OWASP Project Manager Activity Reports/October 10 2013 - Revision history

Samantha Groves at 01:44, 11 October 2013

2013-10-11T01:44:10Z

Samantha Groves at 01:42, 11 October 2013

2013-10-11T01:42:05Z

Samantha Groves at 00:08, 11 October 2013

2013-10-11T00:08:49Z

Samantha Groves at 00:07, 11 October 2013

2013-10-11T00:07:18Z

Samantha Groves at 00:05, 11 October 2013

2013-10-11T00:05:52Z

Samantha Groves at 23:58, 10 October 2013

2013-10-10T23:58:26Z

Samantha Groves at 23:29, 10 October 2013

2013-10-10T23:29:15Z

Samantha Groves: Created page with "== OWASP Project Manager Report == ==== Work accomplished since August 06, 2013 ==== *'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJ..."

2013-10-10T22:23:29Z

Created page with "== OWASP Project Manager Report == ==== Work accomplished since August 06, 2013 ==== *'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJ..."

New page

== OWASP Project Manager Report ==
==== Work accomplished since August 06, 2013 ====

*'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJucVE&usp=sharing Project Numbers]'''
**Active Projects: 135
**Inactive Projects: 103

*'''[https://docs.google.com/spreadsheet/ccc?key=0Amvv_7Gz8Z7TdHZfWGhHZ0Z4UFFwZU42djBXcVVLSlE&usp=sharing New Project Applications]'''
**OWASP JAWS Project
**OWASP Media Project

*'''New OWASP Projects'''
**[https://www.owasp.org/index.php/OWASP_Framework_Security_Project OWASP Framework Security Project]
**[https://www.owasp.org/index.php/OWASP_Ruby_on_Rails_and_friends_Security_Guide OWASP Ruby on Rails and friends Security Guide Project] - Adoption

*'''Projects Under Review'''
**[https://www.owasp.org/index.php/Cheat_Sheets OWASP Cheat Sheets Project]
**[https://www.owasp.org/index.php/OWASP_Java_HTML_Sanitizer_Project OWASP Java HTML Sanitizer Project] (Testing)
**[https://www.owasp.org/index.php/OWASP_Xenotix_XSS_Exploit_Framework Xenotix XSS Exploit Framework]
**[https://www.owasp.org/index.php/OWASP_Cornucopia OWASP Cornucopia Project] (Testing)
**[https://www.owasp.org/index.php/OWASP_Java_Encoder_Project OWASP Java Encoder Project] (Testing)
**Project reviews are on hold until the Technical Advisory group complete and test the [https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHJUSl9rbGtscGJfSGRWVFNUM2JPMlE&usp=sharing updated assessment criteria].

==Project Manager Q3 2013 Objectives==
#Marketing: Work with Sarah to solicit feedback from community on Marketing deliverables and finalize relationship with Patrick and Denita.
#Project Review Process - Work with new Technical Project advisors to finalize project review criteria and process.
#Grants: Develop a grant strategy for rest of 2013 and 2014, utilizing fundraising intern(s) as part of this strategy.

*'''Ongoing Objectives for 2013'''
**Work with Project leaders to reach grant required milestones - ONGOING
**Develop a project charter outlining appropriate grant revenue spending and grant required milestones. - DUE IN SEPTEMBER - ONGOING
**Oversight of Marketing and Graphic Design deliverables (Phase 2/Phase 3) provided by 3rd party contractor

==Currently Working On==

*'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdEdCYVJpdmZHaWJYZ055WHROa19qN3c&usp=sharing Active Project Audit]'''
**The Project Audit is now complete.
**I reached out to every project leader listed in our inventory, and asked them to confirm the status of their project.
**The majority of our Leaders responded, and their project activity status was marked accordingly.
**Those that did not respond were sent 3 messages before their project was marked inactive.
**Due to the audit, the number of active OWASP Projects in our inventory went down from 169 to 132.
**I have also created an [https://lists.owasp.org/mailman/listinfo/owasp_project_leader_list OWASP Project Leader Mailing List], and I added all of our confirmed active Leaders to it.
**The next audit will take place on February 2014.

*'''[http://owasp.blogspot.com/2013/09/meet-our-new-technical-project-advisors.html Technical Project Advisors: Work Update]'''
**The Advisors and I met last week to discuss their review of the current Assessment criteria.
**We also reviewed Chuck's comments, and discussed each in more detail.
**We made some changes to the original document, and I've put together a revised draft based on our conversation.
**Here is [https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHliVUlMYVdPRWpqajF1bGtnSGtWckE&usp=sharing Ly's original document] with Chuck's comments and my notes.
**Here is [https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHJUSl9rbGtscGJfSGRWVFNUM2JPMlE&usp=sharing new revised draft].
**We plan to use the revised draft to test 3 projects against the criteria.
***Project being reviewed are the following:
***[https://www.owasp.org/index.php/OWASP_Java_HTML_Sanitizer_Project OWASP Java HTML Sanitizer Project] (Testing)
***[https://www.owasp.org/index.php/OWASP_Cornucopia OWASP Cornucopia Project] (Testing)
***[https://www.owasp.org/index.php/OWASP_Java_Encoder_Project OWASP Java Encoder Project] (Testing)

*'''Women in AppSec: AppSec USA 2013'''
**The team has now selected three new members for the Women in AppSec Selection Committee.
**These individuals will help review the applications and select the two winners.
**The following people make up the selection committee: Helen Gao, Bev Corwin, Jim Manico, Tom Ryan, Lucas Ferreira, and Samantha Groves.
**Once the selection committee was established, we began discussing the selection criteria in more detail.
**We are now in the fourth version of the criteria.
**[https://docs.google.com/document/d/1W0RJ85uP78m47R58xnGdi0_09QpalnPT2Woz4zb5_94/edit?usp=sharing Women in AppSec Program Selection Criteria: 4th Draft].
**We plan on beginning our selection process after the 9th of September once the application deadline has passed.
**[https://docs.google.com/forms/d/1WEtInvzlxLDXpTgfXh-E1E7e8H5FRfEOPIaTOizlBpk/viewform Women in AppSec Application Form.]
**The application deadline is Monday, September 09, 2013 at 5pm GMT.
**The deadline for sponsors is Monday, September 09, 2013, as well.

*'''[https://www.owasp.org/index.php/Projects/Internships/Grants_and_Fundraising_Intern Grants & Fundraising Intern]'''
**My search for a Grants & Fundraising intern is coming to an end
**I received four applications for the role, and I had interviews with each applicant last week.
**I have already made my decision, and I will announce the successful applicant on the 9th of September.
**Application Deadline: Monday August 26 2013 5PM GMT. (Now Closed)
**Interviews Scheduled: First Week of September. (Interviews Scheduled for Next Week)
**Selection Announcement: Monday, September 09th 2013.
**Start Date: Monday, September 16th 2013.
**Internship End Date: Monday, January 13th 2014.

*'''Projects at Conferences'''
**The two conferences left to plan for this year are AppSec LATAM, and AppSec USA.
**I have reached out to two project leaders in the Latin America region, and asked them if they would speak at the conference.
**Both leaders agreed to give a talk at the conference.
**I have been helping them with their travel, accommodation, and conference logistics planning.
**Thank you to Michael Hidalgo and Rafael Gil Larios for representing OWASP Projects at AppSec LATAM.
**AppSec USA planning for projects is going very well.
**Now, all of the Project Leaders have booked their travel, and only one project leader hasn't confirmed his talk time slot.

==Project Funding Updates==
*'''OWASP OWTF Project: Brucon 5x5 Award'''
# Amount: €5,000.00 (Approx. $6,670.00)
# Status: Awarded. Congratulations, Abraham Aranguren and all involved in the project, for your award.

*'''[https://docs.google.com/file/d/0B1lOCxlYdf1AQm52T2xjX215M28/edit?usp=sharing OWASP OWTF Grant Proposal]'''
# Amount: $55,800 USD
# Status: This proposal is complete, and has been submitted.

*'''[https://docs.google.com/document/d/1cFbmOLqEQQG8eXPrMTlU6JUivgRIacUeL7D599bZm_E/edit?usp=sharing OWASP AppSensor Grant Proposal]'''
# Amount: $15,000 USD
# Status: This proposal is complete, and has been submitted.

*'''[https://docs.google.com/document/d/1Vz7BLFdt1h5AhmW-Zc2B_KlqhzsSkSAaEASML5U4VQs/edit?usp=sharing OWASP OpenSAMM Grant Proposal]'''
# Amount: $112,000 USD
# Status: This proposal is complete, and has been submitted.

*'''[https://docs.google.com/document/d/1MA3TI5ssclxvheV8At_ffu2Fuic55SDpOokS3AOvBUc/edit?usp=sharing OWASP Guidebooks Proposal]'''
# Amount: $25,000 USD
# Status: Awarded. The first payment has been allocated to our project budgets. The second invoice has now been sent to Georgia Tech for payment.
# [https://www.owasp.org/images/1/18/Development_Guide_Project_Gantt.pdf OWASP Development Guide Plan]
# [https://www.owasp.org/images/e/e9/Testing_Guide_Project_Gantt.pdf OWASP Testing Guide Plan]
# [https://www.owasp.org/images/d/da/Code_Review_Project_Gantt.pdf OWASP Code Review Guide Plan]

*'''[https://docs.google.com/document/d/16ZFXaML8C7aDAZdyTMDDg4BzLr1vUTOz9eqmYE8ZW8U/edit?usp=sharing OWASP ESAPI Grant Proposal]'''
# Amount: $25,000 USD
# Status: The ESAPI proposal is still being reviewed.

*'''[https://docs.google.com/document/d/1dBTaRr-yl8wGhGKxacWACznZhCZnJ_sZeAdN-b2xPlw/edit?usp=sharing OWASP ModSecurity CRS Proposal]'''
#Amount: $30,000 USD
#Status: The ModSecurity proposal is still being reviewed.

*'''Google Grants Proposal'''
#Amount: $120,000 USD in Adwords Funds
#Status: Awarded.
#Note: There is no link to show the proposal for this grant. There was a form that was submitted to Google, and we did not receive a record of this form.

*'''European Commission Grant Proposal'''
#Amount: €250,000
#Status: Denied.

*'''Google Summer of Code'''
#Amount: $5,500
#Status: Awarded

*'''Projects breakdown:'''
**4 ZAP Projects: $2,000
**4 OWTF Projects: $2,000
**1 PHP Security Project: $500
**1 Hackademics Project: $500
**1 Modsecurity Project: $500
**Note: Big thank you to Fabio Cerullo for coordinating and managing this award.

*'''Total Funds Awarded: $157,170 USD for 2013.'''

==OWASP Project Manager Weekly Reports==
#[https://www.owasp.org/index.php/Projects/Reports/2013-09-08 Project Manager Report: August 09 2013]
#[https://www.owasp.org/index.php/Projects/Reports/2013-16-08 Project Manager Report: August 16 2013]
#[https://www.owasp.org/index.php/Projects/Reports/2013-23-08 Project Manager Report: August 23 2013]
#[https://www.owasp.org/index.php/Projects/Reports/2013-30-08 Project Manager Report: August 30 2013]
#Project Manager Report: September 06 2013 - No Report this week. PM was out of the office.

@@ Line 33: / Line 33: @@
 **Quarterly Report to DHS
 **Continue helping leaders reach their grant required milestones
-**Finalise graphic design delivery from Patrick: 2 pieces to go.
+**Finalize graphic design delivery from Patrick: 2 pieces to go.
 ==Currently Working On==
@@ Line 80: / Line 80: @@
 *'''OWASP Marketing'''
-**I continue to work on finalising our contract with the marketing and design agency we hired to create our OWASP identity package.
+**I continue to work on finalizing our contract with the marketing and design agency we hired to create our OWASP identity package.
 **We have finalized the majority of the design pieces we requested from the graphic designer.
 **There is only one design piece left to create as of today.

@@ Line 40: / Line 40: @@
 *'''[https://www.owasp.org/index.php/Projects_Summit_2013 2013 Project Summit]'''
 **I continue to work on organizing the 2013 OWASP Projects Summit.
-**Current track topics include:
+**Current session topics include:
 ***Projects Workshop
 ***ESAPI Hackathon
@@ Line 48: / Line 48: @@
 ***Product Development and Reference Implementation
 ***Mobile Security Project Session
 **I urge everyone to add your name to the attendees list if you are interested in a session, or suggest new topics that you would be more interested in attending.
@@ Line 61: / Line 62: @@
 **The Product Assessment focuses on the quality of the deliverable.
-*'''Women in AppSec: AppSec USA 2013'''
+*'''[http://appsecusa.org/2013/activities/owasp-women-in-application-security-appsec-program/ Women in AppSec: AppSec USA 2013]'''
 **The Women in AppSec grading process is now complete.
 **We have now selected 2 winners for this year's sponsorship.
@@ Line 72: / Line 73: @@
 **Kait continues to do an excellent job with all of her tasks.
 **This week, she worked on helping us hire transcriptionists to transcribe the Board Election Candidate Interviews.
-**Additionally, she worked on a hand full of administrative tasks for Women in AppSec, she created a ppt presentation about OWASP and the Top Ten, and she worked on several Project Summit related tasks.
+**Additionally, she worked on a hand full of administrative tasks for Women in AppSec, she created a ppt presentation about OWASP and the Top Ten.
 **You can read more about her week by reading her [https://www.owasp.org/index.php/Projects/Internships/Grants_and_Fundraising_Intern/Kait_Disney_Leugers#tab=Biography Intern Weekly Report].
 **Start Date: Monday, September 16th 2013.
 **Internship End Date: Monday, January 13th 2014.
-*'''Daily Project based queries and requests'''
+*'''OWASP Marketing'''
-**This has not changed much since I began the post: questions are very similar in nature.
+**I continue to work on finalising our contract with the marketing and design agency we hired to create our OWASP identity package.
-**Global AppSec questions.
+**We have finalized the majority of the design pieces we requested from the graphic designer.
-**Funding queries.
+**There is only one design piece left to create as of today.
-**Travel availability.
+**I will work with the graphic designer to finalize this last piece in the next coming weeks.
 ==Project Funding Updates==

@@ Line 37: / Line 37: @@
 ==Currently Working On==
-*'''[http://owasp.blogspot.com/2013/09/meet-our-new-technical-project-advisors.html Technical Project Advisors: Work Update]'''
+*'''[https://www.owasp.org/index.php/Projects_Summit_2013 2013 Project Summit]'''
-**The Advisors and I met last week to discuss their review of the current Assessment criteria.
+**I continue to work on organizing the 2013 OWASP Projects Summit.
-**We also reviewed Chuck's comments, and discussed each in more detail.
+**Current track topics include:
-**We made some changes to the original document, and I've put together a revised draft based on our conversation.
+***Projects Workshop
-**Here is [https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHliVUlMYVdPRWpqajF1bGtnSGtWckE&usp=sharing Ly's original document] with Chuck's comments and my notes.
+***ESAPI Hackathon
-**Here is [https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHJUSl9rbGtscGJfSGRWVFNUM2JPMlE&usp=sharing new revised draft].
+***ZAP Hackathon
-**We plan to use the revised draft to test 3 projects against the criteria.
+***University Outreach, Education, and Training
-***Project being reviewed are the following:
+***Writing, Proof-reading, and Technical Editing
-***[https://www.owasp.org/index.php/OWASP_Java_HTML_Sanitizer_Project OWASP Java HTML Sanitizer Project] (Testing)
+***Product Development and Reference Implementation
-***[https://www.owasp.org/index.php/OWASP_Cornucopia OWASP Cornucopia Project] (Testing)
+***Mobile Security Project Session
-***[https://www.owasp.org/index.php/OWASP_Java_Encoder_Project OWASP Java Encoder Project] (Testing)
+**I urge everyone to add your name to the attendees list if you are interested in a session, or suggest new topics that you would be more interested in attending.
 *'''Women in AppSec: AppSec USA 2013'''
-**The team has now selected three new members for the Women in AppSec Selection Committee.
+**The Women in AppSec grading process is now complete.
-**These individuals will help review the applications and select the two winners.
+**We have now selected 2 winners for this year's sponsorship.
-**The following people make up the selection committee: Helen Gao, Bev Corwin, Jim Manico, Tom Ryan, Lucas Ferreira, and Samantha Groves.
+**We are now in the process of setting them up with their flights, registration, and accommodation.
-**Once the selection committee was established, we began discussing the selection criteria in more detail.
+**The two winners are:
-**We are now in the fourth version of the criteria.
+***Nancy Lorntson
-**[https://docs.google.com/document/d/1W0RJ85uP78m47R58xnGdi0_09QpalnPT2Woz4zb5_94/edit?usp=sharing Women in AppSec Program Selection Criteria: 4th Draft].
+***Carrie Schaper
-*'''[https://www.owasp.org/index.php/Projects/Internships/Grants_and_Fundraising_Intern Grants & Fundraising Intern]'''
+*'''[http://owasp.blogspot.com/2013/09/meet-our-new-grants-and-fundraising.html Meet our new Grants & Fundraising Intern]'''
-**My search for a Grants & Fundraising intern is coming to an end
+**Kait continues to do an excellent job with all of her tasks.
-**I received four applications for the role, and I had interviews with each applicant last week.
+**This week, she worked on helping us hire transcriptionists to transcribe the Board Election Candidate Interviews.
-**I have already made my decision, and I will announce the successful applicant on the 9th of September.
+**Additionally, she worked on a hand full of administrative tasks for Women in AppSec, she created a ppt presentation about OWASP and the Top Ten, and she worked on several Project Summit related tasks.
-**Application Deadline: Monday August 26 2013 5PM GMT. (Now Closed)
+**You can read more about her week by reading her [https://www.owasp.org/index.php/Projects/Internships/Grants_and_Fundraising_Intern/Kait_Disney_Leugers#tab=Biography Intern Weekly Report].
 **Start Date: Monday, September 16th 2013.
 **Internship End Date: Monday, January 13th 2014.
-*'''Projects at Conferences'''
+*'''Daily Project based queries and requests'''
-**The two conferences left to plan for this year are AppSec LATAM, and AppSec USA.
+**This has not changed much since I began the post: questions are very similar in nature.
-**I have reached out to two project leaders in the Latin America region, and asked them if they would speak at the conference.
+**Global AppSec questions.
-**Both leaders agreed to give a talk at the conference.
+**Funding queries.
-**I have been helping them with their travel, accommodation, and conference logistics planning.
+**Travel availability.
-**Thank you to Michael Hidalgo and Rafael Gil Larios for representing OWASP Projects at AppSec LATAM.
+**Project based administrative help.
-**AppSec USA planning for projects is going very well.
+**Project status information.
-**Now, all of the Project Leaders have booked their travel, and only one project leader hasn't confirmed his talk time slot.
+**Several project donation questions.
 ==Project Funding Updates==

@@ Line 25: / Line 25: @@
 **[https://www.owasp.org/index.php/OWASP_Java_Encoder_Project OWASP Java Encoder Project] (Testing)
-==Project Manager Q3 2013 Objectives==
+==Project Manager Q4 2013 Objectives==
-#Marketing: Work with Sarah to solicit feedback from community on Marketing deliverables and finalize relationship with Patrick and Denita.
+#Finish planning Project Summit & Execute Summit at AppSec USA.
-#Project Review Process - Work with new Technical Project advisors to finalize project review criteria and process.
+#Develop & Finish Global Projects Strategy for 2014: Includes Budget
-#Grants: Develop a grant strategy for rest of 2013 and 2014, utilizing fundraising intern(s) as part of this strategy.
+#Finish Fundraising Strategy for 2014: Includes Budget
 *'''Ongoing Objectives for 2013'''
-**Work with Project leaders to reach grant required milestones - ONGOING
+**Quarterly Report to DHS
-**Develop a project charter outlining appropriate grant revenue spending and grant required milestones. - DUE IN SEPTEMBER - ONGOING
+**Continue helping leaders reach their grant required milestones
-**Oversight of Marketing and Graphic Design deliverables (Phase 2/Phase 3) provided by 3rd party contractor
+**Finalise graphic design delivery from Patrick: 2 pieces to go.
 ==Currently Working On==

@@ Line 1: / Line 1: @@
 == OWASP Project Manager Report ==
-==== Work accomplished since August 06, 2013 ====
+==== Work accomplished since September 2013 ====
 *'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJucVE&usp=sharing Project Numbers]'''
@@ Line 7: / Line 7: @@
 *'''[https://docs.google.com/spreadsheet/ccc?key=0Amvv_7Gz8Z7TdHZfWGhHZ0Z4UFFwZU42djBXcVVLSlE&usp=sharing New Project Applications]'''
-**OWASP JAWS Project
+**OWASP Vulnerable Web Applications Directory
 *'''New OWASP Projects'''
-**[https://www.owasp.org/index.php/OWASP_Framework_Security_Project OWASP Framework Security Project]
+**[https://www.owasp.org/index.php/OWASP_Media_Project OWASP Media Project]
-**[https://www.owasp.org/index.php/OWASP_Ruby_on_Rails_and_friends_Security_Guide OWASP Ruby on Rails and friends Security Guide Project] - Adoption
+**[https://www.owasp.org/index.php/OWASP_Global_Chapter_Meetings_Project OWASP Global Chapter Meetings Project]
 *'''Projects Under Review'''
@@ Line 20: / Line 24: @@
 **[https://www.owasp.org/index.php/OWASP_Cornucopia OWASP Cornucopia Project] (Testing)
 **[https://www.owasp.org/index.php/OWASP_Java_Encoder_Project OWASP Java Encoder Project] (Testing)
 ==Project Manager Q3 2013 Objectives==

@@ Line 105: / Line 105: @@
 *'''[https://docs.google.com/document/d/1MA3TI5ssclxvheV8At_ffu2Fuic55SDpOokS3AOvBUc/edit?usp=sharing OWASP Guidebooks Proposal]'''
 # Amount: $25,000 USD
-# Status: Awarded. The first payment has been allocated to our project budgets. The second invoice has now been sent to Georgia Tech for payment.
+# Status: Awarded. The first payment has been allocated to our project budgets. The second invoice has now been sent to Georgia Tech and payment has been received.
 # [https://www.owasp.org/images/1/18/Development_Guide_Project_Gantt.pdf OWASP Development Guide Plan]
 # [https://www.owasp.org/images/e/e9/Testing_Guide_Project_Gantt.pdf OWASP Testing Guide Plan]
@@ Line 144: / Line 144: @@
 ==OWASP Project Manager Weekly Reports==
-#[https://www.owasp.org/index.php/Projects/Reports/2013-09-08  Project Manager Report: August 09 2013]
+#Project Manager Report: September 06 2013 - No Report this week. PM was away.
-#[https://www.owasp.org/index.php/Projects/Reports/2013-16-08  Project Manager Report: August 16 2013]
+#[https://www.owasp.org/index.php/Projects/Reports/2013-13-09  Project Manager Report: September 13 2013]
-#[https://www.owasp.org/index.php/Projects/Reports/2013-23-08  Project Manager Report: August 23 2013]
+#[https://www.owasp.org/index.php/Projects/Reports/2013-20-09  Project Manager Report: September 20 2013]
-#[https://www.owasp.org/index.php/Projects/Reports/2013-30-08  Project Manager Report: August 30 2013]
+#[https://www.owasp.org/index.php/Projects/Reports/2013-27-09  Project Manager Report: September 27 2013]
-#Project Manager Report: September 06 2013 - No Report this week. PM was out of the office.
+#[https://www.owasp.org/index.php/Projects/Reports/2013-04-10  Project Manager Report: October 04 2013]

@@ Line 3: / Line 3: @@
 *'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJucVE&usp=sharing Project Numbers]'''
-**Active Projects: 135
+**Active Projects: 142
 **Inactive Projects: 103