Projects/Reports/2013-23-08 - Revision history

Samantha Groves at 02:56, 24 August 2013

2013-08-24T02:56:09Z

Samantha Groves at 02:52, 24 August 2013

2013-08-24T02:52:49Z

Samantha Groves at 02:25, 24 August 2013

2013-08-24T02:25:02Z

Samantha Groves at 02:01, 24 August 2013

2013-08-24T02:01:36Z

Samantha Groves at 01:53, 24 August 2013

2013-08-24T01:53:23Z

Samantha Groves at 01:49, 24 August 2013

2013-08-24T01:49:04Z

Samantha Groves: Created page with "TOC = OWASP Global Projects Report = *'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJucVE&usp=sharing Project Numbers]''' **Activ..."

2013-08-24T01:43:24Z

Created page with "__TOC__ = OWASP Global Projects Report = *'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJucVE&usp=sharing Project Numbers]''' **Activ..."

New page

__TOC__
= OWASP Global Projects Report =

*'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJucVE&usp=sharing Project Numbers]'''
**Active Projects: 169
**Inactive Projects: 67

*'''New Projects'''
**[https://www.owasp.org/index.php/OWASP_SecLists_Project OWASP SecLists Project]

*'''Projects Under Review'''
**[https://www.owasp.org/index.php/Cheat_Sheets OWASP Cheat Sheets Project]
**[https://www.owasp.org/index.php/OWASP_Java_HTML_Sanitizer_Project OWASP Java HTML Sanitizer Project]
**[https://www.owasp.org/index.php/OWASP_Xenotix_XSS_Exploit_Framework Xenotix XSS Exploit Framework]
**[https://www.owasp.org/index.php/OWASP_Cornucopia OWASP Cornucopia Project]
**[https://www.owasp.org/index.php/OWASP_Java_Encoder_Project OWASP Java Encoder Project]
**Project reviews are on hold until the Technical Advisory group complete and test the [https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHliVUlMYVdPRWpqajF1bGtnSGtWckE&usp=sharing updated assessment criteria].

==Currently Working On==

*'''Project Summit: AppSec USA 2013'''
**I continue to plan the logistics for the project summit taking place at AppSec USA this year.
**We are now closer to finalizing the travel arrangements for each project leader.
**We are in the process of organizing the schedule of project talks for the conference, as well.
**The schedule is filling up, and I hope to have it finalized soon so we can update the conference schedule.
**The Project Summit will be taking place in the Sky Room on both conference days.

*'''Women in AppSec: AppSec USA 2013'''
**The Women in AppSec Planning team is now putting together a process to help select our final candidates.
**Additionally, we are putting together a selection committee to help review and select the winning candidates.
**We plan on beginning our selection process after the 9th of September once the application deadline has passed.
**[https://docs.google.com/forms/d/1WEtInvzlxLDXpTgfXh-E1E7e8H5FRfEOPIaTOizlBpk/viewform Women in AppSec Application Form.]
**The application deadline is Monday, September 09, 2013 at 5pm GMT.
**The deadline for sponsors is Monday, September 09, 2013, as well.

*'''Projects at Conferences'''
**I have been working closely with the local event planners for AppSec EU and AppSec LATAM on this.
**We are sending one project leader to Germany next week to present his project at AppSec EU.
**I have been helping him with his travel and accommodation logistics for the conference, and he is now set to go.
**Additionally, I helped source two project leaders for the AppSec LATAM conference.
**They will be speaking about their projects at the event in October.
**I am helping them book their travel and accommodation for the event, as well.

*'''Grants for Projects'''
**I worked on three grant proposals for three of our projects this week.
**One was for the OWASP AppSensor Project, the second was for OpenSAMM, and the third was for the OWTF Project.
**The project teams did an excellent job of putting their proposals and project plans together.
**The deadline was close, but we managed to get all of them submitted in time.
**I just want to say thank you to all of the project leaders and contributors that worked on these grant proposals this week.
**They are very time consuming, and I am grateful we all tackled them on as a team.
**Please see the Project Funding Updates section below for a more detailed look at each proposal.

*'''Daily Project based queries and requests'''
**This has not changed much since I began the post: questions are very similar in nature.
**Global AppSec questions.
**Funding queries.
**Travel availability.
**Project based administrative help.
**Project status information.
**Several project donation questions.
**Marketing questions.
**Grant funding questions.
**OWASP social media updates.
**What's happening with projects, questions.

==Project Funding Updates==
*'''OWASP OWTF Project: Brucon 5x5 Award'''
# Amount: €5,000.00 (Approx. $6,670.00)
# Status: Awarded. Congratulations, Abraham Aranguren and all involved in the project, for your award.

*'''[https://docs.google.com/file/d/0B1lOCxlYdf1AQm52T2xjX215M28/edit?usp=sharing OWASP OWTF Grant Proposal]'''
# Amount: $55,800 USD
# Status: This proposal is complete, and has been submitted.

*'''[https://docs.google.com/document/d/1cFbmOLqEQQG8eXPrMTlU6JUivgRIacUeL7D599bZm_E/edit?usp=sharing OWASP AppSensor Grant Proposal]'''
# Amount: $15,000 USD
# Status: This proposal is complete, and has been submitted.

*'''[https://docs.google.com/document/d/1Vz7BLFdt1h5AhmW-Zc2B_KlqhzsSkSAaEASML5U4VQs/edit?usp=sharing OWASP OpenSAMM Grant Proposal]'''
# Amount: $112,000 USD
# Status: This proposal is complete, and has been submitted.

*'''[https://docs.google.com/document/d/1MA3TI5ssclxvheV8At_ffu2Fuic55SDpOokS3AOvBUc/edit?usp=sharing OWASP Guidebooks Proposal]'''
# Amount: $25,000 USD
# Status: Awarded. The first payment has been allocated to our project budgets. The second invoice has now been sent to Georgia Tech for payment.
# [https://www.owasp.org/images/1/18/Development_Guide_Project_Gantt.pdf OWASP Development Guide Plan]
# [https://www.owasp.org/images/e/e9/Testing_Guide_Project_Gantt.pdf OWASP Testing Guide Plan]
# [https://www.owasp.org/images/d/da/Code_Review_Project_Gantt.pdf OWASP Code Review Guide Plan]

*'''[https://docs.google.com/document/d/16ZFXaML8C7aDAZdyTMDDg4BzLr1vUTOz9eqmYE8ZW8U/edit?usp=sharing OWASP ESAPI Grant Proposal]'''
# Amount: $25,000 USD
# Status: The ESAPI proposal is still being reviewed.

*'''[https://docs.google.com/document/d/1dBTaRr-yl8wGhGKxacWACznZhCZnJ_sZeAdN-b2xPlw/edit?usp=sharing OWASP ModSecurity CRS Proposal]'''
#Amount: $30,000 USD
#Status: The ModSecurity proposal is still being reviewed.

*'''Google Grants Proposal'''
#Amount: $120,000 USD in Adwords Funds
#Status: Awarded.
#Note: There is no link to show the proposal for this grant. There was a form that was submitted to Google, and we did not receive a record of this form.

*'''European Commission Grant Proposal'''
#Amount: €250,000
#Status: Denied.

*'''Google Summer of Code'''
#Amount: $5,500
#Status: Awarded

*'''Projects breakdown:'''
**4 ZAP Projects: $2,000
**4 OWTF Projects: $2,000
**1 PHP Security Project: $500
**1 Hackademics Project: $500
**1 Modsecurity Project: $500
**Note: Big thank you to Fabio Cerullo for coordinating and managing this award.

*'''Total Funds Awarded: $157,170 USD for 2013.'''

@@ Line 52: / Line 52: @@
 *'''Projects in Salesforce'''
 **I worked closely with Kate this week to figure out a way to better integrate our project data into Salesforce.
-**The issue we are having is many of the primary activities a Project Leader takes part in, happen outside of the wiki.
+**The issue we are having is that many of the primary activities a Project Leader takes part in, happen outside of the wiki and Salesforce.
 **Moreover, project leaders do not have access to the information in Salesforce about their project.
 **This means that project leaders cannot update, add, or delete information about their projects.
 **The end result is that I have to make duplicate data lists, one in Salesforce and one in Google Docs where Leaders can have access to it.
-**Kate is looking into several applications that can help eliminate this duplication, and help with my workflow.
+**Kate is looking into several applications that can help eliminate this duplication, and help with our workflow.
 *'''Daily Project based queries and requests'''

@@ Line 40: / Line 40: @@
 **The deadline for sponsors is Monday, September 09, 2013, as well.
-*'''Fundraising & Grant Writing Intern'''
+*'''[https://www.owasp.org/index.php/Projects/Internships/Grants_and_Fundraising_Intern Grants & Fundraising Intern]'''
-**I have been working closely with the local event planners for AppSec EU and AppSec LATAM on this.
+**I continue to search for a Grants & Fundraising intern.
-**We are sending one project leader to Germany next week to present his project at AppSec EU.
+**I currently have 4 applicants for the role, but I would like to get a few more before the deadline.
-**I have been helping him with his travel and accommodation logistics for the conference, and he is now set to go.
+**Application Deadline: Monday August 26 2013 5PM GMT.
-**Additionally, I helped source two project leaders for the AppSec LATAM conference.
+**Interviews Scheduled: First Week of September.
-**They will be speaking about their projects at the event in October.
+**Selection Announcement: Monday, September 09th 2013.
-**I am helping them book their travel and accommodation for the event, as well.
+**Start Date: Monday, September 16th 2013.
 *'''Projects in Salesforce'''
-**I worked on three grant proposals for three of our projects this week.
+**I worked closely with Kate this week to figure out a way to better integrate our project data into Salesforce.
-**One was for the OWASP AppSensor Project, the second was for OpenSAMM, and the third was for the OWTF Project.
+**The issue we are having is many of the primary activities a Project Leader takes part in, happen outside of the wiki.
-**The project teams did an excellent job of putting their proposals and project plans together.
+**Moreover, project leaders do not have access to the information in Salesforce about their project.
-**The deadline was close, but we managed to get all of them submitted in time.
+**This means that project leaders cannot update, add, or delete information about their projects.
-**I just want to say thank you to all of the project leaders and contributors that worked on these grant proposals this week.
+**The end result is that I have to make duplicate data lists, one in Salesforce and one in Google Docs where Leaders can have access to it.
-**They are very time consuming, and I am grateful we all tackled them on as a team.
+**Kate is looking into several applications that can help eliminate this duplication, and help with my workflow.
 *'''Daily Project based queries and requests'''

@@ Line 8: / Line 8: @@
 *'''[https://docs.google.com/spreadsheet/ccc?key=0Amvv_7Gz8Z7TdHZfWGhHZ0Z4UFFwZU42djBXcVVLSlE&usp=sharing New Project Applications]'''
 **PHP Portscanner
 *'''Projects Under Review'''

@@ Line 20: / Line 20: @@
 ==Currently Working On==
-*'''Project Audit'''
+*'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdEdCYVJpdmZHaWJYZ055WHROa19qN3c&usp=sharing Active Project Audit]'''
-**I continue to plan the logistics for the project summit taking place at AppSec USA this year.
+**The Project Audit is now complete.
-**We are now closer to finalizing the travel arrangements for each project leader.
+**I reached out to every project leader listed in our inventory, and asked them to confirm the status of their project.
-**We are in the process of organizing the schedule of project talks for the conference, as well.
+**The majority of our Leaders responded, and their project activity status was marked accordingly.
-**The schedule is filling up, and I hope to have it finalized soon so we can update the conference schedule.
+**Those that did not respond were sent 3 messages before their project was marked inactive.
-**The Project Summit will be taking place in the Sky Room on both conference days.
+**Due to the audit, the number of active OWASP Projects in our inventory went down from 169 to 132.
 *'''Women in AppSec: AppSec USA 2013'''
-**The Women in AppSec Planning team is now putting together a process to help select our final candidates.
+**This week, I met with Dawn-Marie Hutchinson, Head of Information Security at Urban Outfitters.
-**Additionally, we are putting together a selection committee to help review and select the winning candidates.
+**We spoke about her participation in the Women in AppSec Panel.
 **We plan on beginning our selection process after the 9th of September once the application deadline has passed.
 **[https://docs.google.com/forms/d/1WEtInvzlxLDXpTgfXh-E1E7e8H5FRfEOPIaTOizlBpk/viewform Women in AppSec Application Form.]

@@ Line 3: / Line 3: @@
 *'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJucVE&usp=sharing Project Numbers]'''
-**Active Projects: 169
+**Active Projects: 132
-**Inactive Projects: 67
+**Inactive Projects: 104
-*'''New Projects'''
+*'''[https://docs.google.com/spreadsheet/ccc?key=0Amvv_7Gz8Z7TdHZfWGhHZ0Z4UFFwZU42djBXcVVLSlE&usp=sharing New Project Applications]'''
-**[https://www.owasp.org/index.php/OWASP_SecLists_Project OWASP SecLists Project]
+**PHP Portscanner
 *'''Projects Under Review'''