OWASP Project Summit 2015/Working Sessions - Revision history

Johanna Curiel: /* Project Developments: The Good , The Bad and the Ugly */

2015-05-15T15:45:39Z

‎Project Developments: The Good , The Bad and the Ugly

Johanna Curiel: /* 14:00 - 17:30 Hackademics - Student performance metrics visualization */

2015-05-15T15:36:49Z

‎14:00 - 17:30 Hackademics - Student performance metrics visualization

Johanna Curiel: /* Current Daily Schedule */

2015-05-15T15:18:48Z

‎Current Daily Schedule

Johanna Curiel: /* Wednesday 20th May */

2015-05-15T15:17:41Z

‎Wednesday 20th May

Johanna Curiel: /* Tuesday 19th May */

2015-05-15T14:25:31Z

‎Tuesday 19th May

Johanna Curiel: /* 9:00-9:30 Welcome to Project Summit 2015 */

2015-05-15T14:20:46Z

‎9:00-9:30 Welcome to Project Summit 2015

Johanna Curiel: /* Current Daily Schedule */

2015-05-15T14:20:21Z

‎Current Daily Schedule

Johanna Curiel: /* Current Daily Schedule */

2015-05-15T14:18:26Z

‎Current Daily Schedule

Johanna Curiel: /* Current Daily Schedule */

2015-05-15T14:18:01Z

‎Current Daily Schedule

Mark Denihan: /* Tuesday 19th May */

2015-05-15T08:50:49Z

‎Tuesday 19th May

@@ Line 267: / Line 267: @@
 :00 - 17:30 Open Forum with Project leaders
 Forum discussion with project leaders and Board==>(1 hour session)
-Why my project is not moving forward?
+*Why my project is not moving forward?
-What can be done to help improve my project?
+*What can be done to help improve my project?
-How to improve the actual situation of projects
+*How to improve the actual situation of projects
-How to improve the review process
+*How to improve the review process
 Deliverables:
-Collect information and create a report
+*Collect information and create a report
-Use the session results and see how can we implement them
+*Use the session results and see how can we implement them
-Inform leaders about the actual process
+*Inform leaders about the actual process
 Location: Room E104

@@ Line 215: / Line 215: @@
 Location: Room E104
-===14:00 - 17:30 Hackademics - Student performance metrics visualization===
+===14:00 - 17:00 Hackademics - Student performance metrics visualization===
 Currently, the platform gathers student performance metrics in the form of how long it took them to solve challenges, how many requests, how much time idle e.t.c. However, the only way for a teacher to see the numbers is with database access.(The data is gathered for the advanced scoring functionality but it is also very useful as performance analytics). We plan to use graphing libraries to create interactive graphs to visualize the comprehension of the student performance. It's a simple front-end feature which will improve the usability of the platform.

@@ Line 10: / Line 10: @@
 Rooms E103 & E104 (see attached floor plan):
 [[File:RAI_PLAN_2013_LR_AW.pdf]]
 ==Tuesday 19th May==

@@ Line 184: / Line 184: @@
 Interworking with 3rd party tools
 The opportunity to focus on specific areas of interest to the attendees
 ===OWASP Knowledge Based Authentication Performance Metrics===
@@ Line 195: / Line 197: @@
 -Should Owasp consider providing labels and certifications?
 -Expected audience : +20 people.
-* Searching for interaction with other project leaders, and the boar
+* Searching for interaction with other project leaders, and the board
 ===09:00 – 12:00 Cornucopia - Ecommerce Website Edition – Video ===
@@ Line 205: / Line 209: @@
   • Publish video.
 Project website: https://www.owasp.org/index.php/OWASP_Cornucopia
 ===9:30 - 11:30 Hackademics test coverage===
 Improve unit tests coverage. Currently, unit tests cover ~20% of the platform, this session will focus on doubling the test coverage. Deliverables: 40% unit and functional tests coverage.
 ===13:30 – 17:00 AppSensor (Code) – Dashboard===
@@ Line 218: / Line 226: @@
 Code roadmap: https://www.owasp.org/index.php/OWASP_AppSensor_Project#tab=Road_Map_and_Getting_Involved
 Microsite http://www.appsensor.org/
 ===14:00 - 17:30 Hackademics - Student performance metrics visualization===
 Currently, the platform gathers student performance metrics in the form of how long it took them to solve challenges, how many requests, how much time idle e.t.c. However, the only way for a teacher to see the numbers is with database access.(The data is gathered for the advanced scoring functionality but it is also very useful as performance analytics). We plan to use graphing libraries to create interactive graphs to visualize the comprehension of the student performance. It's a simple front-end feature which will improve the usability of the platform.
 ===17:00-18:00 OWASP Automated Threats to Web Applications Project - Website Owner Experiences===
@@ Line 230: / Line 242: @@
   • What steps were undertaken to prevent or mitigate such attacks?
 Participation/contribution can be anonymous or otherwise. The intention is to update the published documents during the session and if possible create additional sector-specific guidance.
 ===10h00 - 13h00: OWASP OWTF Architecture Audit===
@@ Line 239: / Line 253: @@
 Draw a better architecture for OWTF
 We expect to have a draft of the next architecture better suited for the needs of OWTF by the end of this session.
 ===14h00 - 15h00: OWASP OWTF CLI Assessment===
@@ Line 247: / Line 263: @@
 Gather the findings and draw a new standard for the CLI
 We expect to have a new standard for the CLI that will be implemented this year in order to enhance and fix its behaviors. This could be part of a GSoC project depending of the output of the session.
 ===15h00 - 17h00: OWASP OWTF Hack It For Fun===
@@ Line 256: / Line 274: @@
 We expect to show how easy it is for students to hack into the code base of OWTF.
 As a reward, the winners of the competition will be offered nice goodies :)
 ===Project Developments: The Good , The Bad and the Ugly===
-:30 - 18:30 Open Forum with Project leaders
+:00 - 17:30 Open Forum with Project leaders
 Forum discussion with project leaders and Board==>(1 hour session)
 Why my project is not moving forward?
@@ Line 270: / Line 290: @@
 Inform leaders about the actual process
-:30-19:30 HAPPY HOUR with Project leaders==>Looking for sponsors
+Location: Room E104

@@ Line 31: / Line 31: @@
 Project Reviews 2014-2015  Results
 :30-10:30
 ===Actual situation of projects===
 min presentation about the results of the last Project review, and release report about the active/ inactive projects per category It is expected than all attending project leaders and some members of the owasp board can assist to this presentation and participate
 ===Security Gaps Workshop===
   (25 min): Security issues that no project has explored so far. Potential source of inspiration for new projects
 ===Projects as Operational objectives===
 (Kate Hartmann, Johanna, Paul,Timo, Jim)
 Deliverables: Report, Wiki updated and a nice infographic with the results.Plan for projects to be part of the operational objectives
 ===OWASP Knowledge Based Authentication Performance Metrics Project===
@@ Line 47: / Line 51: @@
 and project managers (Ann Racuya-Robbins, Noreen Whysel)
 h30 – 12h30.
 ===Review of the KBA testing tools (such as the KBA plugin).===
@@ Line 59: / Line 64: @@
 The new ground of identity, security, privacy and
 governance and the role of KBA in each.
 ===OWASP Codes of Conduct – Document Review===
@@ Line 70: / Line 76: @@
   • Publish updated documents to wiki (PDF and Word).
 Project website: https://www.owasp.org/index.php/OWASP_Codes_of_Conduct
 ===OWASP ASVS ===
@@ Line 78: / Line 85: @@
 Live QA of 2.1
 Early planning of ASVS v3.0
 === Hackademics===
@@ Line 90: / Line 98: @@
 :00 - 17:30 Hackademics – Greek, French translation
 We are currently implementing an internationalization feature using I18n which should be ready for our v2.0 release. Our goal is to translate the strings present in the platform in French and Greek. (Since it's already in English and French and Greek are the only other languages the core contributors(and most likely participants) speak. There are approximately 300 strings in the platform. Participants to help are gladly welcome.
 ===AppSensor===
@@ Line 98: / Line 108: @@
   • Publication updated PDF.
 The latest version of the guide is at: https://www.owasp.org/index.php/File:Owasp-appensor-guide-v2.doc
 ===Snakes and Ladders===
@@ Line 107: / Line 119: @@
   • Publish.
 Project website: https://www.owasp.org/index.php/OWASP_Snakes_and_Ladders
 ===OWASP OWTF ===
@@ Line 116: / Line 130: @@
 Brainstorm about new ideas for GSoC 2015
 We expect to introduce students to OWTF and how GSoC would be a valuable experience for them.
 h00 - 13h00: OWASP OWTF Open Forum
@@ Line 127: / Line 143: @@
 What did GSoC give them back?
 We expect to share our experiences with possible future-GSoC students and help them to better understand what it can offer.
 h00 - 17h00: OWASP OWTF Wiki Review
@@ Line 135: / Line 153: @@
 Remove/Update them
 We expect to have an up-to-date wiki by the end of this session or at least a list of known out-of-date information.
 ===OWASP Security Shepherd===
@@ Line 144: / Line 164: @@
 Project website: https://www.owasp.org/index.php/OWASP_Security_Shepherd
 ==Wednesday 20th May==

@@ Line 27: / Line 27: @@
 ==Tuesday 19th May==
 ===9:00-9:30 Welcome to Project Summit 2015===
 ===Project Review Task Force===

@@ Line 8: / Line 8: @@
 Location: AMSTERDAM RAI - 19 & 20 May
-Rooms E103 & E104 (see attached floor plan)
+Rooms E103 & E104 (see attached floor plan):
 *OWTF==>E103

@@ Line 10: / Line 10: @@
 Rooms E103 & E104 (see attached floor plan)
-OWTF==>E103
+*OWTF==>E103
-ZAP==>E103
+*ZAP==>E103
-Hackademic Challenges==>E104
+*Hackademic Challenges==>E104
-ASVS==>E104
+*ASVS==>E104
-Codes of Conduct - Document Review==>E104
+*Codes of Conduct - Document Review==>E104
-AppSensor - Guide Review==>E103
+*AppSensor - Guide Review==>E103
-Snakes and Ladders - Dutch Translation==>E104
+*Snakes and Ladders - Dutch Translation==>E104
-Cornucopia - Video==>E104
+*Cornucopia - Video==>E104
-AppSensor - Dashboard==>E103
+*AppSensor - Dashboard==>E103
-Automated Threats to Web Applications==>E104
+*Automated Threats to Web Applications==>E104
-Code Review==>E104
+*Code Review==>E104
-OpenSAMM==>E103
+*OpenSAMM==>E103
-Security Shepperd==>E104
+*Security Shepperd==>E104
 ==Tuesday 19th May==