OWASP Project Manager Activity Reports/October 08 2012 - Revision history

Samantha Groves at 13:42, 8 October 2012

2012-10-08T13:42:19Z

Samantha Groves at 13:29, 8 October 2012

2012-10-08T13:29:25Z

Samantha Groves at 13:28, 8 October 2012

2012-10-08T13:28:19Z

Samantha Groves at 13:27, 8 October 2012

2012-10-08T13:27:24Z

Samantha Groves at 13:06, 8 October 2012

2012-10-08T13:06:37Z

Samantha Groves at 13:00, 8 October 2012

2012-10-08T13:00:50Z

Samantha Groves at 12:57, 8 October 2012

2012-10-08T12:57:05Z

Samantha Groves at 11:38, 8 October 2012

2012-10-08T11:38:37Z

Samantha Groves: Created page with "== OWASP Project Manager Report == ==== Work accomplished since August 13, 2012 ==== *'''Projects Set Up''' OWASP XSSER OWASP ONYX **[[OWA..."

2012-10-08T11:36:11Z

Created page with "== OWASP Project Manager Report == ==== Work accomplished since August 13, 2012 ==== *'''Projects Set Up''' **OWASP XSSER **OWASP ONYX **[[OWA..."

New page

== OWASP Project Manager Report ==
==== Work accomplished since August 13, 2012 ====
*'''Projects Set Up'''
**[[OWASP XSSER|OWASP XSSER]]
**[[OWASP ONYX|OWASP ONYX]]
**[[OWASP Crossword of the Month|OWASP Crossword of the Month]]

*'''Projects Confirmed'''
**[[OWASP Review BSI IT-Grundschutz Baustein Webanwendungen|OWASP Review BSI IT-Grundschutz Baustein Webanwendungen]]
**[[OWASP XSSER|OWASP XSSER]]

*'''Pending Project Confirmations'''
**Forensic Guide: Waiting to hear back from the Project Leader.
**Xelenium: Waiting to hear back from the Project Leader.
**Intelligent Security: Waiting to hear back from the Project Leader.
**Testing the Web Project

*'''Pending Project Donations'''
**[[OWASP XSSER|OWASP XSSER]]
**OWASP XSS Cheat Sheet

*'''Pending New Project Leader Appointment'''
**[[OWASP Stinger project|OWASP Stinger project]]

==Currently Working On==
*'''Projects Communications Restructuring'''
**I have begun to create the wiki template for the new OWASP Projects page.
**I am having a bit of trouble with the tabs, but I am getting help from volunteers on how to do this.

*'''Daily Project based queries and requests'''
**Answering daily project related queries from OWASP Project Leaders and Members
**Corresponding with project applicants on the status of their applications
**I've kept the following OWASP Project databases up-to-date:
*** [https://docs.google.com/a/owasp.org/spreadsheet/ccc?key=0Amvv_7Gz8Z7TdHZfWGhHZ0Z4UFFwZU42djBXcVVLSlE#gid=0 Incubator Project Applications].
*** [https://spreadsheets0.google.com/a/owasp.org/spreadsheet/ccc?pli=1&key=tF9r45eprbpdY6xuSbwEuMw#gid=0 OWASP Project Inventory].

*'''[https://docs.google.com/a/owasp.org/document/d/1xek9eZqAAt-koEuhOcXE9PoVCsAZ1WZJJoLzVMVj2Ew/edit AppSec USA OSS]'''
**We rolled out the marketing for this recently, and we have received 6 entries.
**As of today, all 6 entries have been accepted.
**I am drafting acceptance letters with information on what comes next for the attendees.These will be sent out next week. We are now sorting logistics for the accepted project leaders.
**There is the question of travel aid for some of the project leaders. I suggest we set aside $3,000 for those PLs that ask for financial assistance to get to AppSec USA.

*'''[https://docs.google.com/a/owasp.org/document/d/13jWO7jFfe9NUVlGIddZRrnLA8G5IOTNPjogb61lbbB0/edit OWASP ZAP Project Marketing Recommendations]'''
**The marketing recommendations have been agreed on by Simon and I.
**I am currently putting together the projects plan to implement them.

*'''[https://docs.google.com/a/owasp.org/document/d/1MA3TI5ssclxvheV8At_ffu2Fuic55SDpOokS3AOvBUc/edit#bookmark=id.ceef3790c8d6 DHS Host Project Funding Proposal]'''
**Andrew, Matteo, Eoin and I met to speak about this in more depth. Deborah, the home office representative, had some concerns about PM software and travel expenses in the budget.
**She would like to know if we are able to re-allocate the PM software and travel expenses to the OWASP portion of the budget. This meeting clarified many of the questions I had about Deborah's concerns.
**The PM software is available as open source to open source projects, and we have applied for a license already. The travel expenses can now come from the OWASP section of the budget.
**Kate, Deborah and I participated in an interview where we discussed DHS concerns. See above. The interview went very well, and we are currently waiting to hear back from her.
**Meeting Outcome: She was going to send us specific instructions on what she needed from us regarding the budget, and she is going to send us an updated proposal form so we can start applying for 2 other OWASP projects she expressed an interest in.
**Deborah has gotten back to us with instructions and I am in the process of amending our budget proposal for her to meet DHS standards.

*'''[https://docs.google.com/a/owasp.org/document/d/1f83ShmjwLpmybSVJIBhEXDxTrKuNcIPO3ok0ubAs4t8/edit Atlassian Open Source License]'''
**Andrew and I worked together on this application.
**The Atlassian representative has gotten back to us and the company has decided that a community license would be better for this project. We are in the process of writing an application for the new license recommendation.

==Projects Communication Structure Development Update==
# We agreed to organize our projects communication through the use of Tabs in the OWASP Projects section of the wiki. I am currently developing the tabs structure on my local machine.
# We agreed that all of the projects documentation must either be updated or created and organized in the correct locations on the wiki. I am currently organizing the documentation.

==AppSec Ireland==
# Have been in Dublin, Ireland for AppSec Ireland: From Monday, September 03 - Thursday, September 06.
# Went to help out with the conference and familiarize myself with the way AppSec events are run.
# Sat in on a full day training with Jim Manico: Thank you Jim.
# Helped coordinate the printing and delivery of OWASP branded items.
# Helped manage the registration and information desk.

==Important GPC Meeting Outcomes and Discussion Points==
# We will have weekly meetings to discuss updates on projects issues. The next meeting will be held on Friday, September 14th 2012 at 2pm BST.
# Jason Li has expressed concern over his minimal availability to represent the GPC as Chair of the Committee.
# Discussion on the availability of all members.
# Larry Casey has resigned his post on the GPC.
# Welcome Nishi Kumar, our newest member!

@@ Line 17: / Line 17: @@
 ==Currently Working On==
 *'''[https://www.owasp.org/index.php/Test2test Projects Communications Restructuring]'''
-**I have created a tabs based wiki page for OWASP Projects now.
+**I have created a tabs based wiki page for OWASP Projects.
-**The aim is to migrate to this after Q4
+**The aim is to migrate to this after Q4.
 **I continue to update this every week with the relevant data.
 **[https://docs.google.com/a/owasp.org/document/d/1dN-6GrwN-FB3Im0Ggj5dlVmxZNLs0IUigQegP1eSd8Q/edit# Projects Implementation Plan]
 *'''SalesForce Metadata Migration'''
-**Currently collecting information for our all of our projects to put into SalesForce.
+**Currently collecting information for all of our projects to put into SalesForce.
-**Working on gathering Active Project's Data
+**Working on gathering Active Project's data.
 *'''Daily Project based queries and requests'''
@@ Line 38: / Line 45: @@
 *'''[https://docs.google.com/a/owasp.org/document/d/1MA3TI5ssclxvheV8At_ffu2Fuic55SDpOokS3AOvBUc/edit#bookmark=id.ceef3790c8d6 DHS Host Project Funding Proposal]'''
-**Our Proposal was accepted and we have been awarded $25k for the Guidebook Projects.
+**Our Proposal was accepted, and we have been awarded $25k for the Guidebook Projects.
 **Deborah has sent us the agreement letter, and I have agreed to the terms.
 **We are currently waiting to hear back from Deborah regarding funds transfer.
@@ Line 57: / Line 64: @@
 **GPC and I have been working on completing the OWASP Projects Handbook.
 **Currently in the middle of developing a second version of the Handbook that is more relevant to the current state of OWASP Projects.
-**Emphasis on simplification of processes and creating solid framework that we can later build on if needed.
+**Emphasis on simplification of processes and creating a solid framework that we can later build on if needed.
 ==More Funding Potential==
@@ Line 74: / Line 81: @@
 *Flagship designation will be left out for now. We will start with Incubator and Labs.
 *Double check FSF licenses and create a list.
-*Ownership of Projects: Agreed that this needs further development in the future, but for now we will leave it as business as usual. Project Leaders keep ownership of their projects.
+*Ownership of Projects: Agreed that this needs further development in the future, but for now we will leave it as "business as usual". Project Leaders keep ownership of their projects.

@@ Line 66: / Line 66: @@
 ==Important GPC Meeting Outcomes and Discussion Points==
-#High Priority Objectives for Handbook:
+*High Priority Objectives for Handbook:
-  - Migration to Incubator, Labs, Flagship system.
+**Migration to Incubator, Labs, Flagship system.
-  - Sorting out reviews/reviewer process
+**Sorting out reviews/reviewer process
-  - Focus on simplification of processes
+**Focus on simplification of processes
-#Samantha will duplicate the current handbook document: Aim is to start with a fresh document using the previous version as reference.
+*Samantha will duplicate the current handbook document: Aim is to start with a fresh document using the previous version as reference.
-#GPC Members will go through handbook and cross off information that will no longer be relevant: Flagship designation, Sourceforge references, etc.
+*GPC Members will go through handbook and cross off information that will no longer be relevant: Flagship designation, Sourceforge references, etc.
-#Flagship designation will be left out for now. We will start with Incubator and Labs.
+*Flagship designation will be left out for now. We will start with Incubator and Labs.
-#Double check FSF licenses and create a list.
+*Double check FSF licenses and create a list.
-#Ownership of Projects: Agreed that this needs further development in the future, but for now we will leave it as business as usual. Project Leaders keep ownership of their projects.
+*Ownership of Projects: Agreed that this needs further development in the future, but for now we will leave it as business as usual. Project Leaders keep ownership of their projects.
-#GPC would like to have a view only account to the Projects Section in Salesforce.
+*GPC would like to have a view only account to the Projects Section in Salesforce.

@@ Line 64: / Line 64: @@
 #We have started by creating a new proposal questionnaire document.
 #Chris Schmidt, ESAPI Project Leader, and I have a meeting scheduled this week to discuss this proposal.
 ==Important GPC Meeting Outcomes and Discussion Points==
 #High Priority Objectives for Handbook:
-*Migration to Incubator, Labs, Flagship system.
+  - Migration to Incubator, Labs, Flagship system.
-*Sorting out reviews/reviewer process
+  - Sorting out reviews/reviewer process
-*Focus on simplification of processes
+  - Focus on simplification of processes
 #Samantha will duplicate the current handbook document: Aim is to start with a fresh document using the previous version as reference.
 #GPC Members will go through handbook and cross off information that will no longer be relevant: Flagship designation, Sourceforge references, etc.

@@ Line 59: / Line 59: @@
 **Emphasis on simplification of processes and creating solid framework that we can later build on if needed.
-==AppSec Ireland==
+==More Funding Potential==
-# Have been in Dublin, Ireland for AppSec Ireland: From Monday, September 03 - Thursday, September 06.
+#[https://docs.google.com/a/owasp.org/document/d/16ZFXaML8C7aDAZdyTMDDg4BzLr1vUTOz9eqmYE8ZW8U/edit OWASP ESAPI FUNDING PROPOSAL]
-# Went to help out with the conference and familiarize myself with the way AppSec events are run.
+#DHS has expressed interest in funding the OWASP ESAPI Project.
-# Sat in on a full day training with Jim Manico: Thank you Jim.
+#We have started by creating a new proposal questionnaire document.
-# Helped coordinate the printing and delivery of OWASP branded items.
+#Chris Schmidt, ESAPI Project Leader, and I have a meeting scheduled this week to discuss this proposal.
 ==Important GPC Meeting Outcomes and Discussion Points==
-# We will have weekly meetings to discuss updates on projects issues. The next meeting will be held on Friday, September 14th 2012 at 2pm BST.
+#High Priority Objectives for Handbook:
-# Jason Li has expressed concern over his minimal availability to represent the GPC as Chair of the Committee.
+*Migration to Incubator, Labs, Flagship system.
-# Discussion on the availability of all members.
+*Sorting out reviews/reviewer process
-# Larry Casey has resigned his post on the GPC.
+*Focus on simplification of processes
-# Welcome Nishi Kumar, our newest member!
+#Samantha will duplicate the current handbook document: Aim is to start with a fresh document using the previous version as reference.

@@ Line 48: / Line 48: @@
 **Travel requirements for Kostas have changed. He is still going to participate in the OSS, but now his airfare and hotel expenses will be paid by the OWASP Track Fund as he is now a speaker.
 **[https://docs.google.com/a/owasp.org/document/d/1urkb-k3zHCfcS_8TLFgQaEv95Yr6gNXmLElDFHeEgM4/edit Presentation Schedule]
 *'''[https://docs.google.com/a/owasp.org/document/d/1f83ShmjwLpmybSVJIBhEXDxTrKuNcIPO3ok0ubAs4t8/edit Atlassian Open Source License]'''
 **Andrew and I worked together on this application.
-**The Atlassian representative has gotten back to us and the company has decided that a community license would be better for this project. We are in the process of writing an application for the new license recommendation.
+**We created a new proposal for the community license.
+**Our proposal has been accepted, and we are now able to use the software.
 ==AppSec Ireland==

@@ Line 44: / Line 44: @@
 *'''[https://docs.google.com/a/owasp.org/document/d/1xek9eZqAAt-koEuhOcXE9PoVCsAZ1WZJJoLzVMVj2Ew/edit AppSec USA OSS]'''
-**We rolled out the marketing for this recently, and we have received 6 entries.
+**All 6 attendees have confirmed.
-**As of today, all 6 entries have been accepted.
+**Greg has agreed to our terms: We pay for his airfare if he agrees to participate as a volunteer at the conference.
-**I am drafting acceptance letters with information on what comes next for the attendees.These will be sent out next week. We are now sorting logistics for the accepted project leaders.
+**Travel requirements for Kostas have changed. He is still going to participate in the OSS, but now his airfare and hotel expenses will be paid by the OWASP Track Fund as he is now a speaker.
-**There is the question of travel aid for some of the project leaders. I suggest we set aside $3,000 for those PLs that ask for financial assistance to get to AppSec USA.
+**[https://docs.google.com/a/owasp.org/document/d/1urkb-k3zHCfcS_8TLFgQaEv95Yr6gNXmLElDFHeEgM4/edit Presentation Schedule]
 *'''[https://docs.google.com/a/owasp.org/document/d/13jWO7jFfe9NUVlGIddZRrnLA8G5IOTNPjogb61lbbB0/edit OWASP ZAP Project Marketing Recommendations]'''

@@ Line 17: / Line 17: @@
 ==Currently Working On==
-*'''Projects Communications Restructuring'''
+*'''[https://www.owasp.org/index.php/Test2test Projects Communications Restructuring]'''
-**I have begun to create the wiki template for the new OWASP Projects page.
+**I have created a tabs based wiki page for OWASP Projects now.
-**I am having a bit of trouble with the tabs, but I am getting help from volunteers on how to do this.
+**The aim is to migrate to this after Q4
 *'''Daily Project based queries and requests'''
-**Answering daily project related queries from OWASP Project Leaders and Members
+**This has not changed much since I began the post: questions are very similar in nature.
-**Corresponding with project applicants on the status of their applications
+**AppSec USA 2012 queries
-**I've kept the following OWASP Project databases up-to-date:
+**Travel queries
-*** [https://docs.google.com/a/owasp.org/spreadsheet/ccc?key=0Amvv_7Gz8Z7TdHZfWGhHZ0Z4UFFwZU42djBXcVVLSlE#gid=0 Incubator Project Applications].
+**Budget based questions
-*** [https://spreadsheets0.google.com/a/owasp.org/spreadsheet/ccc?pli=1&key=tF9r45eprbpdY6xuSbwEuMw#gid=0 OWASP Project Inventory].
+**Funding questions
 *'''[https://docs.google.com/a/owasp.org/document/d/1xek9eZqAAt-koEuhOcXE9PoVCsAZ1WZJJoLzVMVj2Ew/edit AppSec USA OSS]'''

@@ Line 1: / Line 1: @@
 == OWASP Project Manager Report ==
-==== Work accomplished since August 13, 2012 ====
+==== Work accomplished since September 10, 2012 ====
-*'''Pending Project Confirmations'''
+*'''Project Numbers'''
-**Forensic Guide: Waiting to hear back from the Project Leader.
+**Active Projects: 113
-**Xelenium: Waiting to hear back from the Project Leader.
+**Archived Projects: 41
-**Intelligent Security: Waiting to hear back from the Project Leader.
+**Graveyard Projects: 24
-**Testing the Web Project
+**Merged Projects: 43
-*'''Pending Project Donations'''
+*'''Pending Project Donations''': We are still working on creating a Project Donation Contract.
 **[[OWASP XSSER|OWASP XSSER]]
 **OWASP XSS Cheat Sheet
 *'''Pending New Project Leader Appointment'''
-**[[OWASP Stinger project|OWASP Stinger project]]
+**[[OWASP Stinger project|OWASP Stinger project]]: This project is currently being transfered. The new project leader has been appointed.
 ==Currently Working On==