Projects/Reports/2013-13-09 - Revision history

Samantha Groves at 03:43, 14 September 2013

2013-09-14T03:43:02Z

Samantha Groves at 03:38, 14 September 2013

2013-09-14T03:38:22Z

Samantha Groves at 03:09, 14 September 2013

2013-09-14T03:09:26Z

Samantha Groves at 03:07, 14 September 2013

2013-09-14T03:07:54Z

Samantha Groves at 03:05, 14 September 2013

2013-09-14T03:05:02Z

Samantha Groves: Created page with "TOC = OWASP Global Projects Report = *'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJucVE&usp=sharing Project Numbers]''' **Activ..."

2013-09-14T02:58:10Z

Created page with "__TOC__ = OWASP Global Projects Report = *'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJucVE&usp=sharing Project Numbers]''' **Activ..."

New page

__TOC__
= OWASP Global Projects Report =

*'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJucVE&usp=sharing Project Numbers]'''
**Active Projects: 135
**Inactive Projects: 103

*'''[https://docs.google.com/spreadsheet/ccc?key=0Amvv_7Gz8Z7TdHZfWGhHZ0Z4UFFwZU42djBXcVVLSlE&usp=sharing New Project Applications]'''
**OWASP JAWS Project

*'''New OWASP Projects'''
**[https://www.owasp.org/index.php/OWASP_Framework_Security_Project OWASP Framework Security Project]
**[https://www.owasp.org/index.php/OWASP_Ruby_on_Rails_Security_Guide_Project OWASP Ruby on Rails Security Guide Project] - Adoption

*'''Projects Under Review'''
**[https://www.owasp.org/index.php/Cheat_Sheets OWASP Cheat Sheets Project]
**[https://www.owasp.org/index.php/OWASP_Java_HTML_Sanitizer_Project OWASP Java HTML Sanitizer Project] (Testing)
**[https://www.owasp.org/index.php/OWASP_Xenotix_XSS_Exploit_Framework Xenotix XSS Exploit Framework]
**[https://www.owasp.org/index.php/OWASP_Cornucopia OWASP Cornucopia Project] (Testing)
**[https://www.owasp.org/index.php/OWASP_Java_Encoder_Project OWASP Java Encoder Project] (Testing)
**Project reviews are on hold until the Technical Advisory group complete and test the [https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHJUSl9rbGtscGJfSGRWVFNUM2JPMlE&usp=sharing updated assessment criteria].

==Currently Working On==

*'''Technical Project Advisors: Work Update'''
**The Advisors and I met this week to discuss their review of the current Assessment criteria.
**We also reviewed Chuck's comments, and discussed each in more detail.
**We made some changes to the original document, and I've put together a revised draft based on our conversation.
**Here is [https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHliVUlMYVdPRWpqajF1bGtnSGtWckE&usp=sharing Ly's original document] with Chuck's comments and my notes.
**Here is the [https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHJUSl9rbGtscGJfSGRWVFNUM2JPMlE&usp=sharing new revised draft].
**We plan to use the revised draft to test 3 projects against the criteria.
***Project being reviewed are the following:
***[https://www.owasp.org/index.php/OWASP_Java_HTML_Sanitizer_Project OWASP Java HTML Sanitizer Project] (Testing)
***[https://www.owasp.org/index.php/OWASP_Cornucopia OWASP Cornucopia Project] (Testing)
***[https://www.owasp.org/index.php/OWASP_Java_Encoder_Project OWASP Java Encoder Project] (Testing)

*'''Women in AppSec: AppSec USA 2013'''
**This week, the team selected three new members for the Women in AppSec Selection Committee.
**These individuals will help review the applications and select the two winners.
**The following people make up the selection committee: Helen Gao, Bev Corwin, Jim Manico, Tom Ryan, Lucas Ferreira, and Samantha Groves.
**Once the selection committee was established, we began discussing the selection criteria in more detail.
**We are now in the third version of the criteria.
**[https://docs.google.com/document/d/1GhskjNVGCfoADVauh-MrWphYoIEySahmzedXhZNdUqY/edit?usp=sharing Women in AppSec Program Selection Criteria: 3rd Draft].
**We plan on beginning our selection process after the 9th of September once the application deadline has passed.
**[https://docs.google.com/forms/d/1WEtInvzlxLDXpTgfXh-E1E7e8H5FRfEOPIaTOizlBpk/viewform Women in AppSec Application Form.]
**The application deadline is Monday, September 09, 2013 at 5pm GMT.
**The deadline for sponsors is Monday, September 09, 2013, as well.

*'''[https://www.owasp.org/index.php/Projects/Internships/Grants_and_Fundraising_Intern Grants & Fundraising Intern]'''
**My search for a Grants & Fundraising intern is coming to an end
**I received four applications for the role, and I have scheduled interviews with each applicant for next week.
**I will make a decision next week, and announce the successful applicant on the 9th of September.
**Application Deadline: Monday August 26 2013 5PM GMT. (Now Closed)
**Interviews Scheduled: First Week of September. (Interviews Scheduled for Next Week)
**Selection Announcement: Monday, September 09th 2013.
**Start Date: Monday, September 16th 2013.
**Internship End Date: Monday, January 13th 2014.

*'''Projects at Conferences'''
**The two conferences left to plan for this year are AppSec LATAM, and AppSec USA.
**I have reached out to two project leaders in the Latin America region, and asked them if they would speak at the conference.
**Both leaders agreed to give a talk at the conference.
**I have been helping them with their travel, accommodation, and conference logistics planning.
**Thank you to Michael Hidalgo and Rafael Gil Larios for representing OWASP Projects at AppSec LATAM.
**AppSec USA planning for projects is going very well.
**I only have one project leader that hasn't booked his travel yet, and only one project leader that hasn't confirmed his talk time slot.
**I hope to have this completed by next week.

*'''Daily Project based queries and requests'''
**This has not changed much since I began the post: questions are very similar in nature.
**Global AppSec questions.
**Funding queries.
**Travel availability.
**Project based administrative help.
**Project status information.
**Several project donation questions.
**Marketing questions.
**Grant funding questions.
**OWASP social media updates.
**What's happening with projects, questions.

==Project Funding Updates==
*'''OWASP OWTF Project: Brucon 5x5 Award'''
# Amount: €5,000.00 (Approx. $6,670.00)
# Status: Awarded. Congratulations, Abraham Aranguren and all involved in the project, for your award.

*'''[https://docs.google.com/file/d/0B1lOCxlYdf1AQm52T2xjX215M28/edit?usp=sharing OWASP OWTF Grant Proposal]'''
# Amount: $55,800 USD
# Status: This proposal is complete, and has been submitted.

*'''[https://docs.google.com/document/d/1cFbmOLqEQQG8eXPrMTlU6JUivgRIacUeL7D599bZm_E/edit?usp=sharing OWASP AppSensor Grant Proposal]'''
# Amount: $15,000 USD
# Status: This proposal is complete, and has been submitted.

*'''[https://docs.google.com/document/d/1Vz7BLFdt1h5AhmW-Zc2B_KlqhzsSkSAaEASML5U4VQs/edit?usp=sharing OWASP OpenSAMM Grant Proposal]'''
# Amount: $112,000 USD
# Status: This proposal is complete, and has been submitted.

*'''[https://docs.google.com/document/d/1MA3TI5ssclxvheV8At_ffu2Fuic55SDpOokS3AOvBUc/edit?usp=sharing OWASP Guidebooks Proposal]'''
# Amount: $25,000 USD
# Status: Awarded. The first payment has been allocated to our project budgets. The second invoice has now been sent to Georgia Tech for payment.
# [https://www.owasp.org/images/1/18/Development_Guide_Project_Gantt.pdf OWASP Development Guide Plan]
# [https://www.owasp.org/images/e/e9/Testing_Guide_Project_Gantt.pdf OWASP Testing Guide Plan]
# [https://www.owasp.org/images/d/da/Code_Review_Project_Gantt.pdf OWASP Code Review Guide Plan]

*'''[https://docs.google.com/document/d/16ZFXaML8C7aDAZdyTMDDg4BzLr1vUTOz9eqmYE8ZW8U/edit?usp=sharing OWASP ESAPI Grant Proposal]'''
# Amount: $25,000 USD
# Status: The ESAPI proposal is still being reviewed.

*'''[https://docs.google.com/document/d/1dBTaRr-yl8wGhGKxacWACznZhCZnJ_sZeAdN-b2xPlw/edit?usp=sharing OWASP ModSecurity CRS Proposal]'''
#Amount: $30,000 USD
#Status: The ModSecurity proposal is still being reviewed.

*'''Google Grants Proposal'''
#Amount: $120,000 USD in Adwords Funds
#Status: Awarded.
#Note: There is no link to show the proposal for this grant. There was a form that was submitted to Google, and we did not receive a record of this form.

*'''European Commission Grant Proposal'''
#Amount: €250,000
#Status: Denied.

*'''Google Summer of Code'''
#Amount: $5,500
#Status: Awarded

*'''Projects breakdown:'''
**4 ZAP Projects: $2,000
**4 OWTF Projects: $2,000
**1 PHP Security Project: $500
**1 Hackademics Project: $500
**1 Modsecurity Project: $500
**Note: Big thank you to Fabio Cerullo for coordinating and managing this award.

*'''Total Funds Awarded: $157,170 USD for 2013.'''

@@ Line 36: / Line 36: @@
 **It is a great example of what we would like OWASP project wiki templates to look like.
 **We decided to use the Cornucopia Project template as a starting point for creating a new wiki template for OWASP Projects.
 *'''Women in AppSec: AppSec USA 2013'''
@@ Line 47: / Line 46: @@
 *'''[http://owasp.blogspot.com/2013/09/meet-our-new-grants-and-fundraising.html Meet our new Grants & Fundraising Intern]'''
 **My search for a Grants & Fundraising intern is now over.
-**Kait Disney-Leugers has been chosen to take on the role.
+**Kait Disney-Leugers has been chosen to take on the internship.
 **I am currently setting her up with all of her accounts, and I have sent her an orientation packet.
 **We will be having a phone based orientation on Monday.
@@ Line 60: / Line 59: @@
 *'''OWASP Global Marketing'''
-**I spoke with out graphic design contractor this Monday, and we worked out a schedule of delivery for the final pieces.
+**I spoke with our graphic design contractor this Monday, and we worked out a schedule of delivery for the final pieces.
 **Brand Guidelines (we just need the final pdf): Delivery by Monday, Sept. 16th
 **Brand Reference Sheet: Delivery by Monday, Sept. 16th

@@ Line 13: / Line 13: @@
 **[https://www.owasp.org/index.php/OWASP_Global_Chapter_Meetings_Project OWASP Global Chapter Meetings Project]
 **[https://www.owasp.org/index.php/OWASP_JAWS_Project OWASP JAWS Project]
 *'''Projects Under Review'''

@@ Line 25: / Line 25: @@
 *'''Technical Project Advisors: Work Update'''
-**The Advisors and I met this week to discuss their review of the current Assessment criteria.
+**The Advisors and I met this week to discuss their test reviews of the following projects:
-**We also reviewed Chuck's comments, and discussed each in more detail.
+***[https://www.owasp.org/index.php/OWASP_Java_HTML_Sanitizer_Project OWASP Java HTML Sanitizer Project] (Complete)
-**We made some changes to the original document, and I've put together a revised draft based on our conversation.
+***[https://www.owasp.org/index.php/OWASP_Cornucopia OWASP Cornucopia Project] (Complete)
-**Here is [https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHliVUlMYVdPRWpqajF1bGtnSGtWckE&usp=sharing Ly's original document] with Chuck's comments and my notes.
+***[https://www.owasp.org/index.php/OWASP_Java_Encoder_Project OWASP Java Encoder Project] (Complete)
-**Here is the [https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHJUSl9rbGtscGJfSGRWVFNUM2JPMlE&usp=sharing new revised draft].
+**We went into a good amount of detail describing our experiences with the test assessments during our meeting.
-**We plan to use the revised draft to test 3 projects against the criteria.
+**We primarily found major redundancies throughout the assessment questions on both types of assessment. (Health and deliverable review)
-***Project being reviewed are the following:
+**We concluded that we will need to remove the redundancies, and create another version of the criteria that we can then re-test using the same projects above.
-***[https://www.owasp.org/index.php/OWASP_Java_HTML_Sanitizer_Project OWASP Java HTML Sanitizer Project] (Testing)
+**We also discussed the inconsistency between all three project templates.
-***[https://www.owasp.org/index.php/OWASP_Cornucopia OWASP Cornucopia Project] (Testing)
+**We all agreed that the Cornucopia Project template is very visually appealing and easy to read.
-***[https://www.owasp.org/index.php/OWASP_Java_Encoder_Project OWASP Java Encoder Project] (Testing)
+**It is a great example of what we would like OWASP project wiki templates to look like.
 *'''Women in AppSec: AppSec USA 2013'''
-**This week, the team selected three new members for the Women in AppSec Selection Committee.
+**The application period is now closed for the Women in AppSec Program for 2013.
-**These individuals will help review the applications and select the two winners.
+**We had a total of 36 respondents that applied to the program.
-**The following people make up the selection committee: Helen Gao, Bev Corwin, Jim Manico, Tom Ryan, Lucas Ferreira, and Samantha Groves.
+**We are now in the process of collecting reference letters for all of the applicants.
-**Once the selection committee was established, we began discussing the selection criteria in more detail.
+**I am also creating grading sheets so the selection team can split the initial grading of the candidates.
-**We are now in the third version of the criteria.
+**Candidates will be invited for a telephone interview with the selection team based on their scores.
-*'''[https://www.owasp.org/index.php/Projects/Internships/Grants_and_Fundraising_Intern Grants & Fundraising Intern]'''
+*'''[http://owasp.blogspot.com/2013/09/meet-our-new-grants-and-fundraising.html Meet our new Grants & Fundraising Intern]'''
-**My search for a Grants & Fundraising intern is coming to an end
+**My search for a Grants & Fundraising intern is now over.
-**I received four applications for the role, and I have scheduled interviews with each applicant for next week.
+**Kait Disney-Leugers has been chosen to take on the role.
-**I will make a decision next week, and announce the successful applicant on the 9th of September.
+**I am currently setting her up with all of her accounts, and I have sent her an orientation packet.
-**Application Deadline: Monday August 26 2013 5PM GMT. (Now Closed)
+**We will be having a phone based orientation on Monday.
 **Start Date: Monday, September 16th 2013.
 **Internship End Date: Monday, January 13th 2014.
 *'''Projects at Conferences'''
-**The two conferences left to plan for this year are AppSec LATAM, and AppSec USA.
+**The schedule for our Project Summit talks is now complete, and it is now updated on the [http://appsecusa.org/2013/schedule/ AppSec USA website].
-**I have reached out to two project leaders in the Latin America region, and asked them if they would speak at the conference.
+**We now have 10 projects participating in the summit this year.
-**Both leaders agreed to give a talk at the conference.
+**The O2 Project was the final addition to this year's lineup.
-**I have been helping them with their travel, accommodation, and conference logistics planning.
+**There is now only one project leader that is left to book his travel.
-**Thank you to Michael Hidalgo and Rafael Gil Larios for representing OWASP Projects at AppSec LATAM.
-**AppSec USA planning for projects is going very well.
+*'''OWASP Global Marketing'''
-**I only have one project leader that hasn't booked his travel yet, and only one project leader that hasn't confirmed his talk time slot.
+**I spoke with out graphic design contractor this Monday, and we worked out a schedule of delivery for the final pieces.
-**I hope to have this completed by next week.
+**Brand Guidelines (we just need the final pdf): Delivery by Monday, Sept. 16th
 *'''Daily Project based queries and requests'''

@@ Line 7: / Line 7: @@
 *'''[https://docs.google.com/spreadsheet/ccc?key=0Amvv_7Gz8Z7TdHZfWGhHZ0Z4UFFwZU42djBXcVVLSlE&usp=sharing New Project Applications]'''
-**OWASP JAWS Project
+**OWASP This I Believe (Security) Project
 *'''New OWASP Projects'''
-**[https://www.owasp.org/index.php/OWASP_Framework_Security_Project OWASP Framework Security Project]
+**[https://www.owasp.org/index.php/OWASP_Media_Project OWASP Media Project]
-**[https://www.owasp.org/index.php/OWASP_Ruby_on_Rails_Security_Guide_Project OWASP Ruby on Rails Security Guide Project] - Adoption
+**[https://www.owasp.org/index.php/OWASP_Global_Chapter_Meetings_Project OWASP Global Chapter Meetings Project]
 *'''Projects Under Review'''

@@ Line 3: / Line 3: @@
 *'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJucVE&usp=sharing Project Numbers]'''
-**Active Projects: 135
+**Active Projects: 138
 **Inactive Projects: 103