02:25, 13 May 2018
Line 111:		Line 111:

	= Lunch & Learn / Workshops 2018 =		= Lunch & Learn / Workshops 2018 =
		+
		+	== Operate PCI DSS infrastructure using DevOps approach ==
		+
		+	[[Image:Owasp-avril-2018.JPG ]]
		+	[[Image:Owasp-avril-2018-2.JPG ]]
		+	<br />
		+	[[Image:Video-link.png \| Link to video \| link=https://youtu.be/ohTq0no0ZVU ]] [https://youtu.be/ohTq0no0ZVU Watch the conference / Regarder la conférence] <br />
		+	WHEN
		+	April 30 2018
		+	WHERE
		+	Espace Desjardins
		+
		+	OWASP dans le cadre des Midis conférence est heureux d'accueillir Greg Castle.<br/>
		+
		+	L'événement contiendra une diffusion de "Shipping in Pirate-Infested Waters: Practical Attack and Defense in Kubernetes" présenté à Kubecon 2017, suivi de 20 min de questions/réponses avec Greg par vidéoconférence.
		+	<br /><br />
		+	Biographie :<br />
		+	Greg est Tech Lead pour l'équipe sécurité Kubernetes et Google Container Engine chez Google. Avant GKE, Greg a travaillé dans l'équipe de réponse aux incidents de sécurité de Google, dévelopant des outils opensource d'investigations et à l'amélioration de la sécurité de Macos. Avant google, il a occupé de nombreuses positions incluant pentester, incident responder et analyste forensics.
		+	<br />
		+

	== Operate PCI DSS infrastructure using DevOps approach ==		== Operate PCI DSS infrastructure using DevOps approach ==

@@ Line 110: / Line 110: @@
 <br />
-= Lunch & Learn / Workshops 2017 =
+= Lunch & Learn / Workshops 2018 =
 == Pourquoi un hacker peut-il contourner les mesures et solutions de sécurité... ==
@@ Line 395: / Line 416: @@
 [[Image:Workshop-zap-4-r.jpg | Google | link=https://www.google.ca/ ]]
 == WORKSHOP ! Top 10 OWASP - Unleash the threats ==

@@ Line 117: / Line 117: @@
 [[Image:Hamilton-septembre-2017-2.JPG ]]
 <br />
 WHEN
   September 18th 2017
@@ Line 129: / Line 130: @@
 Charles F. Hamilton est un consultant en sécurité et membre d’équipe « Red Team » de calibre international. Il se spécialise en test d’intrusion et la recherche de solution proactive de sécurité.
 <br />
 == Cas d'attaques vécus : Internet des objets (IOT) - Attaques DDoS ==

@@ Line 30: / Line 30: @@
 * [mailto:olivier.arteau(at)owasp.org Olivier Arteau], Logistic manager/Logistique
 <br />
-Special thanks to / Remerciements :
+<b> Volunteers / Volontaires OWASP Montréal: </b>
 * Simon Lacasse, Web content / Site internet
 == <b> Reach our chapter / Joindre le chapitre </b> ==

← Older revision		Revision as of 02:35, 13 October 2017
Line 60:		Line 60:

	[[Image:Spacer-horiz.gif‎]]		[[Image:Spacer-horiz.gif‎]]
		+
		+	== What we do / Nos activités ==
		+
		+	OWASP Montreal is a really active chapter. We organize monthly conferences and workshops. All our events are free and meant to improve the knowledge and awareness of the community's developers, managers and computer security specialists. To be aware of the next event and for additional information, follow us on social medias. <br />
		+
		+	OWASP Montréal est un des chapitres les plus actifs. Nous organisons mensuellement des ateliers et conférences. Tous nos événements sont gratuits et ont pour but d'améliorer les connaissances de la communauté. Ils s'adressent donc autant aux gestionnaires qu'aux développeurs et aux spécialistes en sécurité informatique. Pour plus d'informations sur nos activités et pour être au courant des prochaines dates d'événement, suivez nous sur les réseaux sociaux. <br />
		+
		+	<b>We also contribute to the vast OWASP knowledge base / Nous contribuons aussi aux ressources d'OWASP</b>
		+
		+	We list here the projects that were started by our members under OWASP's banner. <br />
		+	Nous listons ici les projets commencé par nos membres sous la banière d'OWASP. <br />
		+
		+	* [https://www.owasp.org/index.php/Vulnerability_Disclosure_Cheat_Sheet Vulnerability Disclosure Cheat Sheet]

	== Sponsorship & Membership / Commandite & Adhésion ==		== Sponsorship & Membership / Commandite & Adhésion ==