https://wiki.owasp.org/index.php?action=history&feed=atom&title=OWASP_German_Chapter_Stammtisch_Initiative%2FM%C3%BCnchen
OWASP German Chapter Stammtisch Initiative/München - Revision history
2026-04-16T19:53:03Z
Revision history for this page on the wiki
MediaWiki 1.27.2
https://wiki.owasp.org/index.php?title=OWASP_German_Chapter_Stammtisch_Initiative/M%C3%BCnchen&diff=256616&oldid=prev
T.Gigler: Einladung zum (105.) Münchner OWASP-Stammtisch am (4.) Di, 28.01.2020: Update der OWASP Top 10 Privacy Risks (Florian Stahl)
2020-01-11T16:12:34Z
<p>Einladung zum (105.) Münchner OWASP-Stammtisch am (4.) Di, 28.01.2020: Update der OWASP Top 10 Privacy Risks (Florian Stahl)</p>
<table class="diff diff-contentalign-left" data-mw="interface">
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr style='vertical-align: top;' lang='en'>
<td colspan='2' style="background-color: white; color:black; text-align: center;">← Older revision</td>
<td colspan='2' style="background-color: white; color:black; text-align: center;">Revision as of 16:12, 11 January 2020</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l9" >Line 9:</td>
<td colspan="2" class="diff-lineno">Line 9:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><span style="font-size:110%;"><b>Einladung</b> zum (</span><span style="color:#008040; font-size:120%"><b>105.</b></span><span style="font-size:110%;">) <b>Münchner OWASP-Stammtisch am <span style="background:yellow;">Di, 28.01.2020</span>, um 19:00 Uhr <span style="background:yellow; font-size:120%">(erst am 4. Dienstag)</span>.</b>  </div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><span style="font-size:110%;"><b>Einladung</b> zum (</span><span style="color:#008040; font-size:120%"><b>105.</b></span><span style="font-size:110%;">) <b>Münchner OWASP-Stammtisch am <span style="background:yellow;">Di, 28.01.2020</span>, um 19:00 Uhr <span style="background:yellow; font-size:120%">(erst am 4. Dienstag)</span>.</b>  </div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <b>Agenda:</b></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <b>Agenda:</b></div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del class="diffchange diffchange-inline"><!----</del></div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>:*<b>Vortrag: <ins class="diffchange diffchange-inline">Update der OWASP Top 10 Privacy Risks (<u>[[User</ins>:<ins class="diffchange diffchange-inline">Florian Stahl|Florian Stahl]]</u></ins>)</b><br><ins class="diffchange diffchange-inline">* Rückblick & Hintergrund<br>* Aktuelle Version der OWASP Top 10 Privacy Risks </ins>(<ins class="diffchange diffchange-inline">2014</ins>)<br><ins class="diffchange diffchange-inline">* Update 2019/2020<br>&nbsp;&nbsp;</ins>- <ins class="diffchange diffchange-inline">Review Methodik<br>&nbsp;&nbsp;</ins>- <ins class="diffchange diffchange-inline">Diskussion & Update der “Risk Candidates”</ins><br><ins class="diffchange diffchange-inline">&nbsp;&nbsp;- Risikobewertung (Schaden & Eintrittswahrscheinlichkeit)</ins><br><ins class="diffchange diffchange-inline">&nbsp;&nbsp;</ins>- <ins class="diffchange diffchange-inline">Offene Punkte<br</ins>><ins class="diffchange diffchange-inline">* Fazit</ins></div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>:*<b>Vortrag: <del class="diffchange diffchange-inline">Open Source Software Flood</del>: <del class="diffchange diffchange-inline">Learning to swim (Stanislav Sivak</del>)</b><br><del class="diffchange diffchange-inline">If you want to be in nowadays, you count on open source software </del>(<del class="diffchange diffchange-inline">OSS</del>) <del class="diffchange diffchange-inline">to stay flexible and avoid reinventing the wheel. Many applications contain more open source code than proprietary code. Using components with known vulnerabilities is one of the most common OWASP risks.</del><br><del class="diffchange diffchange-inline">In this presentation, we will look at the security, operational and legal challenges associated with the use of third</del>-<del class="diffchange diffchange-inline">party components which are mostly open source. Next, we discuss how these risks can be addressed using various make-it-yourself or buy</del>-<del class="diffchange diffchange-inline">it approaches so that you can stay atop of the OSS flood.</del><br><br><del class="diffchange diffchange-inline">Bio: Stanislav Sivak has held several positions in the IT-security in the last 10 years: starting as a developer, continuing as Linux/database security administrator, however spending most time as consultant, working for the BIG 4, a small German-based company and he currently focuses on everything around the secure software development lifecycle. --</del>-></div></td><td colspan="2"> </td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>:* <b>Freie Diskussion,</b> <span style="background:yellow;">bringt bitte Themen mit!</span></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>:* <b>Freie Diskussion,</b> <span style="background:yellow;">bringt bitte Themen mit!</span></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <span style="background:yellow; font-size:110%"><b>Wir suchen noch Vorträge für die weiteren Stammtische in 2020!</b></span></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <span style="background:yellow; font-size:110%"><b>Wir suchen noch Vorträge für die weiteren Stammtische in 2020!</b></span></div></td></tr>
</table>
T.Gigler
https://wiki.owasp.org/index.php?title=OWASP_German_Chapter_Stammtisch_Initiative/M%C3%BCnchen&diff=256555&oldid=prev
T.Gigler: Publikation zum Vortrag verlinkt: Stack Overflow Considered Helpful! Deep Learning Security Nudges Towards Stronger Cryptography (Felix Fischer, PhD Student am Lehrstuhl für Cyber Trust, TU München)
2020-01-06T12:22:20Z
<p>Publikation zum Vortrag verlinkt: Stack Overflow Considered Helpful! Deep Learning Security Nudges Towards Stronger Cryptography (Felix Fischer, PhD Student am Lehrstuhl für Cyber Trust, TU München)</p>
<table class="diff diff-contentalign-left" data-mw="interface">
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr style='vertical-align: top;' lang='en'>
<td colspan='2' style="background-color: white; color:black; text-align: center;">← Older revision</td>
<td colspan='2' style="background-color: white; color:black; text-align: center;">Revision as of 12:22, 6 January 2020</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l54" >Line 54:</td>
<td colspan="2" class="diff-lineno">Line 54:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* November 2019: <u>[[Media:Software_Composition_Analysis_OWASP_Stammtisch_-_Stanislav_Sivak.pdf|Open Source Software Flood: Learning to swim]]</u> (Stanislav Sivak)</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* November 2019: <u>[[Media:Software_Composition_Analysis_OWASP_Stammtisch_-_Stanislav_Sivak.pdf|Open Source Software Flood: Learning to swim]]</u> (Stanislav Sivak)</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Oktober 2019: <u>[[Media:Security for Business Benefit - Buy Security Services or do it yourself - Jens Bitter.pdf|Security for Business Benefit - Buy Security Services or do it yourself (DIY)?]]</u> (Jens Bitter)</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Oktober 2019: <u>[[Media:Security for Business Benefit - Buy Security Services or do it yourself - Jens Bitter.pdf|Security for Business Benefit - Buy Security Services or do it yourself (DIY)?]]</u> (Jens Bitter)</div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>* September 2019: Stack Overflow Considered Helpful! Deep Learning Security Nudges Towards Stronger Cryptography (Felix Fischer, PhD Student am Lehrstuhl für Cyber Trust, TU München)</div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>* September 2019: Stack Overflow Considered Helpful! Deep Learning Security Nudges Towards Stronger Cryptography (<ins class="diffchange diffchange-inline"><u>[https://www.in.tum.de/cybertrust/members/felix-fischer/ </ins>Felix Fischer, PhD Student am Lehrstuhl für Cyber Trust, TU München<ins class="diffchange diffchange-inline">]</u></ins>)<ins class="diffchange diffchange-inline">, vgl Publications: <u>[https://www.in.tum.de/fileadmin/w00bws/cybertrust/papers/2019-USENIXSec-Fischer.pdf Usenix Security 2019 (Author Version)]</u></ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Juli 2019: Bug Bounty Platforms: Empirical Analysis and Economic Challenges (<u>[https://www.cybertrust.in.tum.de/index.php?id=101 Prof. Ph.D. Jens Grossklags, Lehrstuhl für Cyber Trust, TU München]</u>), <u>[https://www.cybertrust.in.tum.de/index.php?id=102&L=0 vgl Publikationen]</u>: <u>[https://www.jstor.org/stable/pdf/10.5325/jinfopoli.7.2017.0372.pdf Devising Effective Policies for Bug-Bounty Platforms and Security Vulnerability Discovery]</u>, <u>[https://academic.oup.com/cybersecurity/article/3/2/81/4524054 Given enough eyeballs, all bugs are shallow? Revisiting Eric Raymond with bug bounty programs]</u>  </div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Juli 2019: Bug Bounty Platforms: Empirical Analysis and Economic Challenges (<u>[https://www.cybertrust.in.tum.de/index.php?id=101 Prof. Ph.D. Jens Grossklags, Lehrstuhl für Cyber Trust, TU München]</u>), <u>[https://www.cybertrust.in.tum.de/index.php?id=102&L=0 vgl Publikationen]</u>: <u>[https://www.jstor.org/stable/pdf/10.5325/jinfopoli.7.2017.0372.pdf Devising Effective Policies for Bug-Bounty Platforms and Security Vulnerability Discovery]</u>, <u>[https://academic.oup.com/cybersecurity/article/3/2/81/4524054 Given enough eyeballs, all bugs are shallow? Revisiting Eric Raymond with bug bounty programs]</u>  </div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Juni 2019 (100. Stammtisch): Vortrag 1: Security in a DevOps world (Martin Knobloch), Vortrag 2: Develop secure software with OWASP tools & guides (Martin Knobloch)</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Juni 2019 (100. Stammtisch): Vortrag 1: Security in a DevOps world (Martin Knobloch), Vortrag 2: Develop secure software with OWASP tools & guides (Martin Knobloch)</div></td></tr>
</table>
T.Gigler
https://wiki.owasp.org/index.php?title=OWASP_German_Chapter_Stammtisch_Initiative/M%C3%BCnchen&diff=256554&oldid=prev
T.Gigler: Folien des Vortrags: Security for Business Benefit - Buy Security Services or do it yourself (DIY)? (Jens Bitter) hochgeladen
2020-01-06T12:05:34Z
<p>Folien des Vortrags: Security for Business Benefit - Buy Security Services or do it yourself (DIY)? (Jens Bitter) hochgeladen</p>
<table class="diff diff-contentalign-left" data-mw="interface">
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr style='vertical-align: top;' lang='en'>
<td colspan='2' style="background-color: white; color:black; text-align: center;">← Older revision</td>
<td colspan='2' style="background-color: white; color:black; text-align: center;">Revision as of 12:05, 6 January 2020</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l53" >Line 53:</td>
<td colspan="2" class="diff-lineno">Line 53:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><!--- Direkt-Link: https://www.owasp.org/index.php?title=OWASP_German_Chapter_Stammtisch_Initiative/M%C3%BCnchen#Bereits_gehaltene_Stammtisch-Vortr.C3.A4ge ---></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><!--- Direkt-Link: https://www.owasp.org/index.php?title=OWASP_German_Chapter_Stammtisch_Initiative/M%C3%BCnchen#Bereits_gehaltene_Stammtisch-Vortr.C3.A4ge ---></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* November 2019: <u>[[Media:Software_Composition_Analysis_OWASP_Stammtisch_-_Stanislav_Sivak.pdf|Open Source Software Flood: Learning to swim]]</u> (Stanislav Sivak)</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* November 2019: <u>[[Media:Software_Composition_Analysis_OWASP_Stammtisch_-_Stanislav_Sivak.pdf|Open Source Software Flood: Learning to swim]]</u> (Stanislav Sivak)</div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>* Oktober 2019: Security for Business Benefit - Buy Security Services or do it yourself (DIY)? (Jens Bitter)</div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>* Oktober 2019<ins class="diffchange diffchange-inline">: <u>[[Media</ins>:<ins class="diffchange diffchange-inline">Security for Business Benefit - Buy Security Services or do it yourself - Jens Bitter.pdf|</ins>Security for Business Benefit - Buy Security Services or do it yourself (DIY)?<ins class="diffchange diffchange-inline">]]</u> </ins>(Jens Bitter)</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* September 2019: Stack Overflow Considered Helpful! Deep Learning Security Nudges Towards Stronger Cryptography (Felix Fischer, PhD Student am Lehrstuhl für Cyber Trust, TU München)</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* September 2019: Stack Overflow Considered Helpful! Deep Learning Security Nudges Towards Stronger Cryptography (Felix Fischer, PhD Student am Lehrstuhl für Cyber Trust, TU München)</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Juli 2019: Bug Bounty Platforms: Empirical Analysis and Economic Challenges (<u>[https://www.cybertrust.in.tum.de/index.php?id=101 Prof. Ph.D. Jens Grossklags, Lehrstuhl für Cyber Trust, TU München]</u>), <u>[https://www.cybertrust.in.tum.de/index.php?id=102&L=0 vgl Publikationen]</u>: <u>[https://www.jstor.org/stable/pdf/10.5325/jinfopoli.7.2017.0372.pdf Devising Effective Policies for Bug-Bounty Platforms and Security Vulnerability Discovery]</u>, <u>[https://academic.oup.com/cybersecurity/article/3/2/81/4524054 Given enough eyeballs, all bugs are shallow? Revisiting Eric Raymond with bug bounty programs]</u>  </div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Juli 2019: Bug Bounty Platforms: Empirical Analysis and Economic Challenges (<u>[https://www.cybertrust.in.tum.de/index.php?id=101 Prof. Ph.D. Jens Grossklags, Lehrstuhl für Cyber Trust, TU München]</u>), <u>[https://www.cybertrust.in.tum.de/index.php?id=102&L=0 vgl Publikationen]</u>: <u>[https://www.jstor.org/stable/pdf/10.5325/jinfopoli.7.2017.0372.pdf Devising Effective Policies for Bug-Bounty Platforms and Security Vulnerability Discovery]</u>, <u>[https://academic.oup.com/cybersecurity/article/3/2/81/4524054 Given enough eyeballs, all bugs are shallow? Revisiting Eric Raymond with bug bounty programs]</u>  </div></td></tr>
</table>
T.Gigler
https://wiki.owasp.org/index.php?title=OWASP_German_Chapter_Stammtisch_Initiative/M%C3%BCnchen&diff=256552&oldid=prev
T.Gigler: Weitere Stammtische: Februar 2020
2020-01-06T11:59:36Z
<p>Weitere Stammtische: Februar 2020</p>
<table class="diff diff-contentalign-left" data-mw="interface">
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr style='vertical-align: top;' lang='en'>
<td colspan='2' style="background-color: white; color:black; text-align: center;">← Older revision</td>
<td colspan='2' style="background-color: white; color:black; text-align: center;">Revision as of 11:59, 6 January 2020</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l23" >Line 23:</td>
<td colspan="2" class="diff-lineno">Line 23:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>== Geplante Stammtisch-Vorträge und -Diskussionen==</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>== Geplante Stammtisch-Vorträge und -Diskussionen==</div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">* Februar 2020: 18.02.2020</ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><!---</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><!---</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* August 2019: Sommerferien - KEIN OWASP-Stammtisch</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* August 2019: Sommerferien - KEIN OWASP-Stammtisch</div></td></tr>
<tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l29" >Line 29:</td>
<td colspan="2" class="diff-lineno">Line 30:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Oktober 2019:  22.10.2019 (4. Di)</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Oktober 2019:  22.10.2019 (4. Di)</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* November 2019:  19.11.2019 (3. Di)</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* November 2019:  19.11.2019 (3. Di)</div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">* Dezember 2019: Weihnachtsferien - KEIN OWASP-Stammtisch</ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>----></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>----></div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">* Dezember 2019: Weihnachtsferien - KEIN OWASP-Stammtisch</del></div></td><td colspan="2"> </td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <b>Wir suchen Vorträge für die weiteren Stammtische in 2020!</b><br>Möchte jemand einen Vortrag oder einen Lightning-Talk halten? Prima! Sobald wir eine konkrete Zusage haben, werden diese bei der Ankündigung des jeweiligen Termins mit bekannt geben.<br>Also, wie immer: Ich bitte um kurze Info an mich, ob jemand noch weitere (für uns relevante) Themen parat hat, die er uns näher bringen möchte. ''Verkaufsveranstalter werden alle 20 Minuten ausgebuht und müssen dann eine (neue) Runde Bier bezahlen.''</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <b>Wir suchen Vorträge für die weiteren Stammtische in 2020!</b><br>Möchte jemand einen Vortrag oder einen Lightning-Talk halten? Prima! Sobald wir eine konkrete Zusage haben, werden diese bei der Ankündigung des jeweiligen Termins mit bekannt geben.<br>Also, wie immer: Ich bitte um kurze Info an mich, ob jemand noch weitere (für uns relevante) Themen parat hat, die er uns näher bringen möchte. ''Verkaufsveranstalter werden alle 20 Minuten ausgebuht und müssen dann eine (neue) Runde Bier bezahlen.''</div></td></tr>
</table>
T.Gigler
https://wiki.owasp.org/index.php?title=OWASP_German_Chapter_Stammtisch_Initiative/M%C3%BCnchen&diff=256549&oldid=prev
T.Gigler: Einladung zum (105.) Münchner OWASP-Stammtisch am (4.) Di, 28.01.2020; Upload der Folien zu Open Source Software Flood: Learning to swim (Stanislav Sivak)
2020-01-06T11:45:04Z
<p>Einladung zum (105.) Münchner OWASP-Stammtisch am (4.) Di, 28.01.2020; Upload der Folien zu Open Source Software Flood: Learning to swim (Stanislav Sivak)</p>
<table class="diff diff-contentalign-left" data-mw="interface">
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr style='vertical-align: top;' lang='en'>
<td colspan='2' style="background-color: white; color:black; text-align: center;">← Older revision</td>
<td colspan='2' style="background-color: white; color:black; text-align: center;">Revision as of 11:45, 6 January 2020</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l4" >Line 4:</td>
<td colspan="2" class="diff-lineno">Line 4:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>== '''A K T U E L L E S :''' ==</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>== '''A K T U E L L E S :''' ==</div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><!--- <span style="background:yellow; font-size:120%"><b>Wir suchen noch einen Vortrag für den Stammtisch am 19.11.<del class="diffchange diffchange-inline">2019</del>!</b></span> ---><!--- <span style="font-size:120%"><b>Wir suchen Vorträge für die nächsten Stammtische!</b></span>  </div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><!--- <span style="background:yellow; font-size:120%"><b>Wir suchen noch einen Vortrag für den Stammtisch am 19.11.<ins class="diffchange diffchange-inline">2020</ins>!</b></span> ---><!--- <span style="font-size:120%"><b>Wir suchen Vorträge für die nächsten Stammtische!</b></span>  </div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><br></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><br></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><br> ---></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><br> ---></div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><span style="font-size:110%;"><b>Einladung</b> zum (</span><span style="color:#008040; font-size:120%"><b><del class="diffchange diffchange-inline">104</del>.</b></span><span style="font-size:110%;">) <b>Münchner OWASP-Stammtisch am <span style="background:yellow;">Di, <del class="diffchange diffchange-inline">19</del>.<del class="diffchange diffchange-inline">11</del>.<del class="diffchange diffchange-inline">2019</del></span>, um 19:00 Uhr</b><del class="diffchange diffchange-inline">. </del></div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><span style="font-size:110%;"><b>Einladung</b> zum (</span><span style="color:#008040; font-size:120%"><b><ins class="diffchange diffchange-inline">105</ins>.</b></span><span style="font-size:110%;">) <b>Münchner OWASP-Stammtisch am <span style="background:yellow;">Di, <ins class="diffchange diffchange-inline">28</ins>.<ins class="diffchange diffchange-inline">01</ins>.<ins class="diffchange diffchange-inline">2020</ins></span>, um 19:00 Uhr <ins class="diffchange diffchange-inline"><span style="background:yellow; font-size:120%">(erst am 4. Dienstag)</span>.</ins></b>  </div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <b>Agenda:</b></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <b>Agenda:</b></div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>:*<b>Vortrag: Open Source Software Flood: Learning to swim (Stanislav Sivak)</b><br>If you want to be in nowadays, you count on open source software (OSS) to stay flexible and avoid reinventing the wheel. Many applications contain more open source code than proprietary code. Using components with known vulnerabilities is one of the most common OWASP risks.<br>In this presentation, we will look at the security, operational and legal challenges associated with the use of third-party components which are mostly open source. Next, we discuss how these risks can be addressed using various make-it-yourself or buy-it approaches so that you can stay atop of the OSS flood.<br><br>Bio: Stanislav Sivak has held several positions in the IT-security in the last 10 years: starting as a developer, continuing as Linux/database security administrator, however spending most time as consultant, working for the BIG 4, a small German-based company and he currently focuses on everything around the secure software development lifecycle.</div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins class="diffchange diffchange-inline"><!----</ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>:*<b>Vortrag: Open Source Software Flood: Learning to swim (Stanislav Sivak)</b><br>If you want to be in nowadays, you count on open source software (OSS) to stay flexible and avoid reinventing the wheel. Many applications contain more open source code than proprietary code. Using components with known vulnerabilities is one of the most common OWASP risks.<br>In this presentation, we will look at the security, operational and legal challenges associated with the use of third-party components which are mostly open source. Next, we discuss how these risks can be addressed using various make-it-yourself or buy-it approaches so that you can stay atop of the OSS flood.<br><br>Bio: Stanislav Sivak has held several positions in the IT-security in the last 10 years: starting as a developer, continuing as Linux/database security administrator, however spending most time as consultant, working for the BIG 4, a small German-based company and he currently focuses on everything around the secure software development lifecycle. <ins class="diffchange diffchange-inline">---></ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>:* <b>Freie Diskussion,</b> <span style="background:yellow;">bringt bitte Themen mit!</span></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>:* <b>Freie Diskussion,</b> <span style="background:yellow;">bringt bitte Themen mit!</span></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <span style="background:yellow; font-size:110%"><b>Wir suchen noch Vorträge für die weiteren Stammtische in 2020!</b></span></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <span style="background:yellow; font-size:110%"><b>Wir suchen noch Vorträge für die weiteren Stammtische in 2020!</b></span></div></td></tr>
<tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l50" >Line 50:</td>
<td colspan="2" class="diff-lineno">Line 51:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>== Bereits gehaltene Stammtisch-Vorträge ==</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>== Bereits gehaltene Stammtisch-Vorträge ==</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><!--- Direkt-Link: https://www.owasp.org/index.php?title=OWASP_German_Chapter_Stammtisch_Initiative/M%C3%BCnchen#Bereits_gehaltene_Stammtisch-Vortr.C3.A4ge ---></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><!--- Direkt-Link: https://www.owasp.org/index.php?title=OWASP_German_Chapter_Stammtisch_Initiative/M%C3%BCnchen#Bereits_gehaltene_Stammtisch-Vortr.C3.A4ge ---></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">* November 2019: <u>[[Media:Software_Composition_Analysis_OWASP_Stammtisch_-_Stanislav_Sivak.pdf|Open Source Software Flood: Learning to swim]]</u> (Stanislav Sivak)</ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Oktober 2019: Security for Business Benefit - Buy Security Services or do it yourself (DIY)? (Jens Bitter)</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Oktober 2019: Security for Business Benefit - Buy Security Services or do it yourself (DIY)? (Jens Bitter)</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* September 2019: Stack Overflow Considered Helpful! Deep Learning Security Nudges Towards Stronger Cryptography (Felix Fischer, PhD Student am Lehrstuhl für Cyber Trust, TU München)</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* September 2019: Stack Overflow Considered Helpful! Deep Learning Security Nudges Towards Stronger Cryptography (Felix Fischer, PhD Student am Lehrstuhl für Cyber Trust, TU München)</div></td></tr>
</table>
T.Gigler
https://wiki.owasp.org/index.php?title=OWASP_German_Chapter_Stammtisch_Initiative/M%C3%BCnchen&diff=256049&oldid=prev
T.Gigler: Einladung zum (104.) Münchner OWASP-Stammtisch am Di, 19.11.2019: Open Source Software Flood: Learning to swim (Stanislav Sivak)
2019-11-13T22:49:28Z
<p>Einladung zum (104.) Münchner OWASP-Stammtisch am Di, 19.11.2019: Open Source Software Flood: Learning to swim (Stanislav Sivak)</p>
<table class="diff diff-contentalign-left" data-mw="interface">
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr style='vertical-align: top;' lang='en'>
<td colspan='2' style="background-color: white; color:black; text-align: center;">← Older revision</td>
<td colspan='2' style="background-color: white; color:black; text-align: center;">Revision as of 22:49, 13 November 2019</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l4" >Line 4:</td>
<td colspan="2" class="diff-lineno">Line 4:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>== '''A K T U E L L E S :''' ==</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>== '''A K T U E L L E S :''' ==</div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><!--- <span style="background:yellow; font-size:120%"><b>Wir suchen noch einen Vortrag für den Stammtisch am <del class="diffchange diffchange-inline">22</del>.<del class="diffchange diffchange-inline">10</del>.2019!</b></span> ---><!--- <span style="font-size:120%"><b>Wir suchen Vorträge für die nächsten Stammtische!</b></span>  </div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><!--- <span style="background:yellow; font-size:120%"><b>Wir suchen noch einen Vortrag für den Stammtisch am <ins class="diffchange diffchange-inline">19</ins>.<ins class="diffchange diffchange-inline">11</ins>.2019!</b></span> ---><!--- <span style="font-size:120%"><b>Wir suchen Vorträge für die nächsten Stammtische!</b></span>  </div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><br></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><br></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><br> ---></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><br> ---></div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><span style="font-size:110%;"><b>Einladung</b> zum (</span><span style="color:#008040; font-size:120%"><b><del class="diffchange diffchange-inline">103</del>.</b></span><span style="font-size:110%;">) <b>Münchner OWASP-Stammtisch am <span style="background:yellow;">Di, <del class="diffchange diffchange-inline">22</del>.<del class="diffchange diffchange-inline">10</del>.2019</span>, um 19:00 Uhr</b>. <del class="diffchange diffchange-inline"><span style="background:yellow; font-size:100%"><b>Jetzt doch mit Vortrag, Danke an Jens!</b></span></del></div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><span style="font-size:110%;"><b>Einladung</b> zum (</span><span style="color:#008040; font-size:120%"><b><ins class="diffchange diffchange-inline">104</ins>.</b></span><span style="font-size:110%;">) <b>Münchner OWASP-Stammtisch am <span style="background:yellow;">Di, <ins class="diffchange diffchange-inline">19</ins>.<ins class="diffchange diffchange-inline">11</ins>.2019</span>, um 19:00 Uhr</b>.  </div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <b>Agenda:</b></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <b>Agenda:</b></div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>:*<b>Vortrag<del class="diffchange diffchange-inline"><span style="background</del>:<del class="diffchange diffchange-inline">yellow"></span></del>: <del class="diffchange diffchange-inline">Security for Business Benefit - Buy Security Services or do it yourself </del>(<del class="diffchange diffchange-inline">DIY)? (Jens Bitter</del>)</b><br><del class="diffchange diffchange-inline">- Strategische Geschäftsanforderungen an Sicherheit</del><br>- <del class="diffchange diffchange-inline">Modellierung von Lösungsszenarien mit Abwägung Do / Buy (z</del>.<del class="diffchange diffchange-inline">B. GRC</del>, <del class="diffchange diffchange-inline">SOC)<br></del>- <del class="diffchange diffchange-inline">Offene Diskussion bzgl</del>. <del class="diffchange diffchange-inline">eigener Erfahrungen der Teilnehmer</del><br><br>Bio <del class="diffchange diffchange-inline">(excerpt)</del>: <del class="diffchange diffchange-inline">Jens Bitter </del>has <del class="diffchange diffchange-inline">20+ year’s experience with focus on Information Security & Risk Management </del>as <del class="diffchange diffchange-inline">well as Audit. In </del>a <del class="diffchange diffchange-inline">lot of projects he was responsible for design</del>, <del class="diffchange diffchange-inline">implementation and evolution </del>as <del class="diffchange diffchange-inline">well </del>as <del class="diffchange diffchange-inline">operations of Information Security Offices</del>, <del class="diffchange diffchange-inline">IS Risk Management</del>, <del class="diffchange diffchange-inline">IT Compliance / Data Privacy (acc. EU</del>-<del class="diffchange diffchange-inline">GDPR / Protection Act / BDSG) </del>and <del class="diffchange diffchange-inline">Information Security Management Systems including Business Continuity Management</del>.</div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>:*<b>Vortrag: <ins class="diffchange diffchange-inline">Open Source Software Flood</ins>: <ins class="diffchange diffchange-inline">Learning to swim </ins>(<ins class="diffchange diffchange-inline">Stanislav Sivak</ins>)</b><br><ins class="diffchange diffchange-inline">If you want to be in nowadays, you count on open source software (OSS) to stay flexible and avoid reinventing the wheel. Many applications contain more open source code than proprietary code. Using components with known vulnerabilities is one of the most common OWASP risks.</ins><br><ins class="diffchange diffchange-inline">In this presentation, we will look at the security, operational and legal challenges associated with the use of third</ins>-<ins class="diffchange diffchange-inline">party components which are mostly open source</ins>. <ins class="diffchange diffchange-inline">Next</ins>, <ins class="diffchange diffchange-inline">we discuss how these risks can be addressed using various make-it-yourself or buy</ins>-<ins class="diffchange diffchange-inline">it approaches so that you can stay atop of the OSS flood</ins>.<br><br>Bio: <ins class="diffchange diffchange-inline">Stanislav Sivak </ins>has <ins class="diffchange diffchange-inline">held several positions in the IT-security in the last 10 years: starting </ins>as a <ins class="diffchange diffchange-inline">developer</ins>, <ins class="diffchange diffchange-inline">continuing </ins>as <ins class="diffchange diffchange-inline">Linux/database security administrator, however spending most time </ins>as <ins class="diffchange diffchange-inline">consultant</ins>, <ins class="diffchange diffchange-inline">working for the BIG 4</ins>, <ins class="diffchange diffchange-inline">a small German</ins>-<ins class="diffchange diffchange-inline">based company </ins>and <ins class="diffchange diffchange-inline">he currently focuses on everything around the secure software development lifecycle</ins>.</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>:* <b>Freie Diskussion,</b> <span style="background:yellow;">bringt bitte Themen mit!</span></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>:* <b>Freie Diskussion,</b> <span style="background:yellow;">bringt bitte Themen mit!</span></div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>* <span style="background:yellow; font-size:110%"><b>Wir suchen noch Vorträge für die weiteren Stammtische!</b></span></div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>* <span style="background:yellow; font-size:110%"><b>Wir suchen noch Vorträge für die weiteren Stammtische <ins class="diffchange diffchange-inline">in 2020</ins>!</b></span></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <b><span <!---- style="background:yellow;-----> font-size:110%;">Ort: [http://www.hackerhaus.de/ Hackerhaus]</span>, Sendlinger Straße 14, 80331 München</b></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <b><span <!---- style="background:yellow;-----> font-size:110%;">Ort: [http://www.hackerhaus.de/ Hackerhaus]</span>, Sendlinger Straße 14, 80331 München</b></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>:* Mit <b><u>[http://efa.mvv-muenchen.de öffentlichen Verkehrsmitteln]</u></b>:</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>:* Mit <b><u>[http://efa.mvv-muenchen.de öffentlichen Verkehrsmitteln]</u></b>:</div></td></tr>
<tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l26" >Line 26:</td>
<td colspan="2" class="diff-lineno">Line 26:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Dezember 2019: Weihnachtsferien - KEIN OWASP-Stammtisch</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Dezember 2019: Weihnachtsferien - KEIN OWASP-Stammtisch</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Juli 2019:      16.07.2019 (3. Di)</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Juli 2019:      16.07.2019 (3. Di)</div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">----></del></div></td><td colspan="2"> </td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Oktober 2019:  22.10.2019 (4. Di)</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Oktober 2019:  22.10.2019 (4. Di)</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* November 2019:  19.11.2019 (3. Di)</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* November 2019:  19.11.2019 (3. Di)</div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">----></ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Dezember 2019: Weihnachtsferien - KEIN OWASP-Stammtisch</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Dezember 2019: Weihnachtsferien - KEIN OWASP-Stammtisch</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>* <b>Wir suchen Vorträge für die weiteren Stammtische in <del class="diffchange diffchange-inline">2019</del>!</b><br>Möchte jemand einen Vortrag oder einen Lightning-Talk halten? Prima! Sobald wir eine konkrete Zusage haben, werden diese bei der Ankündigung des jeweiligen Termins mit bekannt geben.<br>Also, wie immer: Ich bitte um kurze Info an mich, ob jemand noch weitere (für uns relevante) Themen parat hat, die er uns näher bringen möchte. ''Verkaufsveranstalter werden alle 20 Minuten ausgebuht und müssen dann eine (neue) Runde Bier bezahlen.''</div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>* <b>Wir suchen Vorträge für die weiteren Stammtische in <ins class="diffchange diffchange-inline">2020</ins>!</b><br>Möchte jemand einen Vortrag oder einen Lightning-Talk halten? Prima! Sobald wir eine konkrete Zusage haben, werden diese bei der Ankündigung des jeweiligen Termins mit bekannt geben.<br>Also, wie immer: Ich bitte um kurze Info an mich, ob jemand noch weitere (für uns relevante) Themen parat hat, die er uns näher bringen möchte. ''Verkaufsveranstalter werden alle 20 Minuten ausgebuht und müssen dann eine (neue) Runde Bier bezahlen.''</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td></tr>
<tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l50" >Line 50:</td>
<td colspan="2" class="diff-lineno">Line 50:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>== Bereits gehaltene Stammtisch-Vorträge ==</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>== Bereits gehaltene Stammtisch-Vorträge ==</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><!--- Direkt-Link: https://www.owasp.org/index.php?title=OWASP_German_Chapter_Stammtisch_Initiative/M%C3%BCnchen#Bereits_gehaltene_Stammtisch-Vortr.C3.A4ge ---></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><!--- Direkt-Link: https://www.owasp.org/index.php?title=OWASP_German_Chapter_Stammtisch_Initiative/M%C3%BCnchen#Bereits_gehaltene_Stammtisch-Vortr.C3.A4ge ---></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">* Oktober 2019: Security for Business Benefit - Buy Security Services or do it yourself (DIY)? (Jens Bitter)</ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* September 2019: Stack Overflow Considered Helpful! Deep Learning Security Nudges Towards Stronger Cryptography (Felix Fischer, PhD Student am Lehrstuhl für Cyber Trust, TU München)</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* September 2019: Stack Overflow Considered Helpful! Deep Learning Security Nudges Towards Stronger Cryptography (Felix Fischer, PhD Student am Lehrstuhl für Cyber Trust, TU München)</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Juli 2019: Bug Bounty Platforms: Empirical Analysis and Economic Challenges (<u>[https://www.cybertrust.in.tum.de/index.php?id=101 Prof. Ph.D. Jens Grossklags, Lehrstuhl für Cyber Trust, TU München]</u>), <u>[https://www.cybertrust.in.tum.de/index.php?id=102&L=0 vgl Publikationen]</u>: <u>[https://www.jstor.org/stable/pdf/10.5325/jinfopoli.7.2017.0372.pdf Devising Effective Policies for Bug-Bounty Platforms and Security Vulnerability Discovery]</u>, <u>[https://academic.oup.com/cybersecurity/article/3/2/81/4524054 Given enough eyeballs, all bugs are shallow? Revisiting Eric Raymond with bug bounty programs]</u>  </div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Juli 2019: Bug Bounty Platforms: Empirical Analysis and Economic Challenges (<u>[https://www.cybertrust.in.tum.de/index.php?id=101 Prof. Ph.D. Jens Grossklags, Lehrstuhl für Cyber Trust, TU München]</u>), <u>[https://www.cybertrust.in.tum.de/index.php?id=102&L=0 vgl Publikationen]</u>: <u>[https://www.jstor.org/stable/pdf/10.5325/jinfopoli.7.2017.0372.pdf Devising Effective Policies for Bug-Bounty Platforms and Security Vulnerability Discovery]</u>, <u>[https://academic.oup.com/cybersecurity/article/3/2/81/4524054 Given enough eyeballs, all bugs are shallow? Revisiting Eric Raymond with bug bounty programs]</u>  </div></td></tr>
</table>
T.Gigler
https://wiki.owasp.org/index.php?title=OWASP_German_Chapter_Stammtisch_Initiative/M%C3%BCnchen&diff=255596&oldid=prev
T.Gigler: 103. Stammtisch mit Vortrag: Security for Business Benefit - Buy Security Services or Do-It-Yourself (DIY)? (Jens Bitter)
2019-10-21T21:08:39Z
<p>103. Stammtisch mit Vortrag: Security for Business Benefit - Buy Security Services or Do-It-Yourself (DIY)? (Jens Bitter)</p>
<table class="diff diff-contentalign-left" data-mw="interface">
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr style='vertical-align: top;' lang='en'>
<td colspan='2' style="background-color: white; color:black; text-align: center;">← Older revision</td>
<td colspan='2' style="background-color: white; color:black; text-align: center;">Revision as of 21:08, 21 October 2019</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l7" >Line 7:</td>
<td colspan="2" class="diff-lineno">Line 7:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><br></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><br></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><br> ---></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><br> ---></div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><span style="font-size:110%;"><b>Einladung</b> zum (</span><span style="color:#008040; font-size:120%"><b>103.</b></span><span style="font-size:110%;">) <b>Münchner OWASP-Stammtisch am <span style="background:yellow;">Di, 22.10.2019</span>, um 19:00 Uhr</b>.</div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><span style="font-size:110%;"><b>Einladung</b> zum (</span><span style="color:#008040; font-size:120%"><b>103.</b></span><span style="font-size:110%;">) <b>Münchner OWASP-Stammtisch am <span style="background:yellow;">Di, 22.10.2019</span>, um 19:00 Uhr</b>. <ins class="diffchange diffchange-inline"><span style="background:yellow; font-size:100%"><b>Jetzt doch mit Vortrag, Danke an Jens!</b></span></ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <b>Agenda:</b></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <b>Agenda:</b></div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del class="diffchange diffchange-inline">:* <span style="background:yellow; font-size:120%"><b>Wir suchen noch einen Vortrag oder Talk für den Stammtisch!</b> Bitte melde Dich bei {{Template:Contact | name = Torsten Gigler | email =torsten.gigler@owasp.org }}.</span></del></div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>:*<b>Vortrag<span style="background:yellow"></span>: Security <ins class="diffchange diffchange-inline">for Business Benefit - Buy Security Services or do it yourself (DIY)? </ins>(<ins class="diffchange diffchange-inline">Jens Bitter</ins>)</b><br>- <ins class="diffchange diffchange-inline">Strategische Geschäftsanforderungen an Sicherheit<br></ins>- <ins class="diffchange diffchange-inline">Modellierung von Lösungsszenarien mit Abwägung Do / Buy (z.B</ins>. <ins class="diffchange diffchange-inline">GRC</ins>, <ins class="diffchange diffchange-inline">SOC)</ins><br>- <ins class="diffchange diffchange-inline">Offene Diskussion bzgl</ins>. <ins class="diffchange diffchange-inline">eigener Erfahrungen der Teilnehmer</ins><br><<ins class="diffchange diffchange-inline">br</ins>><ins class="diffchange diffchange-inline">Bio (excerpt)</ins>: <ins class="diffchange diffchange-inline">Jens Bitter has 20+ year’s experience </ins>with focus on <ins class="diffchange diffchange-inline">Information Security & Risk Management as well </ins>as <ins class="diffchange diffchange-inline">Audit. In </ins>a <ins class="diffchange diffchange-inline">lot of projects he was responsible </ins>for <ins class="diffchange diffchange-inline">design, implementation </ins>and <ins class="diffchange diffchange-inline">evolution </ins>as well as <ins class="diffchange diffchange-inline">operations </ins>of <ins class="diffchange diffchange-inline">Information Security Offices, IS Risk Management, IT Compliance / Data Privacy (acc</ins>. <ins class="diffchange diffchange-inline">EU</ins>-<ins class="diffchange diffchange-inline">GDPR / Protection Act / BDSG) and Information Security Management Systems including Business Continuity Management.</ins></div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del class="diffchange diffchange-inline"><!--- </del>:*<b>Vortrag<span style="background:yellow"></span>: <del class="diffchange diffchange-inline">Stack Overflow Considered Helpful! Deep Learning </del>Security <del class="diffchange diffchange-inline">Nudges Towards Stronger Cryptography </del>(<del class="diffchange diffchange-inline">Felix Fischer, PhD student,  <u>[https://www.tum.de Technische Universität München]</u></del>)</b><br><del class="diffchange diffchange-inline">Stack Overflow is the most popular discussion platform for software developers. Recent research found a large amount of insecure encryption code in production systems that has been inspired by examples given on Stack Overflow. By copying and pasting functional code, developers introduced exploitable software vulnerabilities into security</del>-<del class="diffchange diffchange-inline">sensitive high</del>-<del class="diffchange diffchange-inline">profile applications installed by millions of users every day</del>. <del class="diffchange diffchange-inline">This happens although for over 99% of insecure code examples on Stack Overflow</del>, <del class="diffchange diffchange-inline">similar alternatives are available that provide strong cryptography.</del><br><del class="diffchange diffchange-inline">The presentation shows the results of our researches about this issue and how to mitigate it using the example of strong cryptography. We focus on supporting software developers in making better decisions by applying nudges, a concept borrowed from behavioral science. Our system design is based on several nudges that are controlled by a deep neural network. With a user study we demonstrate that nudge</del>-<del class="diffchange diffchange-inline">based security advice significantly helps tackling the most popular and error-prone cryptographic use cases in Android</del>.<br><del class="diffchange diffchange-inline">Felix Fischer is a Research Associate and PhD student at the Chair of </del><<del class="diffchange diffchange-inline">u</del>><del class="diffchange diffchange-inline">[https</del>:<del class="diffchange diffchange-inline">//www.cybertrust.in.tum.de Cyber Trust]</u> at the <u>[https://www.in.tum.de Department of Informatics]</u> at the Technical University of Munich. He studies the interaction of people </del>with <del class="diffchange diffchange-inline">information security and privacy technologies. This means analyzing their application, usability and acceptance in the wild. His most recent publications </del>focus on <del class="diffchange diffchange-inline">software engineers struggling with getting cryptography right and explore machine learning </del>as a <del class="diffchange diffchange-inline">tool </del>for <del class="diffchange diffchange-inline">usable security </del>and <del class="diffchange diffchange-inline">privacy. This respects the attestation of private and fair models, </del>as well as <del class="diffchange diffchange-inline">lineage and accountability </del>of <del class="diffchange diffchange-inline">their decisions</del>. <del class="diffchange diffchange-inline"> </del>-<del class="diffchange diffchange-inline">--></del></div></td><td colspan="2"> </td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>:* <b>Freie Diskussion,</b> <span style="background:yellow;">bringt bitte Themen mit!</span></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>:* <b>Freie Diskussion,</b> <span style="background:yellow;">bringt bitte Themen mit!</span></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <span style="background:yellow; font-size:110%"><b>Wir suchen noch Vorträge für die weiteren Stammtische!</b></span></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <span style="background:yellow; font-size:110%"><b>Wir suchen noch Vorträge für die weiteren Stammtische!</b></span></div></td></tr>
</table>
T.Gigler
https://wiki.owasp.org/index.php?title=OWASP_German_Chapter_Stammtisch_Initiative/M%C3%BCnchen&diff=255569&oldid=prev
T.Gigler at 19:50, 18 October 2019
2019-10-18T19:50:52Z
<p></p>
<table class="diff diff-contentalign-left" data-mw="interface">
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr style='vertical-align: top;' lang='en'>
<td colspan='2' style="background-color: white; color:black; text-align: center;">← Older revision</td>
<td colspan='2' style="background-color: white; color:black; text-align: center;">Revision as of 19:50, 18 October 2019</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l9" >Line 9:</td>
<td colspan="2" class="diff-lineno">Line 9:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><span style="font-size:110%;"><b>Einladung</b> zum (</span><span style="color:#008040; font-size:120%"><b>103.</b></span><span style="font-size:110%;">) <b>Münchner OWASP-Stammtisch am <span style="background:yellow;">Di, 22.10.2019</span>, um 19:00 Uhr</b>.</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><span style="font-size:110%;"><b>Einladung</b> zum (</span><span style="color:#008040; font-size:120%"><b>103.</b></span><span style="font-size:110%;">) <b>Münchner OWASP-Stammtisch am <span style="background:yellow;">Di, 22.10.2019</span>, um 19:00 Uhr</b>.</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <b>Agenda:</b></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <b>Agenda:</b></div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>:* <span style="background:yellow; font-size:120%"><b>Wir suchen noch einen Vortrag oder Talk für den Stammtisch!</b> Bitte melde Dich bei Torsten.</span></div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>:* <span style="background:yellow; font-size:120%"><b>Wir suchen noch einen Vortrag oder Talk für den Stammtisch!</b> Bitte melde Dich bei <ins class="diffchange diffchange-inline">{{Template:Contact | name = </ins>Torsten <ins class="diffchange diffchange-inline">Gigler | email =torsten.gigler@owasp.org }}</ins>.</span></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><!--- :*<b>Vortrag<span style="background:yellow"></span>: Stack Overflow Considered Helpful! Deep Learning Security Nudges Towards Stronger Cryptography (Felix Fischer, PhD student,  <u>[https://www.tum.de Technische Universität München]</u>)</b><br>Stack Overflow is the most popular discussion platform for software developers. Recent research found a large amount of insecure encryption code in production systems that has been inspired by examples given on Stack Overflow. By copying and pasting functional code, developers introduced exploitable software vulnerabilities into security-sensitive high-profile applications installed by millions of users every day. This happens although for over 99% of insecure code examples on Stack Overflow, similar alternatives are available that provide strong cryptography.<br>The presentation shows the results of our researches about this issue and how to mitigate it using the example of strong cryptography. We focus on supporting software developers in making better decisions by applying nudges, a concept borrowed from behavioral science. Our system design is based on several nudges that are controlled by a deep neural network. With a user study we demonstrate that nudge-based security advice significantly helps tackling the most popular and error-prone cryptographic use cases in Android.<br>Felix Fischer is a Research Associate and PhD student at the Chair of <u>[https://www.cybertrust.in.tum.de Cyber Trust]</u> at the <u>[https://www.in.tum.de Department of Informatics]</u> at the Technical University of Munich. He studies the interaction of people with information security and privacy technologies. This means analyzing their application, usability and acceptance in the wild. His most recent publications focus on software engineers struggling with getting cryptography right and explore machine learning as a tool for usable security and privacy. This respects the attestation of private and fair models, as well as lineage and accountability of their decisions.  ---></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><!--- :*<b>Vortrag<span style="background:yellow"></span>: Stack Overflow Considered Helpful! Deep Learning Security Nudges Towards Stronger Cryptography (Felix Fischer, PhD student,  <u>[https://www.tum.de Technische Universität München]</u>)</b><br>Stack Overflow is the most popular discussion platform for software developers. Recent research found a large amount of insecure encryption code in production systems that has been inspired by examples given on Stack Overflow. By copying and pasting functional code, developers introduced exploitable software vulnerabilities into security-sensitive high-profile applications installed by millions of users every day. This happens although for over 99% of insecure code examples on Stack Overflow, similar alternatives are available that provide strong cryptography.<br>The presentation shows the results of our researches about this issue and how to mitigate it using the example of strong cryptography. We focus on supporting software developers in making better decisions by applying nudges, a concept borrowed from behavioral science. Our system design is based on several nudges that are controlled by a deep neural network. With a user study we demonstrate that nudge-based security advice significantly helps tackling the most popular and error-prone cryptographic use cases in Android.<br>Felix Fischer is a Research Associate and PhD student at the Chair of <u>[https://www.cybertrust.in.tum.de Cyber Trust]</u> at the <u>[https://www.in.tum.de Department of Informatics]</u> at the Technical University of Munich. He studies the interaction of people with information security and privacy technologies. This means analyzing their application, usability and acceptance in the wild. His most recent publications focus on software engineers struggling with getting cryptography right and explore machine learning as a tool for usable security and privacy. This respects the attestation of private and fair models, as well as lineage and accountability of their decisions.  ---></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>:* <b>Freie Diskussion,</b> <span style="background:yellow;">bringt bitte Themen mit!</span></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>:* <b>Freie Diskussion,</b> <span style="background:yellow;">bringt bitte Themen mit!</span></div></td></tr>
</table>
T.Gigler
https://wiki.owasp.org/index.php?title=OWASP_German_Chapter_Stammtisch_Initiative/M%C3%BCnchen&diff=255568&oldid=prev
T.Gigler: Einladung zum 103. OWASP-Stammtisch am 22.10.2019 (inkl. Vortragssuche)
2019-10-18T19:41:08Z
<p>Einladung zum 103. OWASP-Stammtisch am 22.10.2019 (inkl. Vortragssuche)</p>
<table class="diff diff-contentalign-left" data-mw="interface">
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr style='vertical-align: top;' lang='en'>
<td colspan='2' style="background-color: white; color:black; text-align: center;">← Older revision</td>
<td colspan='2' style="background-color: white; color:black; text-align: center;">Revision as of 19:41, 18 October 2019</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l4" >Line 4:</td>
<td colspan="2" class="diff-lineno">Line 4:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>== '''A K T U E L L E S :''' ==</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>== '''A K T U E L L E S :''' ==</div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><!--- <del class="diffchange diffchange-inline"> </del><span style="background:yellow; font-size:120%"><b>Wir suchen <del class="diffchange diffchange-inline">Vorträge </del>für <del class="diffchange diffchange-inline">die weiteren Stammtische in </del>2019!</b></span> ---><!--- <span style="font-size:120%"><b>Wir suchen Vorträge für die nächsten Stammtische!</b></span>  </div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><!--- <span style="background:yellow; font-size:120%"><b>Wir suchen <ins class="diffchange diffchange-inline">noch einen Vortrag </ins>für <ins class="diffchange diffchange-inline">den Stammtisch am 22.10.</ins>2019!</b></span> ---><!--- <span style="font-size:120%"><b>Wir suchen Vorträge für die nächsten Stammtische!</b></span>  </div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><br></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><br></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><br> ---></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><br> ---></div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><span style="font-size:110%;"><b>Einladung</b> zum (</span><span style="color:#008040; font-size:120%"><b><del class="diffchange diffchange-inline">102</del>.</b></span><span style="font-size:110%;">) <b>Münchner OWASP-Stammtisch am <span style="background:yellow;">Di, <del class="diffchange diffchange-inline">24</del>.<del class="diffchange diffchange-inline">09</del>.2019</span>, um 19:00 Uhr</b>.</div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><span style="font-size:110%;"><b>Einladung</b> zum (</span><span style="color:#008040; font-size:120%"><b><ins class="diffchange diffchange-inline">103</ins>.</b></span><span style="font-size:110%;">) <b>Münchner OWASP-Stammtisch am <span style="background:yellow;">Di, <ins class="diffchange diffchange-inline">22</ins>.<ins class="diffchange diffchange-inline">10</ins>.2019</span>, um 19:00 Uhr</b>.</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <b>Agenda:</b></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <b>Agenda:</b></div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>:*<b>Vortrag<span style="background:yellow"></span>: Stack Overflow Considered Helpful! Deep Learning Security Nudges Towards Stronger Cryptography (Felix Fischer, PhD student,  <u>[https://www.tum.de Technische Universität München]</u>)</b><br>Stack Overflow is the most popular discussion platform for software developers. Recent research found a large amount of insecure encryption code in production systems that has been inspired by examples given on Stack Overflow. By copying and pasting functional code, developers introduced exploitable software vulnerabilities into security-sensitive high-profile applications installed by millions of users every day. This happens although for over 99% of insecure code examples on Stack Overflow, similar alternatives are available that provide strong cryptography.<br>The presentation shows the results of our researches about this issue and how to mitigate it using the example of strong cryptography. We focus on supporting software developers in making better decisions by applying nudges, a concept borrowed from behavioral science. Our system design is based on several nudges that are controlled by a deep neural network. With a user study we demonstrate that nudge-based security advice significantly helps tackling the most popular and error-prone cryptographic use cases in Android.<br>Felix Fischer is a Research Associate and PhD student at the Chair of <u>[https://www.cybertrust.in.tum.de Cyber Trust]</u> at the <u>[https://www.in.tum.de Department of Informatics]</u> at the Technical University of Munich. He studies the interaction of people with information security and privacy technologies. This means analyzing their application, usability and acceptance in the wild. His most recent publications focus on software engineers struggling with getting cryptography right and explore machine learning as a tool for usable security and privacy. This respects the attestation of private and fair models, as well as lineage and accountability of their decisions.</div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins class="diffchange diffchange-inline">:* <span style="background:yellow; font-size:120%"><b>Wir suchen noch einen Vortrag oder Talk für den Stammtisch!</b> Bitte melde Dich bei Torsten.</span></ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins class="diffchange diffchange-inline"><!--- </ins>:*<b>Vortrag<span style="background:yellow"></span>: Stack Overflow Considered Helpful! Deep Learning Security Nudges Towards Stronger Cryptography (Felix Fischer, PhD student,  <u>[https://www.tum.de Technische Universität München]</u>)</b><br>Stack Overflow is the most popular discussion platform for software developers. Recent research found a large amount of insecure encryption code in production systems that has been inspired by examples given on Stack Overflow. By copying and pasting functional code, developers introduced exploitable software vulnerabilities into security-sensitive high-profile applications installed by millions of users every day. This happens although for over 99% of insecure code examples on Stack Overflow, similar alternatives are available that provide strong cryptography.<br>The presentation shows the results of our researches about this issue and how to mitigate it using the example of strong cryptography. We focus on supporting software developers in making better decisions by applying nudges, a concept borrowed from behavioral science. Our system design is based on several nudges that are controlled by a deep neural network. With a user study we demonstrate that nudge-based security advice significantly helps tackling the most popular and error-prone cryptographic use cases in Android.<br>Felix Fischer is a Research Associate and PhD student at the Chair of <u>[https://www.cybertrust.in.tum.de Cyber Trust]</u> at the <u>[https://www.in.tum.de Department of Informatics]</u> at the Technical University of Munich. He studies the interaction of people with information security and privacy technologies. This means analyzing their application, usability and acceptance in the wild. His most recent publications focus on software engineers struggling with getting cryptography right and explore machine learning as a tool for usable security and privacy. This respects the attestation of private and fair models, as well as lineage and accountability of their decisions. <ins class="diffchange diffchange-inline"> ---></ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>:* <b>Freie Diskussion,</b> <span style="background:yellow;">bringt bitte Themen mit!</span></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>:* <b>Freie Diskussion,</b> <span style="background:yellow;">bringt bitte Themen mit!</span></div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>* <span style="background:yellow; font-size:110%"><b>Wir suchen noch Vorträge für die Stammtische <del class="diffchange diffchange-inline">ab Oktober</del>!</b></span></div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>* <span style="background:yellow; font-size:110%"><b>Wir suchen noch Vorträge für die <ins class="diffchange diffchange-inline">weiteren </ins>Stammtische!</b></span></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <b><span <!---- style="background:yellow;-----> font-size:110%;">Ort: [http://www.hackerhaus.de/ Hackerhaus]</span>, Sendlinger Straße 14, 80331 München</b></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* <b><span <!---- style="background:yellow;-----> font-size:110%;">Ort: [http://www.hackerhaus.de/ Hackerhaus]</span>, Sendlinger Straße 14, 80331 München</b></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>:* Mit <b><u>[http://efa.mvv-muenchen.de öffentlichen Verkehrsmitteln]</u></b>:</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>:* Mit <b><u>[http://efa.mvv-muenchen.de öffentlichen Verkehrsmitteln]</u></b>:</div></td></tr>
<tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l50" >Line 50:</td>
<td colspan="2" class="diff-lineno">Line 51:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>== Bereits gehaltene Stammtisch-Vorträge ==</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>== Bereits gehaltene Stammtisch-Vorträge ==</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><!--- Direkt-Link: https://www.owasp.org/index.php?title=OWASP_German_Chapter_Stammtisch_Initiative/M%C3%BCnchen#Bereits_gehaltene_Stammtisch-Vortr.C3.A4ge ---></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><!--- Direkt-Link: https://www.owasp.org/index.php?title=OWASP_German_Chapter_Stammtisch_Initiative/M%C3%BCnchen#Bereits_gehaltene_Stammtisch-Vortr.C3.A4ge ---></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">* September 2019: Stack Overflow Considered Helpful! Deep Learning Security Nudges Towards Stronger Cryptography (Felix Fischer, PhD Student am Lehrstuhl für Cyber Trust, TU München)</ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Juli 2019: Bug Bounty Platforms: Empirical Analysis and Economic Challenges (<u>[https://www.cybertrust.in.tum.de/index.php?id=101 Prof. Ph.D. Jens Grossklags, Lehrstuhl für Cyber Trust, TU München]</u>), <u>[https://www.cybertrust.in.tum.de/index.php?id=102&L=0 vgl Publikationen]</u>: <u>[https://www.jstor.org/stable/pdf/10.5325/jinfopoli.7.2017.0372.pdf Devising Effective Policies for Bug-Bounty Platforms and Security Vulnerability Discovery]</u>, <u>[https://academic.oup.com/cybersecurity/article/3/2/81/4524054 Given enough eyeballs, all bugs are shallow? Revisiting Eric Raymond with bug bounty programs]</u>  </div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Juli 2019: Bug Bounty Platforms: Empirical Analysis and Economic Challenges (<u>[https://www.cybertrust.in.tum.de/index.php?id=101 Prof. Ph.D. Jens Grossklags, Lehrstuhl für Cyber Trust, TU München]</u>), <u>[https://www.cybertrust.in.tum.de/index.php?id=102&L=0 vgl Publikationen]</u>: <u>[https://www.jstor.org/stable/pdf/10.5325/jinfopoli.7.2017.0372.pdf Devising Effective Policies for Bug-Bounty Platforms and Security Vulnerability Discovery]</u>, <u>[https://academic.oup.com/cybersecurity/article/3/2/81/4524054 Given enough eyeballs, all bugs are shallow? Revisiting Eric Raymond with bug bounty programs]</u>  </div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Juni 2019 (100. Stammtisch): Vortrag 1: Security in a DevOps world (Martin Knobloch), Vortrag 2: Develop secure software with OWASP tools & guides (Martin Knobloch)</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Juni 2019 (100. Stammtisch): Vortrag 1: Security in a DevOps world (Martin Knobloch), Vortrag 2: Develop secure software with OWASP tools & guides (Martin Knobloch)</div></td></tr>
</table>
T.Gigler
https://wiki.owasp.org/index.php?title=OWASP_German_Chapter_Stammtisch_Initiative/M%C3%BCnchen&diff=254785&oldid=prev
T.Gigler: Bug Bounty Platforms: Empirical Analysis and Economic Challenges: Links ergänzt
2019-09-17T15:47:13Z
<p>Bug Bounty Platforms: Empirical Analysis and Economic Challenges: Links ergänzt</p>
<table class="diff diff-contentalign-left" data-mw="interface">
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr style='vertical-align: top;' lang='en'>
<td colspan='2' style="background-color: white; color:black; text-align: center;">← Older revision</td>
<td colspan='2' style="background-color: white; color:black; text-align: center;">Revision as of 15:47, 17 September 2019</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l50" >Line 50:</td>
<td colspan="2" class="diff-lineno">Line 50:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>== Bereits gehaltene Stammtisch-Vorträge ==</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>== Bereits gehaltene Stammtisch-Vorträge ==</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><!--- Direkt-Link: https://www.owasp.org/index.php?title=OWASP_German_Chapter_Stammtisch_Initiative/M%C3%BCnchen#Bereits_gehaltene_Stammtisch-Vortr.C3.A4ge ---></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><!--- Direkt-Link: https://www.owasp.org/index.php?title=OWASP_German_Chapter_Stammtisch_Initiative/M%C3%BCnchen#Bereits_gehaltene_Stammtisch-Vortr.C3.A4ge ---></div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>* Juli 2019: Bug Bounty Platforms: Empirical Analysis and Economic Challenges ([https://www.cybertrust.in.tum.de/index.php?id=101 Prof. Ph.D. Jens Grossklags, Lehrstuhl für Cyber Trust, TU München]), [https://www.cybertrust.in.tum.de/index.php?id=102&L=0 Publikationen]<del class="diffchange diffchange-inline">, z.B. </del>[https://www.jstor.org/<del class="diffchange diffchange-inline">tc</del>/<del class="diffchange diffchange-inline">accept?origin=%2Fstable%2Fpdf%2F10</del>.5325<del class="diffchange diffchange-inline">%2Fjinfopoli</del>.7.2017.0372.pdf Devising Effective Policies for Bug-Bounty Platforms and Security Vulnerability Discovery]  </div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>* Juli 2019: Bug Bounty Platforms: Empirical Analysis and Economic Challenges (<ins class="diffchange diffchange-inline"><u></ins>[https://www.cybertrust.in.tum.de/index.php?id=101 Prof. Ph.D. Jens Grossklags, Lehrstuhl für Cyber Trust, TU München]<ins class="diffchange diffchange-inline"></u></ins>), <ins class="diffchange diffchange-inline"><u></ins>[https://www.cybertrust.in.tum.de/index.php?id=102&L=0 <ins class="diffchange diffchange-inline">vgl </ins>Publikationen]<ins class="diffchange diffchange-inline"></u>: <u></ins>[https://www.jstor.org/<ins class="diffchange diffchange-inline">stable/pdf</ins>/<ins class="diffchange diffchange-inline">10</ins>.5325<ins class="diffchange diffchange-inline">/jinfopoli</ins>.7.2017.0372.pdf Devising Effective Policies for Bug-Bounty Platforms and Security Vulnerability Discovery]<ins class="diffchange diffchange-inline"></u>, <u>[https://academic.oup.com/cybersecurity/article/3/2/81/4524054 Given enough eyeballs, all bugs are shallow? Revisiting Eric Raymond with bug bounty programs]</u> </ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Juni 2019 (100. Stammtisch): Vortrag 1: Security in a DevOps world (Martin Knobloch), Vortrag 2: Develop secure software with OWASP tools & guides (Martin Knobloch)</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Juni 2019 (100. Stammtisch): Vortrag 1: Security in a DevOps world (Martin Knobloch), Vortrag 2: Develop secure software with OWASP tools & guides (Martin Knobloch)</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Gastvortrag auf den 'Tech Days München 2019' des Sicherheitsnetzwerks München: <u>[[Media:OWASP_Leitlinien+Werkzeuge_-_Torsten_Gigler.pdf|Leitlinien und Werkzeuge von der OWASP-Community]]</u> (Torsten Gigler)</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* Gastvortrag auf den 'Tech Days München 2019' des Sicherheitsnetzwerks München: <u>[[Media:OWASP_Leitlinien+Werkzeuge_-_Torsten_Gigler.pdf|Leitlinien und Werkzeuge von der OWASP-Community]]</u> (Torsten Gigler)</div></td></tr>
</table>
T.Gigler