Projects/Reports/2013-28-06 - Revision history

Samantha Groves at 23:08, 28 June 2013

2013-06-28T23:08:47Z

Samantha Groves at 21:57, 28 June 2013

2013-06-28T21:57:00Z

Samantha Groves at 21:49, 28 June 2013

2013-06-28T21:49:54Z

Samantha Groves at 21:47, 28 June 2013

2013-06-28T21:47:32Z

Samantha Groves at 21:25, 28 June 2013

2013-06-28T21:25:42Z

Samantha Groves at 21:09, 28 June 2013

2013-06-28T21:09:14Z

Samantha Groves at 21:08, 28 June 2013

2013-06-28T21:08:31Z

Samantha Groves at 21:05, 28 June 2013

2013-06-28T21:05:31Z

Samantha Groves: Created page with "TOC = OWASP Global Projects Report = *'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJucVE&usp=sharing Project Numbers]''' **Activ..."

2013-06-28T20:57:49Z

Created page with "__TOC__ = OWASP Global Projects Report = *'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJucVE&usp=sharing Project Numbers]''' **Activ..."

New page

__TOC__
= OWASP Global Projects Report =

*'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJucVE&usp=sharing Project Numbers]'''
**Active Projects: 159
**Inactive Projects: 67

*'''[https://docs.google.com/spreadsheet/ccc?key=0Amvv_7Gz8Z7TdHZfWGhHZ0Z4UFFwZU42djBXcVVLSlE&usp=sharing Project Applications]'''
**Unmaskme Project

*'''Projects Under Review'''
**[https://www.owasp.org/index.php/Cheat_Sheets OWASP Cheat Sheets Project]
**[https://www.owasp.org/index.php/OWASP_Java_HTML_Sanitizer_Project OWASP Java HTML Sanitizer Project]
**[https://www.owasp.org/index.php/OWASP_Xenotix_XSS_Exploit_Framework Xenotix XSS Exploit Framework]
**Project reviews are on hold until we can fill the [https://www.owasp.org/index.php/Projects/Reviews_Management_Proposal_2013 Technical Project Advisor] [http://owasp.force.com/volunteers/GW_Volunteers__VolunteersJobListing?campaignid=701U0000000AUtE volunteer roles].

==Currently Working On==

*'''OWASP Project Summit: AppSec USA 2013'''
**Planning continues for the project event modules for AppSec USA 2013.
**I continue to work with our Project Summit participants to help plan the logistics for their participation.
**I had to cancel our Project Summit meeting due to scheduling conflicts.
**However, I created a mailing list, and added all participating Leaders to the list.
**I sent out an announcement e-mail with instructions on next steps along with action items for each project team.
**Fabio Cerullo, Martin Knobloch, and I will be providing Scrum Master support during the Project Summit.
**We are still in the process of planning logistics for these roles.
**I am still working on the Project Leader Workshop materials.
**I will continue to provide support to the local event planning team for AppSec EU, as needed.

*'''Women in Security: AppSec USA 2013'''
**The team has now finalized the copy for our sponsorship document, and our AppSec USA designer has sent us back a branded flyer.
**[https://www.owasp.org/images/e/ed/Women-in-appsec-sponsorship.pdf Women in Security Sponsorship Document: AppSec USA 2013]
**The plan is to reach out to different organizations for sponsorship.
**We have also asked our program volunteers to seek funding internally.
**You can find more information on the [http://appsecusa.org/2013/activities/owasp-women-in-application-security-appsec-program/ AppSec USA website].
**The total amount we are requesting is $6,000.00 to cover conference fee, training fee, travel and accommodation for both winners.
**We are working hard to make this a possibility for our 2 potential winners.

*'''Technical Project Advisory Roles'''
**I am at the second stage of the interview process for each candidate.
**I have created job descriptions for each role, and I had those roles posted for over a month.
**I had a good amount of candidates apply for each role.
**I have sent out e-mails asking each candidate to answer 3 questions regarding their interest in these roles.
**10 candidates responded to these questions.
**I went ahead and scheduled interviews with 7 candidates for this week, and I have 2 more interviews scheduled for the week of the 24th.
**I interviewed 7 candidates this week.

*'''Marketing Phase 3 Update'''
**We are at the final stages of our copywriting work with Sisterworks Publishing.
**Design Foundry has now started designing their first drafts of our remaining marketing collateral.
**We will work with both companies to finalize these designs for community review.
**We will ask for community feedback once we get a more finalized version of each design.
**[https://www.owasp.org/images/7/7c/OWASP_Background-Research_Phase1_Final_%281%29.pdf Phase 1 Deliverable]
**[https://www.owasp.org/images/c/c5/OWASP_Recommendations-Presentation2-April24.pdf Phase 2 Deliverable]
**[https://www.owasp.org/images/4/48/OWASP-SEO-Content-Audit-Final-6-7-2013.pdf SEO Content Audit]
***Note: Phase 2 Deliverable has recommendations made by Sisterworks and Design Foundry based on their research.
***We are not necessarily moving forward with these recommendations towards implementation.
***Sisterworks and Design Foundry are helping with our brand consistency and collateral design.

*'''[https://www.owasp.org/index.php/How_to_Host_an_OWASP_Projects_Event_Module How to Host a Project Event Module Page]'''
**I have started putting together a project page dedicated to the different event modules/activities we offer at our AppSec Conferences.
**The page is meant to be an informative piece that gives conference and event planners some basic guidelines.
**Currently, the structure and the outline of the page are complete.
**I still have to finish writing the copy for each section.
**I hope to have this complete by the end of June.

*'''Personal Development'''
**I have finished reading ''Board Member Orientation: The Concise and Complete Guide to Non-Profit Board Service'' by Michael E. Batts.
**I am still taking my online course from Coursera.
**The course topic is Information Security and Risk Management in Context.
**Additionally, I am going to take a week long course next week in the UK.
**The course topic is Intellectual Property Strategy.
**I will write a report on my learnings for the community after the course ends.
**I will be away from Monday, June 17th - Saturday, June 22nd 2013.

*'''Daily Project based queries and requests'''
**This has not changed much since I began the post: questions are very similar in nature.
**Global AppSec questions.
**Funding queries.
**Travel availability.
**Project based administrative help.
**Project status information.
**Several project donations questions.
**Marketing questions.
**Grant funding questions.
**OWASP Social Media Updates.
**What's happening with projects, questions.

==Grants Updates==
*'''[https://docs.google.com/document/d/1MA3TI5ssclxvheV8At_ffu2Fuic55SDpOokS3AOvBUc/edit?usp=sharing OWASP Guidebooks Proposal]'''
# Amount: $25,000 USD
# Status: Awarded. The first payment has been allocated to our project budgets.
# [https://www.owasp.org/images/1/18/Development_Guide_Project_Gantt.pdf OWASP Development Guide Plan]
# [https://www.owasp.org/images/e/e9/Testing_Guide_Project_Gantt.pdf OWASP Testing Guide Plan]
# [https://www.owasp.org/images/d/da/Code_Review_Project_Gantt.pdf OWASP Code Review Guide Plan]

*'''[https://docs.google.com/document/d/16ZFXaML8C7aDAZdyTMDDg4BzLr1vUTOz9eqmYE8ZW8U/edit?usp=sharing OWASP ESAPI Grant Proposal]'''
# Amount: $25,000 USD
# Status: The ESAPI proposal is still being reviewed.

*'''[https://docs.google.com/document/d/1dBTaRr-yl8wGhGKxacWACznZhCZnJ_sZeAdN-b2xPlw/edit?usp=sharing OWASP ModSecurity CRS Proposal]'''
#Amount: $30,000 USD
#Status: The ModSecurity proposal is still being reviewed.

*'''Google Grants Proposal'''
#Amount: $120,000 USD in Adwords Funds
#Status: Awarded. We continue to test different solutions to increase our engagement using this grant award. Currently, we are testing on the AppSec USA 2013 conference website.
#Note: There is no link to show the proposal for this grant. There was a form that was submitted to Google, and we did not receive a record of this form.

*'''European Commission Grant Proposal'''
#Amount: €250,000
#Status: This proposal has been completed and submitted.

*'''Total Grant Funds Awarded: $145,000 USD for 2013.'''

@@ Line 68: / Line 68: @@
 **My primary objective was to become familiar with the different types of IP options that exist on an international level.
 **I felt it would help me manage this aspect of our OWASP Projects since most of the material created is IP related even if it is under a Commons license.
-**Intellectual Property Strategy Report.
+**[https://www.owasp.org/index.php/Projects/Intellectual_Property_Report Intellectual Property Strategy Report.]
 *'''Daily Project based queries and requests'''

@@ Line 57: / Line 57: @@
 *'''Event Manager Interviews'''
-**The OWASP Team is currently reviewing resumés and interviewing candidates for the Event Manager role.
+**The OWASP Team is currently reviewing resumés, and interviewing candidates for the Event Manager role.
 **We are working together to tackle the 80+ applications we received for this position.
 **The team has a few more interviews to manage before we make our final selection.
@@ Line 67: / Line 67: @@
 **The course material was eye opening, and I truly enjoyed the experience.
 **My primary objective was to become familiar with the different types of IP options that exist on an international level.
-**I felt it would help me manage this aspect of our OWASP Projects since most of the material created is our IP even if it is under a Commons license.
+**I felt it would help me manage this aspect of our OWASP Projects since most of the material created is IP related even if it is under a Commons license.
 **Intellectual Property Strategy Report.

@@ Line 32: / Line 32: @@
 **The team is now in the fundraising stage.
 **[https://www.owasp.org/images/e/ed/Women-in-appsec-sponsorship.pdf Women in Security Sponsorship Document: AppSec USA 2013]
-**We have reached out to several organisations to seek sponsorship for this program.
+**We have reached out to several organizations to seek sponsorship for this program.
 **You can find more information on the [http://appsecusa.org/2013/activities/owasp-women-in-application-security-appsec-program/ AppSec USA website].
 **The total amount we are requesting is $6,000.00 to cover conference fee, training fee, travel and accommodation for both winners.

@@ Line 38: / Line 38: @@
 *'''Technical Project Advisory Roles'''
-**I am at the second stage of the interview process for each candidate.
+**I am on the final stage of the selection process for each candidate.
-**I have created job descriptions for each role, and I had those roles posted for over a month.
+**I created job descriptions for each role, and I had those roles posted for over a month.
 **I had a good amount of candidates apply for each role.
-**I have sent out e-mails asking each candidate to answer 3 questions regarding their interest in these roles.
+**This week, I finished interviewing 10 candidates for the 6 advisory roles, and I have chosen the candidates for each role.
-**10 candidates responded to these questions.
+**I will send letters next week informing the successful and unsuccessful candidates about my decisions.
 *'''Marketing Phase 3 Update'''
-**We are at the final stages of our copywriting work with Sisterworks Publishing.
+**Sisterworks Publishing has finalized their copywriting work, and they have sent their materials to the graphic design studio.
 **Design Foundry has now started designing their first drafts of our remaining marketing collateral.
-**We will work with both companies to finalize these designs for community review.
+**The OWASP Team is currently working on a system that will allow community review of the design work.
 **We will ask for community feedback once we get a more finalized version of each design.
 **[https://www.owasp.org/images/7/7c/OWASP_Background-Research_Phase1_Final_%281%29.pdf Phase 1 Deliverable]
@@ Line 59: / Line 57: @@
 *'''Event Manager Interviews'''
-**I have started putting together a project page dedicated to the different event modules/activities we offer at our AppSec Conferences.
+**The OWASP Team is currently reviewing resumés and interviewing candidates for the Event Manager role.
-**The page is meant to be an informative piece that gives conference and event planners some basic guidelines.
+**We are working together to tackle the 80+ applications we received for this position.
-**Currently, the structure and the outline of the page are complete.
+**The team has a few more interviews to manage before we make our final selection.
-**I still have to finish writing the copy for each section.
+**We plan to have a new candidate in this role by mid July.
 *'''Personal Development'''
-**I have finished reading ''Board Member Orientation: The Concise and Complete Guide to Non-Profit Board Service'' by Michael E. Batts.
+**I was able to take a week long, personal development course last week in the UK.
-**I am still taking my online course from Coursera.
+**The program topic was Intellectual Property (IP) Strategy, and the material focused on the development and management of international IP systems for micro, SME, and multinational enterprises.
-**The course topic is Information Security and Risk Management in Context.
+**The course material was eye opening, and I truly enjoyed the experience.
-**Additionally, I am going to take a week long course next week in the UK.
+**My primary objective was to become familiar with the different types of IP options that exist on an international level.
-**The course topic is Intellectual Property Strategy.
+**I felt it would help me manage this aspect of our OWASP Projects since most of the material created is our IP even if it is under a Commons license.
-**I will write a report on my learnings for the community after the course ends.
+**Intellectual Property Strategy Report.
 *'''Daily Project based queries and requests'''

@@ Line 24: / Line 24: @@
 *'''Projects at Conferences'''
-**The team has now finalized the copy for our sponsorship document, and our AppSec USA designer has sent us back a branded flyer.
+**AppSec USA: I continue to plan logistics for the [http://appsecusa.org/2013/activities/project-leader-workshop/ Project Leader Workshop], and the [http://appsecusa.org/2013/activities/owasp-project-summit/ Project Summits].
-**[https://www.owasp.org/images/e/ed/Women-in-appsec-sponsorship.pdf Women in Security Sponsorship Document: AppSec USA 2013]
+**AppSec EU: The OWASP Projects Track and the Open Source Showcase (OSS) are scheduled to take place at AppSec EU. The local AppSec EU team is working towards gathering submissions for the OSS.
-**The plan is to reach out to different organizations for sponsorship.
+**AppSec LATAM: Now that AppSec LATAM is moving forward, I will reach out to the local event planners and discuss the possibility of having Projects at the conference.
-**We have also asked our program volunteers to seek funding internally.
+**AppSec APAC 2014: I briefly spoke to the local event planning team in Tokyo this week about our different Project Event Modules. I will send them more detailed information on each module so we can discuss further.
 *'''Women in Security: AppSec USA 2013'''
-**The team has now finalized the copy for our sponsorship document, and our AppSec USA designer has sent us back a branded flyer.
+**The team is now in the fundraising stage.
 **[https://www.owasp.org/images/e/ed/Women-in-appsec-sponsorship.pdf Women in Security Sponsorship Document: AppSec USA 2013]
-**The plan is to reach out to different organizations for sponsorship.
+**We have reached out to several organisations to seek sponsorship for this program.
 **You can find more information on the [http://appsecusa.org/2013/activities/owasp-women-in-application-security-appsec-program/ AppSec USA website].
 **The total amount we are requesting is $6,000.00 to cover conference fee, training fee, travel and accommodation for both winners.
-**We are working hard to make this a possibility for our 2 potential winners.
+**We have not gotten any sponsorship funding as of yet, but we continue to work hard towards bringing this initiative to AppSec USA 2013.
 *'''Technical Project Advisory Roles'''

@@ Line 109: / Line 109: @@
 *'''Google Grants Proposal'''
 #Amount: $120,000 USD  in Adwords Funds
-#Status: Awarded. We continue to test different solutions to increase our engagement using this grant award. Currently, we are testing on the AppSec USA 2013 conference website.
+#Status: Awarded.
 #Note: There is no link to show the proposal for this grant. There was a form that was submitted to Google, and we did not receive a record of this form.

@@ Line 5: / Line 5: @@
 **Active Projects: 161
 **Inactive Projects: 67
 *'''[https://docs.google.com/spreadsheet/ccc?key=0Amvv_7Gz8Z7TdHZfWGhHZ0Z4UFFwZU42djBXcVVLSlE&usp=sharing Project Applications]'''
-**Unmaskme Project
+**File Format Validation
 *'''Projects Under Review'''

@@ Line 3: / Line 3: @@
 *'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJucVE&usp=sharing Project Numbers]'''
-**Active Projects: 159
+**Active Projects: 161
 **Inactive Projects: 67
@@ Line 13: / Line 13: @@
 **[https://www.owasp.org/index.php/OWASP_Java_HTML_Sanitizer_Project OWASP Java HTML Sanitizer Project]
 **[https://www.owasp.org/index.php/OWASP_Xenotix_XSS_Exploit_Framework Xenotix XSS Exploit Framework]
 **Project reviews are on hold until we can fill the [https://www.owasp.org/index.php/Projects/Reviews_Management_Proposal_2013 Technical Project Advisor] [http://owasp.force.com/volunteers/GW_Volunteers__VolunteersJobListing?campaignid=701U0000000AUtE volunteer roles].
 ==Currently Working On==
-*'''OWASP Project Summit: AppSec USA 2013'''
+*'''Projects at Conferences'''
-**Planning continues for the project event modules for AppSec USA 2013.
+**The team has now finalized the copy for our sponsorship document, and our AppSec USA designer has sent us back a branded flyer.
-**I continue to work with our Project Summit participants to help plan the logistics for their participation.
+**[https://www.owasp.org/images/e/ed/Women-in-appsec-sponsorship.pdf Women in Security Sponsorship Document: AppSec USA 2013]
-**I had to cancel our Project Summit meeting due to scheduling conflicts.
+**The plan is to reach out to different organizations for sponsorship.
-**However, I created a mailing list, and added all participating Leaders to the list.
+**We have also asked our program volunteers to seek funding internally.
-**I sent out an announcement e-mail with instructions on next steps along with action items for each project team.
+**You can find more information on the [http://appsecusa.org/2013/activities/owasp-women-in-application-security-appsec-program/ AppSec USA website].
-**Fabio Cerullo, Martin Knobloch, and I will be providing Scrum Master support during the Project Summit.
+**The total amount we are requesting is $6,000.00 to cover conference fee, training fee, travel and accommodation for both winners.
-**We are still in the process of planning logistics for these roles.
+**We are working hard to make this a possibility for our 2 potential winners.
 *'''Women in Security: AppSec USA 2013'''
@@ Line 58: / Line 57: @@
 ***Sisterworks and Design Foundry are helping with our brand consistency and collateral design.
-*'''[https://www.owasp.org/index.php/How_to_Host_an_OWASP_Projects_Event_Module How to Host a Project Event Module Page]'''
+*'''Event Manager Interviews'''
 **I have started putting together a project page dedicated to the different event modules/activities we offer at our AppSec Conferences.
 **The page is meant to be an informative piece that gives conference and event planners some basic guidelines.