OWASP Limerick - Revision history

Marian Ventuneac at 21:59, 8 February 2012

2012-02-08T21:59:27Z

Marian Ventuneac at 21:58, 8 February 2012

2012-02-08T21:58:09Z

Marian Ventuneac at 21:55, 8 February 2012

2012-02-08T21:55:37Z

Marian Ventuneac at 21:52, 8 February 2012

2012-02-08T21:52:03Z

Marian Ventuneac: Created page with "{{Chapter Template|chaptername=Ireland-Limerick|extra= |mailinglistsite=https://lists.owasp.org/mailman/listinfo/owasp-ireland-limerick}} become a [http://www.owasp.org/index...."

2012-02-08T21:41:42Z

Created page with "{{Chapter Template|chaptername=Ireland-Limerick|extra= |mailinglistsite=https://lists.owasp.org/mailman/listinfo/owasp-ireland-limerick}} become a [http://www.owasp.org/index...."

New page

{{Chapter Template|chaptername=Ireland-Limerick|extra= |mailinglistsite=https://lists.owasp.org/mailman/listinfo/owasp-ireland-limerick}} become a [http://www.owasp.org/index.php/Membership#Categories_of_Membership_.26_Supporters Member or Annual Chapter Sponsor(s)]. 

== OWASP Ireland-Limerick Board ==

Should you have a question about the local chapter, would like to get more involved contact ANY of the following people below 

*'''President''' [mailto:marian.ventuneac@owasp.org Marian Ventuneac] 
*'''Vice President''' TBD 
*'''Secretary''' TBD 

 '''OWASP Ireland-Limerick''' Address - TBD <paypal>Ireland-Limerick</paypal> 

== OWASP Ireland Limerick 2011 Meetings ==

 

== Next Meeting ==
 
'''When:''' 12/10/2011 7:00pm - 9:00pm
 
'''Where:''' Limerick City Council, City Hall, Merchants Quay
 
This free event is open to all participants with an interest in application security. Registration is currently closed.
 
'''For ISACA and (ISC)² members: This event qualifies for free CPE credits/hours.'''
 

'''AGENDA'''
 
'''Title:''' OWASP Limerick - introduction, objectives, meeting agenda 
'''Download:''' [https://www.owasp.org/images/e/e7/OWASPIreland-Limerick_20111012_-_Meeting_Agenda.ppt Meeting Agenda]
 
19:00 - 19:45 
'''Title:''' Introduction to OWASP Top 10 Security Risks - presented by Marian Ventuneac
 
'''Abstract:''' This presentation will review the OWASP Top 10 Security Risks (2010 edition) and how it can be effectively used to assess and strengthen application security.
 
'''Presenter:''' [http://www.owasp.org/index.php/User:Marian_Ventuneac Marian Ventuneac]
 
'''Download:''' [http://owasptop10.googlecode.com/files/OWASP_Top_10_-_2010%20Presentation.pptx OWASP Top 10 presentation]
 
19:50 - 20:00 
'''Title:''' European Data Protection Act - presented by Ger O’Mahony
 
'''Abstract:''' This presentation will focus on IT Governance and Data Protection Act requirements. An overview of DPA will be provided to help in assessing your organisations level of compliance.
 
'''Presenter:''' Ger O'Mahony is the IT Process and Control Manager for Genworth Financial and he has been working in IT Governance for the past 7 years. In his distant past, Ger worked in the areas of software development and financial control.
 
'''Download:''' [https://www.owasp.org/images/f/f8/OWASPIreland-Limerick_20111012_-_EU_Data_Protection_Act_-_An_IT_Governance_View.pptx EU Data Protection Act]
 
20:05 - 20:45 
'''Title:''' Practical Penetration Testing with Burp Suite - presented by Máirtín O'Sullivan
 
'''Abstract:''' Máirtín will introduce the Burp Suite, demo the key functionality that the tool provides (both in the free and pro editions) and explain how both inexperienced and experienced application penetration testers can get the most out of the tool. This session will be a practical demonstration of the tool against sample vulnerable web applications.
 
'''Presenter:''' Máirtín O'Sullivan is a Consultancy Team Lead within Espion Group and has over eight years of information security experience. Máirtín has performed over a hundred application penetration tests and has recently been responsible for the implementation of a secure software development lifecycle within an organisation of over twelve hundred developers.
'''Download:''' [https://www.owasp.org/images/2/2b/OWASPIreland-Limerick_20111012_-_Practical_Penetration_Testing_with_Burp_Suite.pdf Practical Penetration Testing with Burp Suite]
 
'''OWASP Limerick Chapter Raffle:''' Two sponsored application security books are available for this event.
 
'''Networking/Socialising''' 

== Past Events ==

'''2011 Meetings'''

[[OWASP_Limerick_October_2011]]

[[OWASP_Limerick_March_2011]]

 

__NOTOC__ <headertabs />

[[Category:Ireland]]

@@ Line 21: / Line 21: @@
 '''Where:''' Limerick City Council, City Hall, Merchants Quay
 <br><br>
-This free event is open to all participants with an interest in application security.
+This free event is open to all participants with an interest in application security. <br>
 Registration is required:  http://www.regonline.com/Register/Checkin.aspx?EventID=1065199
 <br><br>
@@ Line 29: / Line 29: @@
 '''AGENDA'''
 <br><br>
-'''Title:''' OWASP Limerick - introduction, objectives, meeting agenda<br>
+'''Title:''' '''OWASP Limerick - introduction, objectives, meeting agenda'''
 <br><br><br>
 :00 - 19:50<br>

@@ Line 21: / Line 21: @@
 '''Where:''' Limerick City Council, City Hall, Merchants Quay
 <br><br>
-This free event is open to all participants with an interest in application security. Registration is [http://www.regonline.com/Register/Checkin.aspx?EventID=1065199 required]  http://www.regonline.com/Register/Checkin.aspx?EventID=1065199
+This free event is open to all participants with an interest in application security.
 <br><br>
 '''For ISACA and (ISC)² members: This event qualifies for free CPE credits/hours.'''
@@ Line 36: / Line 37: @@
 <br>
 In this talk we will look at HTML5 from an attackers view-point. Because not only does HTML5 bring us Semantic web, editable content, inbuilt form validation, local storage, awesome video support and the long overdue death of <div> - it also opens up a host of new opportunities for attackers.
 We'll look at some of the troublesome new attacks that this new HTML5 standard introduces, how attackers can leverage these attacks to cause untold havoc on your machine, and how - with a little bit of help from some not so over-complicated Javascript - we can build Botnets in your Browser!
 <br>
@@ Line 49: / Line 49: @@
 <br><br><br>
 :05 - 20:45<br>
-'''Title:''' Practical Defense with mod_security WAF - presented by Marian Ventuneac
+'''Title:''' '''Practical Defense with mod_security WAF''' - presented by Marian Ventuneac
 <br>
 '''Abstract:''' This presentation will introduce the audience to mod_security Web Application Firewall. Several practical cases on timely mitigation of various security risks using mod_security will be presented.

@@ Line 29: / Line 29: @@
 <br><br>
 '''Title:''' OWASP Limerick - introduction, objectives, meeting agenda<br>
 <br><br><br>
 :00 - 19:50<br>
@@ Line 35: / Line 34: @@
 <br>
 '''Abstract:''' HTML5 opens up a wide and wonderful new world for Web Designers to explore - bringing fantastic new features that were previously only possible via Flash or horribly over-complicated Javascript. And HTML5 is not a future technology - chances are your favourite browser already has excellent support built in (unless you are still using IE).
 <br>
 In this talk we will look at HTML5 from an attackers view-point. Because not only does HTML5 bring us Semantic web, editable content, inbuilt form validation, local storage, awesome video support and the long overdue death of <div> - it also opens up a host of new opportunities for attackers.
 <br>
 We'll look at some of the troublesome new attacks that this new HTML5 standard introduces, how attackers can leverage these attacks to cause untold havoc on your machine, and how - with a little bit of help from some not so over-complicated Javascript - we can build Botnets in your Browser!
 <br>
 '''Presenter:''' Robert is currently working as the manager of Trend Micro's Advanced Threat Research team in Europe, where he is involved in analyzing the latest malware threats, specializing in researching the future threat landscape and criminal underground. Robert is a regular presenter for the press and at security conferences. He has also written and lectures an MSc module in Malware Analysis at Cork IT and UCD, and is a trainer for several SANS qualifications. A graduate of Trinity and DCU he holds several qualifications from SANS and serves on the SANS advisory board.
 <br><br><br>
 :55 - 20:10<br>
@@ Line 52: / Line 47: @@
 <br>
 '''Presenter:''' TBA
 <br><br><br>
 :05 - 20:45<br>
 '''Title:''' Practical Defense with mod_security WAF - presented by Marian Ventuneac
 <br>
-'''Abstract:''' This presentation will introduce the audience to mod_security Web Application Firewall. Several case study on timely mitigation of various attacks using mod_security will be presented.
+'''Abstract:''' This presentation will introduce the audience to mod_security Web Application Firewall. Several practical cases on timely mitigation of various security risks using mod_security will be presented.
 <br>
 '''Presenter:''' [http://www.owasp.org/index.php/User:Marian_Ventuneac Marian Ventuneac]
 <br><br><br>
 '''OWASP Limerick Chapter Raffle:''' Two sponsored software development/information security books will be available for this event.

@@ Line 11: / Line 11: @@
 <br>'''OWASP Ireland-Limerick'''<br>Address - TBD<br><paypal>Ireland-Limerick</paypal> <br>
-== OWASP Ireland Limerick 2011 Meetings ==
+== OWASP Ireland Limerick 2012 Meetings ==
 <br>
@@ Line 17: / Line 17: @@
 == Next Meeting ==
 <br>
-'''When:''' 12/10/2011 7:00pm - 9:00pm
+'''When:''' 21/02/2012 7:00pm - 9:00pm
 <br><br>
 '''Where:''' Limerick City Council, City Hall, Merchants Quay
 <br><br>
-This free event is open to all participants with an interest in application security. Registration is currently closed.
+This free event is open to all participants with an interest in application security. Registration is [http://www.regonline.com/Register/Checkin.aspx?EventID=1065199 required]  http://www.regonline.com/Register/Checkin.aspx?EventID=1065199
 <br><br>
 '''For ISACA and (ISC)² members: This event qualifies for free CPE credits/hours.'''
@@ Line 29: / Line 29: @@
 <br><br>
 '''Title:''' OWASP Limerick - introduction, objectives, meeting agenda<br>
-'''Download:''' [https://www.owasp.org/images/e/e7/OWASPIreland-Limerick_20111012_-_Meeting_Agenda.ppt Meeting Agenda]
+'''Download:''' []
 <br><br><br>
-:00 - 19:45<br>
+:00 - 19:50<br>
-'''Title:''' Introduction to OWASP Top 10 Security Risks - presented by Marian Ventuneac
+'''Title:''' '''HTML5 - A Whole New Attack Vector''' - presented by Robert McArdle
 <br>
-'''Abstract:''' This presentation will review the OWASP Top 10 Security Risks (2010 edition) and how it can be effectively used to assess and strengthen application security.
+'''Abstract:''' HTML5 opens up a wide and wonderful new world for Web Designers to explore - bringing fantastic new features that were previously only possible via Flash or horribly over-complicated Javascript. And HTML5 is not a future technology - chances are your favourite browser already has excellent support built in (unless you are still using IE).
 <br>
-'''Presenter:''' [http://www.owasp.org/index.php/User:Marian_Ventuneac Marian Ventuneac]
+'''Presenter:''' Robert is currently working as the manager of Trend Micro's Advanced Threat Research team in Europe, where he is involved in analyzing the latest malware threats, specializing in researching the future threat landscape and criminal underground. Robert is a regular presenter for the press and at security conferences. He has also written and lectures an MSc module in Malware Analysis at Cork IT and UCD, and is a trainer for several SANS qualifications. A graduate of Trinity and DCU he holds several qualifications from SANS and serves on the SANS advisory board.
 <br>
-'''Download:''' [http://owasptop10.googlecode.com/files/OWASP_Top_10_-_2010%20Presentation.pptx OWASP Top 10 presentation]
+'''Download:''' []
 <br><br><br>
-:50 - 20:00<br>
+:55 - 20:10<br>
-'''Title:''' European Data Protection Act - presented by Ger O’Mahony
+'''Title:''' TBA
 <br>
-'''Abstract:''' This presentation will focus on IT Governance and Data Protection Act requirements. An overview of DPA will be provided to help in assessing your organisations level of compliance.
+'''Abstract:''' TBA
 <br>
-'''Presenter:''' Ger O'Mahony is the IT Process and Control Manager for Genworth Financial and he has been working in IT Governance for the past 7 years. In his distant past, Ger worked in the areas of software development and financial control.
+'''Presenter:''' TBA
 <br>
-'''Download:''' [https://www.owasp.org/images/f/f8/OWASPIreland-Limerick_20111012_-_EU_Data_Protection_Act_-_An_IT_Governance_View.pptx EU Data Protection Act]
+'''Download:''' []
 <br><br><br>
 :05 - 20:45<br>
-'''Title:''' Practical Penetration Testing with Burp Suite - presented by Máirtín O'Sullivan
+'''Title:''' Practical Defense with mod_security WAF - presented by Marian Ventuneac
 <br>
-'''Abstract:''' Máirtín will introduce the Burp Suite, demo the key functionality that the tool provides (both in the free and pro editions) and explain how both inexperienced and experienced application penetration testers can get the most out of the tool. This session will be a practical demonstration of the tool against sample vulnerable web applications.
+'''Abstract:''' This presentation will introduce the audience to mod_security Web Application Firewall. Several case study on timely mitigation of various attacks using mod_security will be presented.
 <br>
-'''Presenter:''' Máirtín O'Sullivan is a Consultancy Team Lead within Espion Group and has over eight years of information security experience. Máirtín has performed over a hundred application penetration tests and has recently been responsible for the implementation of a secure software development lifecycle within an organisation of over twelve hundred developers.
+'''Presenter:''' [http://www.owasp.org/index.php/User:Marian_Ventuneac Marian Ventuneac]
-'''Download:''' [https://www.owasp.org/images/2/2b/OWASPIreland-Limerick_20111012_-_Practical_Penetration_Testing_with_Burp_Suite.pdf Practical Penetration Testing with Burp Suite]
+<br>
 <br><br><br>
-'''OWASP Limerick Chapter Raffle:''' Two sponsored application security books are available for this event.
+'''OWASP Limerick Chapter Raffle:''' Two sponsored software development/information security books will be available for this event.
 <br><br><br>
 '''Networking/Socialising''' <br><br>