Projects/Reports/2013-07-06 - Revision history

Samantha Groves at 01:15, 8 June 2013

2013-06-08T01:15:27Z

Samantha Groves at 01:14, 8 June 2013

2013-06-08T01:14:10Z

Samantha Groves at 01:07, 8 June 2013

2013-06-08T01:07:43Z

Samantha Groves at 01:00, 8 June 2013

2013-06-08T01:00:29Z

Samantha Groves at 00:57, 8 June 2013

2013-06-08T00:57:45Z

Samantha Groves: Created page with "TOC = OWASP Global Projects Report = *'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJucVE&usp=sharing Project Numbers]''' **Activ..."

2013-06-08T00:56:36Z

Created page with "__TOC__ = OWASP Global Projects Report = *'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJucVE&usp=sharing Project Numbers]''' **Activ..."

New page

__TOC__
= OWASP Global Projects Report =

*'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJucVE&usp=sharing Project Numbers]'''
**Active Projects: 158
**Inactive Projects: 67

*'''[https://docs.google.com/spreadsheet/ccc?key=0Amvv_7Gz8Z7TdHZfWGhHZ0Z4UFFwZU42djBXcVVLSlE&usp=sharing Project Applications]'''
**VCR Project
**Windows Binary Executable Files Security Checks
**Wordpress Security Checklist
**Simple Host Base Incidence Detection System
**Chat Application
**Supporting Legacy Web Applications in the Current Environment

*'''Projects Under Review'''
**[https://www.owasp.org/index.php/Cheat_Sheets OWASP Cheat Sheets Project]
**[https://www.owasp.org/index.php/OWASP_Java_HTML_Sanitizer_Project OWASP Java HTML Sanitizer Project]
**[https://www.owasp.org/index.php/OWASP_Xenotix_XSS_Exploit_Framework Xenotix XSS Exploit Framework]
**Project reviews are on hold until we can fill the [https://www.owasp.org/index.php/Projects/Reviews_Management_Proposal_2013 Technical Project Advisor] [http://owasp.force.com/volunteers/GW_Volunteers__VolunteersJobListing?campaignid=701U0000000AUtE volunteer roles].

==Currently Working On==

*'''OWASP Projects at AppSec Conferences 2013'''
**Planning continues for the project event modules for AppSec USA 2013.
**I continue to work with our project summit participating leaders to work out costs and logistics for their attendance.
**I am in the process of putting together our project leader workshop materials.
**The workshop will be a 45 - 50 minute interactive presentation for current and potential OWASP Project Leaders.
**It will take place at the AppSec USA 2013 conference in New York.
**I will continue to provide support to the local event planning team for AppSec EU, as needed.

*'''Women in Security: AppSec USA 2013'''
**The team has finished a first draft of the Sponsorship Document.
**The plan is to reach out to different organizations for sponsorship.
**You can find more information on the [http://appsecusa.org/2013/activities/owasp-women-in-application-security-appsec-program/ AppSec USA website].
**We are currently attempting to raise $3,000.00 for each winner.
**We plan on having 2 winners for 2013.
**The total amount we are requesting is $6,000.00 to cover conference fee, training fee, travel and accommodation for both winners.
**We are working hard to make this a possibility for our 2 potential winners.

*'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdEdCYVJpdmZHaWJYZ055WHROa19qN3c&usp=sharing Determining Active Project Status]'''
**This is a status update on this initiative.
**I am reaching out to each leader individually to confirm these pieces of data for all 154 projects.
**Flagship projects are completed.
**Labs are completed.
**Incubator projects are now in the 3rd phase of 4 phases.

*'''Technical Project Advisory Roles'''
**I am currently on the 1st stage of the interview process for each candidate.
**I have created job descriptions for each role, and I have had those roles posted for over a month.
**We have had a good amount of candidates apply for each role.
**I have sent out e-mails asking each candidate to answer 3 questions regarding their interest in these roles.
**I will reach out to those individuals that responded to my request by next week.

*'''Marketing Phase 3 Update'''
**The marketing deliverables are going smoothly.
**There is quite a bit of work to be done during this phase as this is where the back and forth approval process takes place.
**The Ops Team is diligently working on this phase with Sisterworks Publishing and Design Foundry.
**At the moment, we are working on finalizing the copy for several pieces of collateral that are scheduled to be designed.
**[https://www.owasp.org/images/7/7c/OWASP_Background-Research_Phase1_Final_%281%29.pdf Phase 1 Deliverable]
**[https://www.owasp.org/images/c/c5/OWASP_Recommendations-Presentation2-April24.pdf Phase 2 Deliverable]
***Note: Phase 2 Deliverable has recommendations made by Sisterworks and Design Foundry based on their research.
***We are not necessarily moving forward with these recommendations towards implementation.
***Sisterworks and Design Foundry are helping with our brand consistency and collateral design.

*'''Strategic Goals Presentation'''
**Ludovic petit has requested that we put together a presentation that the community can use to communicate our 2013 Strategic Goals.
**Sarah and I have put together a first draft of the deck.
**We plan to add to it over the coming weeks to make certain we encompass the thinking behind each goals for this year.
**[https://www.owasp.org/images/1/13/OWASP_2013_Strategic_Goals.pdf 2013 Strategic Goals draft]

*'''Personal Development'''
**I am currently reading ''Board Member Orientation: The Concise and Complete Guide to Non-Profit Board Service'' by Michael E. Batts.
**I am still taking my online course from Coursera.
**The course topic is Information Security and Risk Management in Context.
**I am currently in week 6 of the course.
**Additionally, I am going to take a week long course in late June in the UK.
**The course topic is Intellectual Property Strategy.
**I will write a report on my learnings for the community after the course ends.

*'''Daily Project based queries and requests'''
**This has not changed much since I began the post: questions are very similar in nature.
**Global AppSec questions.
**Funding queries.
**Travel availability.
**Project based administrative help.
**Project status information.
**Several project donations questions.
**Marketing questions.
**Grant funding questions.
**OWASP Social Media Updates.
**What's happening with projects, questions.

==Grants Updates==
*'''[https://docs.google.com/document/d/1MA3TI5ssclxvheV8At_ffu2Fuic55SDpOokS3AOvBUc/edit?usp=sharing OWASP Guidebooks Proposal]'''
# Amount: $25,000 USD
# Status: The first payment has been allocated to our project budgets.
# [https://www.owasp.org/images/1/18/Development_Guide_Project_Gantt.pdf OWASP Development Guide Plan]
# [https://www.owasp.org/images/e/e9/Testing_Guide_Project_Gantt.pdf OWASP Testing Guide Plan]
# [https://www.owasp.org/images/d/da/Code_Review_Project_Gantt.pdf OWASP Code Review Guide Plan]

*'''[https://docs.google.com/document/d/16ZFXaML8C7aDAZdyTMDDg4BzLr1vUTOz9eqmYE8ZW8U/edit?usp=sharing OWASP ESAPI Grant Proposal]'''
# Amount: $25,000 USD
# Status: The ESAPI proposal is still being reviewed.

*'''[https://docs.google.com/document/d/1dBTaRr-yl8wGhGKxacWACznZhCZnJ_sZeAdN-b2xPlw/edit?usp=sharing OWASP ModSecurity CRS Proposal]'''
#Amount: $30,000 USD
#Status: The ModSecurity proposal is still being reviewed.

*'''Google Grants Proposal'''
#Amount: $120,000 USD in Adwords Funds
#Status: We now have a better idea of the initiatives and tasks we must undertake to better leverage this award. We will discuss possible solutions during our Mid-Term (6-12 month) marketing planning.
#Note: There is no link to show the proposal for this grant. There was a form that was submitted to Google, and we did not receive a record of this form.

*'''European Commission Grant Proposal'''
#Amount: €250,000
#Status: This proposal has been completed and submitted.

*'''Total Grant Funds Awarded: $145,000 USD for 2013.'''

@@ Line 51: / Line 51: @@
 **We are at the final stages of of our copywriting work with Sisterworks Publishing.
 **Design Foundry is now starting their first drafts of several pieces of marketing collateral.
-**We will work with the designer to finalise these designs for community review.
+**We will work with the designer to finalize these designs for community review.
 **[https://www.owasp.org/images/7/7c/OWASP_Background-Research_Phase1_Final_%281%29.pdf Phase 1 Deliverable]
 **[https://www.owasp.org/images/c/c5/OWASP_Recommendations-Presentation2-April24.pdf Phase 2 Deliverable]

@@ Line 10: / Line 10: @@
 *'''New Projects'''
-**Supporting Legacy Web Applications in the Current Environment
+**[https://www.owasp.org/index.php/OWASP_Windows_Binary_Executable_Files_Security_Checks_Project OWASP Windows Binary Executable Files Security Checks Project]
 *'''Projects Under Review'''

@@ Line 25: / Line 25: @@
 *'''OWASP Projects at AppSec Conferences 2013'''
 **Planning continues for the project event modules for AppSec USA 2013.
-**I continue to work with our project summit participating leaders to work out costs and logistics for their attendance.
+**I continue to work with our project summit participants to help plan the logistics for their participation.
-**I am in the process of putting together our project leader workshop materials.
+**We are meeting next week to discuss roadmaps and goals for each project.
-**The workshop will be a 45 - 50 minute interactive presentation for current and potential OWASP Project Leaders.
+**I am still working on the Project Leader Workshop materials.
 **I will continue to provide support to the local event planning team for AppSec EU, as needed.
 *'''Women in Security: AppSec USA 2013'''
-**The team has finished a first draft of the Sponsorship Document.
+**The team has now finalized the copy for our sponsorship document.
 **The plan is to reach out to different organizations for sponsorship.
 **You can find more information on the [http://appsecusa.org/2013/activities/owasp-women-in-application-security-appsec-program/ AppSec USA website].
@@ Line 41: / Line 41: @@
 *'''Technical Project Advisory Roles'''
-**I am currently on the 1st stage of the interview process for each candidate.
+**I am at the transition stage between the first and second stages of the interview process for each candidate.
 **I have created job descriptions for each role, and I have had those roles posted for over a month.
 **We have had a good amount of candidates apply for each role.
 **I have sent out e-mails asking each candidate to answer 3 questions regarding their interest in these roles.
-**I will reach out to those individuals that responded to my request by next week.
+**I have now had 10 responses from candidates.
 *'''Marketing Phase 3 Update'''

@@ Line 11: / Line 11: @@
 *'''New Projects'''
 **[https://www.owasp.org/index.php/OWASP_Windows_Binary_Executable_Files_Security_Checks_Project OWASP Windows Binary Executable Files Security Checks Project]
-**{https://www.owasp.org/index.php/OWASP_Wordpress_Security_Checklist_Project OWASP Wordpress Security Checklist Project]
+**[https://www.owasp.org/index.php/OWASP_Wordpress_Security_Checklist_Project OWASP Wordpress Security Checklist Project]
-**{https://www.owasp.org/index.php/OWASP_Simple_Host_Base_Incidence_Detection_System_Project OWASP Simple Host Base Incidence Detection System Project]
+**[https://www.owasp.org/index.php/OWASP_Simple_Host_Base_Incidence_Detection_System_Project OWASP Simple Host Base Incidence Detection System Project]
-**{https://www.owasp.org/index.php/OWASP_SeraphimDroid_Project OWASP SeraphimDroid Project]
+**[https://www.owasp.org/index.php/OWASP_SeraphimDroid_Project OWASP SeraphimDroid Project]
 *'''Projects Under Review'''
@@ Line 39: / Line 39: @@
 **The total amount we are requesting is $6,000.00 to cover conference fee, training fee, travel and accommodation for both winners.
 **We are working hard to make this a possibility for our 2 potential winners.
 *'''Technical Project Advisory Roles'''
@@ Line 55: / Line 48: @@
 *'''Marketing Phase 3 Update'''
-**The marketing deliverables are going smoothly.
+**We are at the final stages of of our copywriting work with Sisterworks Publishing.
-**There is quite a bit of work to be done during this phase as this is where the back and forth approval process takes place.
+**Design Foundry is now starting their first drafts of several pieces of marketing collateral.
-**The Ops Team is diligently working on this phase with Sisterworks Publishing and Design Foundry.
+**We will work with the designer to finalise these designs for community review.
 **[https://www.owasp.org/images/7/7c/OWASP_Background-Research_Phase1_Final_%281%29.pdf Phase 1 Deliverable]
 **[https://www.owasp.org/images/c/c5/OWASP_Recommendations-Presentation2-April24.pdf Phase 2 Deliverable]
@@ Line 64: / Line 56: @@
 ***We are not necessarily moving forward with these recommendations towards implementation.
 ***Sisterworks and Design Foundry are helping with our brand consistency and collateral design.
 *'''Personal Development'''
-**I am currently reading ''Board Member Orientation: The Concise and Complete Guide to Non-Profit Board Service'' by Michael E. Batts.
+**I am half way through reading ''Board Member Orientation: The Concise and Complete Guide to Non-Profit Board Service'' by Michael E. Batts.
 **I am still taking my online course from Coursera.
 **The course topic is Information Security and Risk Management in Context.
 **Additionally, I am going to take a week long course in late June in the UK.
 **The course topic is Intellectual Property Strategy.
 **I will write a report on my learnings for the community after the course ends.
 *'''Daily Project based queries and requests'''

@@ Line 7: / Line 7: @@
 *'''[https://docs.google.com/spreadsheet/ccc?key=0Amvv_7Gz8Z7TdHZfWGhHZ0Z4UFFwZU42djBXcVVLSlE&usp=sharing Project Applications]'''
-**VCR Project
+**Supporting Legacy Web Applications in the Current Environment
-**Windows Binary Executable Files Security Checks
-**Wordpress Security Checklist
+*'''New Projects'''
 **Supporting Legacy Web Applications in the Current Environment