OWASP Minneapolis St Paul 2008 Conference - Revision history

Webappsecguy: Grammar

2009-08-05T01:38:34Z

Grammar

Webappsecguy: Adding slides for Jeff's presentation.

2008-12-14T19:39:47Z

Adding slides for Jeff's presentation.

Webappsecguy: Adding Corey's video, pulling embedded videos (except for Kuai's) because some are not pulling - Google Video's hosted pages stream video just fine.

2008-11-16T17:03:16Z

Adding Corey's video, pulling embedded videos (except for Kuai's) because some are not pulling - Google Video's hosted pages stream video just fine.

Webappsecguy: Adding video links for Jeff and Arshan's presentations.

2008-11-16T00:04:18Z

Adding video links for Jeff and Arshan's presentations.

Afongen: embedded video in page

2008-10-30T02:44:05Z

embedded video in page

Afongen: removed parking info

2008-10-24T01:30:16Z

removed parking info

Afongen: Removed "Tentative" from "Tentative Agenda"

2008-10-24T01:28:32Z

Removed "Tentative" from "Tentative Agenda"

Afongen: Made the intro more past-tense, mentioned videos (thanks, Adam!)

2008-10-24T01:27:50Z

Made the intro more past-tense, mentioned videos (thanks, Adam!)

Webappsecguy: Updating Symantec text link to point to symantec.com.

2008-10-24T00:58:19Z

Updating Symantec text link to point to symantec.com.

Webappsecguy: Linking to Kuai's recorded opening.

2008-10-24T00:56:57Z

Linking to Kuai's recorded opening.

@@ Line 1: / Line 1: @@
 == OWASP & FLOSS Application Security Mini-Conference 2008 - October 21, 2008  ==
-The [[Minneapolis St Paul|Minneapolis - Saint Paul Chapter]] were very pleased to bring together a line-up of internationally known speakers for a day of application security talks at the University of Minnesota's [http://www1.umn.edu/twincities/maps/StCen/StCen-map.html St. Paul Student Center].
+The [[Minneapolis St Paul|Minneapolis - Saint Paul Chapter]] was very pleased to bring together a line-up of internationally known speakers for a day of application security talks at the University of Minnesota's [http://www1.umn.edu/twincities/maps/StCen/StCen-map.html St. Paul Student Center].
 Video of the presentations is slowly making its way to this page. Check the agenda below for links.

@@ Line 33: / Line 33: @@
 <td style="background-color:#AEB7D5; padding: 5px;">9:30-10:30</td>
 <td style="background-color:#D5B4AE; padding: 5px;">
-'''Jeff Williams''' [http://video.google.com/videoplay?docid=-4981336955006017781&hl=en Video]<br />CEO, [http://www.aspectsecurity.com/ Aspect Security]<br />OWASP founder; Chair, OWASP Foundation<br>
+'''Jeff Williams''' [http://video.google.com/videoplay?docid=-4981336955006017781&hl=en Video] | [https://www.owasp.org/images/d/d7/OWASP_MN_ESAPI.pptx Slides]<br />CEO, [http://www.aspectsecurity.com/ Aspect Security]<br />OWASP founder; Chair, OWASP Foundation<br>
 Application security is getting more complicated every day with increasing connectivity, more mixing of code and data, more parsers, more interpreters, more assets, and more functionality available. We have to take steps now to simplify the problem. So if you're tired of securing one application at a time, and wrestling with the same vulnerabilities again and again, is establishing your organization's ESAPI is one of the best things you can do?

@@ Line 39: / Line 39: @@
 '''Bio''':
 I'm Jeff Williams, I work as CEO of Aspect Security and I serve as the volunteer Chair of the OWASP Foundation. I've worked on a number of projects at OWASP, including creating the OWASP Top 10, WebGoat, Stinger, Secure Software Contract Annex, Honeycomb Project and the Enterprise Security API. You can find more about my background here: http://myappsecurity.blogspot.com/2007/03/reflection-on-jeff-williams.html.
 </td>
 </tr>
@@ Line 55: / Line 53: @@
 Arshan earned his Master’s degree in Computer Science from Towson University with a focus on Information Security. He has delivered tutorials at Blackhat and OWASP conferences and has been a featured speaker at a number of security and artificial intelligence conferences. Arshan is also the author of the OWASP AntiSamy project and the founder of the OWASP Intrinsic Security Working Group.
 </td>
 </tr>
@@ Line 125: / Line 121: @@
 <td style="background-color: #AEB7D5; padding: 5px;">4:00-5:00</td>
 <td style="background-color: #D5B4AE; padding: 5px;">
-'''Corey Benninger'''<br />[http://intrepidusgroup.com/ Intrepidus Group]<br>
+'''Corey Benninger''' [http://video.google.com/videoplay?docid=-2330450614545589081&hl=en Video]<br />[http://intrepidusgroup.com/ Intrepidus Group]<br>
 Exploring the how poor application security mixed with a phishing is leading to a costly cocktail of disaster. This talk will go over real world examples of phishing attacks that have taken advantage of cross site scripting flaws, SQL injection vulnerabilities, session fixation attacks, and others web application flaws. Learn what phishers are doing to take their attacks to the next level by chaining multiple vulnerabilities together. The presentation will also share resources that help to track phishing trends and research.

@@ Line 33: / Line 33: @@
 <td style="background-color:#AEB7D5; padding: 5px;">9:30-10:30</td>
 <td style="background-color:#D5B4AE; padding: 5px;">
-'''Jeff Williams'''<br />CEO, [http://www.aspectsecurity.com/ Aspect Security]<br />OWASP founder; Chair, OWASP Foundation<br>
+'''Jeff Williams''' [http://video.google.com/videoplay?docid=-4981336955006017781&hl=en Video]<br />CEO, [http://www.aspectsecurity.com/ Aspect Security]<br />OWASP founder; Chair, OWASP Foundation<br>
 Application security is getting more complicated every day with increasing connectivity, more mixing of code and data, more parsers, more interpreters, more assets, and more functionality available. We have to take steps now to simplify the problem. So if you're tired of securing one application at a time, and wrestling with the same vulnerabilities again and again, is establishing your organization's ESAPI is one of the best things you can do?
@@ Line 39: / Line 39: @@
 '''Bio''':
 I'm Jeff Williams, I work as CEO of Aspect Security and I serve as the volunteer Chair of the OWASP Foundation. I've worked on a number of projects at OWASP, including creating the OWASP Top 10, WebGoat, Stinger, Secure Software Contract Annex, Honeycomb Project and the Enterprise Security API. You can find more about my background here: http://myappsecurity.blogspot.com/2007/03/reflection-on-jeff-williams.html.
 </td>
 </tr>
@@ Line 44: / Line 46: @@
 <tr>
 <td style="background-color:#AEB7D5; padding: 1px;">10:30-11:00</td>
-<td style="background-color:#D5B4AE; padding: 5px;">'''Arshan Dabirsiaghi'''<br />Director of Research, [http://www.aspectsecurity.com/ Aspect Security]
+<td style="background-color:#D5B4AE; padding: 5px;">'''Arshan Dabirsiaghi''' [http://video.google.com/videoplay?docid=8393196340486939495&hl=en Video]<br />Director of Research, [http://www.aspectsecurity.com/ Aspect Security]
 Many of the challenges we face in application security could be solved at an architectural layer without trying to accomplish the impossible task of fixing millions of websites with billions of lines of code behind them. The OWASP [[Intrinsic Security Working Group]] is a new OWASP effort focused on addressing root causes of application security problems and fixing them where it's easiest. Sometimes that means pushing a browser to include a feature, or asking a language framework to provide a new API, or helping standard-makers come up with useable security protections.
@@ Line 53: / Line 55: @@
 Arshan earned his Master’s degree in Computer Science from Towson University with a focus on Information Security. He has delivered tutorials at Blackhat and OWASP conferences and has been a featured speaker at a number of security and artificial intelligence conferences. Arshan is also the author of the OWASP AntiSamy project and the founder of the OWASP Intrinsic Security Working Group.
 </td>
 </tr>

@@ Line 25: / Line 25: @@
 <tr>
 <td  style="background-color:#AEB7D5; padding: 5px;">9:00-9:30</td>
-<td style="background-color:#D5B4AE; padding: 5px;">'''Kuai Hinojosa''' [http://video.google.com/videoplay?docid=1665928867290955158 Video]<br />OWASP MN President<br />Conference Introduction</td>
+<td style="background-color:#D5B4AE; padding: 5px;">'''Kuai Hinojosa''' [http://video.google.com/videoplay?docid=1665928867290955158 Video]<br />OWASP MN President<br />Conference Introduction<br />
 </tr>
 <tr>

← Older revision		Revision as of 01:30, 24 October 2008
Line 161:		Line 161:

	</table>		</table>
−
−	~~== Parking and Transportation ==~~
−	~~Public Parking: http://www1.umn.edu/pts/publicparking.htm<br />~~
−	~~Map of St. Paul Campus Parking (PDF): http://www1.umn.edu/pts/maps/spcont.pdf<br />~~
−	~~Campus Connector Shuttle: http://www1.umn.edu/pts/shuttle.htm<br />~~
−	~~Metro Bus information: http://www1.umn.edu/pts/metrobuses.htm<br />~~

@@ Line 17: / Line 17: @@
 Conference space provided courtesy of the [http://www.umn.edu/oit/ University of Minnesota Office of Information Technology]
-== Tentative Agenda ==
+== Agenda ==
 <table width="80%" border="0">
 <tr>

@@ Line 15: / Line 15: @@
 [http://www.symantec.com/ https://www.owasp.org/images/2/26/New_Symantec_Logo.jpg]<br />
-[http://www.go-integral.com/ Symantec]
+[http://www.symantec.com/ Symantec]
 Conference space provided courtesy of the [http://www.umn.edu/oit/ University of Minnesota Office of Information Technology]