Projects/Reports/2013-30-08 - Revision history

Samantha Groves: Undo revision 158115 by Samantha Groves (talk)

2013-09-09T14:29:41Z

Undo revision 158115 by Samantha Groves (talk)

Samantha Groves at 14:29, 9 September 2013

2013-09-09T14:29:11Z

Samantha Groves at 02:52, 31 August 2013

2013-08-31T02:52:56Z

Samantha Groves at 02:45, 31 August 2013

2013-08-31T02:45:49Z

Samantha Groves at 02:29, 31 August 2013

2013-08-31T02:29:12Z

Samantha Groves at 02:16, 31 August 2013

2013-08-31T02:16:04Z

Samantha Groves at 00:22, 31 August 2013

2013-08-31T00:22:14Z

Samantha Groves: Created page with "TOC = OWASP Global Projects Report = *'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJucVE&usp=sharing Project Numbers]''' **Activ..."

2013-08-31T00:04:53Z

Created page with "__TOC__ = OWASP Global Projects Report = *'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJucVE&usp=sharing Project Numbers]''' **Activ..."

New page

__TOC__
= OWASP Global Projects Report =

*'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJucVE&usp=sharing Project Numbers]'''
**Active Projects: 132
**Inactive Projects: 104

*'''[https://docs.google.com/spreadsheet/ccc?key=0Amvv_7Gz8Z7TdHZfWGhHZ0Z4UFFwZU42djBXcVVLSlE&usp=sharing New Project Applications]'''
**PHP Portscanner
**OWASP Framework Security Project

*'''Projects Under Review'''
**[https://www.owasp.org/index.php/Cheat_Sheets OWASP Cheat Sheets Project]
**[https://www.owasp.org/index.php/OWASP_Java_HTML_Sanitizer_Project OWASP Java HTML Sanitizer Project]
**[https://www.owasp.org/index.php/OWASP_Xenotix_XSS_Exploit_Framework Xenotix XSS Exploit Framework]
**[https://www.owasp.org/index.php/OWASP_Cornucopia OWASP Cornucopia Project]
**[https://www.owasp.org/index.php/OWASP_Java_Encoder_Project OWASP Java Encoder Project]
**Project reviews are on hold until the Technical Advisory group complete and test the [https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHliVUlMYVdPRWpqajF1bGtnSGtWckE&usp=sharing updated assessment criteria].

==Currently Working On==

*'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdEdCYVJpdmZHaWJYZ055WHROa19qN3c&usp=sharing Active Project Audit]'''
**The Project Audit is now complete.
**I reached out to every project leader listed in our inventory, and asked them to confirm the status of their project.
**The majority of our Leaders responded, and their project activity status was marked accordingly.
**Those that did not respond were sent 3 messages before their project was marked inactive.
**Due to the audit, the number of active OWASP Projects in our inventory went down from 169 to 132.
**I have also created an [https://lists.owasp.org/mailman/listinfo/owasp_project_leader_list OWASP Project Leader Mailing List], and I added all of our confirmed active Leaders to it.
**The next audit will take place on February 2014.

*'''Women in AppSec: AppSec USA 2013'''
**This week, I met with Dawn-Marie Hutchinson, Head of Information Security at Urban Outfitters.
**We spoke about her participation in the Women in AppSec Panel.
**Everything is ready to go on her end, and she will reach out to us closer to the date with any logistical questions she may have.
**Additionally, the Women in AppSec Team are still putting together a selection committee to help review and select the winning candidates.
**[https://docs.google.com/document/d/1BLIM6QpXmCiHdI0zT2YbecmkhEBZqIZt1pGoUXuQxMk/edit?usp=sharing Women in AppSec Program Selection Criteria: 1st Draft].
**We plan on beginning our selection process after the 9th of September once the application deadline has passed.
**[https://docs.google.com/forms/d/1WEtInvzlxLDXpTgfXh-E1E7e8H5FRfEOPIaTOizlBpk/viewform Women in AppSec Application Form.]
**The application deadline is Monday, September 09, 2013 at 5pm GMT.
**The deadline for sponsors is Monday, September 09, 2013, as well.

*'''[https://www.owasp.org/index.php/Projects/Internships/Grants_and_Fundraising_Intern Grants & Fundraising Intern]'''
**I continue to search for a Grants & Fundraising intern.
**I currently have 4 applicants for the role, but I would like to get a few more before the deadline.
**Application Deadline: Monday August 26 2013 5PM GMT.
**Interviews Scheduled: First Week of September.
**Selection Announcement: Monday, September 09th 2013.
**Start Date: Monday, September 16th 2013.
**Internship End Date: Monday, January 13th 2014.
**If you are interested, or know of anyone that might be interested, please contact me at Samantha.Groves@owasp.org.

*'''Projects in Salesforce'''
**I worked closely with Kate this week to figure out a way to better integrate our project data into Salesforce.
**The issue we are having is that many of the primary activities a Project Leader takes part in, happen outside of the wiki and Salesforce.
**Moreover, project leaders do not have access to the information in Salesforce about their project.
**This means that project leaders cannot update, add, or delete information about their projects.
**The end result is that I have to make duplicate data lists, one in Salesforce and one in Google Docs where Leaders can have access to it.
**Kate is looking into several applications that can help eliminate this duplication, and help with our workflow.

*'''Daily Project based queries and requests'''
**This has not changed much since I began the post: questions are very similar in nature.
**Global AppSec questions.
**Funding queries.
**Travel availability.
**Project based administrative help.
**Project status information.
**Several project donation questions.
**Marketing questions.
**Grant funding questions.
**OWASP social media updates.
**What's happening with projects, questions.

==Project Funding Updates==
*'''OWASP OWTF Project: Brucon 5x5 Award'''
# Amount: €5,000.00 (Approx. $6,670.00)
# Status: Awarded. Congratulations, Abraham Aranguren and all involved in the project, for your award.

*'''[https://docs.google.com/file/d/0B1lOCxlYdf1AQm52T2xjX215M28/edit?usp=sharing OWASP OWTF Grant Proposal]'''
# Amount: $55,800 USD
# Status: This proposal is complete, and has been submitted.

*'''[https://docs.google.com/document/d/1cFbmOLqEQQG8eXPrMTlU6JUivgRIacUeL7D599bZm_E/edit?usp=sharing OWASP AppSensor Grant Proposal]'''
# Amount: $15,000 USD
# Status: This proposal is complete, and has been submitted.

*'''[https://docs.google.com/document/d/1Vz7BLFdt1h5AhmW-Zc2B_KlqhzsSkSAaEASML5U4VQs/edit?usp=sharing OWASP OpenSAMM Grant Proposal]'''
# Amount: $112,000 USD
# Status: This proposal is complete, and has been submitted.

*'''[https://docs.google.com/document/d/1MA3TI5ssclxvheV8At_ffu2Fuic55SDpOokS3AOvBUc/edit?usp=sharing OWASP Guidebooks Proposal]'''
# Amount: $25,000 USD
# Status: Awarded. The first payment has been allocated to our project budgets. The second invoice has now been sent to Georgia Tech for payment.
# [https://www.owasp.org/images/1/18/Development_Guide_Project_Gantt.pdf OWASP Development Guide Plan]
# [https://www.owasp.org/images/e/e9/Testing_Guide_Project_Gantt.pdf OWASP Testing Guide Plan]
# [https://www.owasp.org/images/d/da/Code_Review_Project_Gantt.pdf OWASP Code Review Guide Plan]

*'''[https://docs.google.com/document/d/16ZFXaML8C7aDAZdyTMDDg4BzLr1vUTOz9eqmYE8ZW8U/edit?usp=sharing OWASP ESAPI Grant Proposal]'''
# Amount: $25,000 USD
# Status: The ESAPI proposal is still being reviewed.

*'''[https://docs.google.com/document/d/1dBTaRr-yl8wGhGKxacWACznZhCZnJ_sZeAdN-b2xPlw/edit?usp=sharing OWASP ModSecurity CRS Proposal]'''
#Amount: $30,000 USD
#Status: The ModSecurity proposal is still being reviewed.

*'''Google Grants Proposal'''
#Amount: $120,000 USD in Adwords Funds
#Status: Awarded.
#Note: There is no link to show the proposal for this grant. There was a form that was submitted to Google, and we did not receive a record of this form.

*'''European Commission Grant Proposal'''
#Amount: €250,000
#Status: Denied.

*'''Google Summer of Code'''
#Amount: $5,500
#Status: Awarded

*'''Projects breakdown:'''
**4 ZAP Projects: $2,000
**4 OWTF Projects: $2,000
**1 PHP Security Project: $500
**1 Hackademics Project: $500
**1 Modsecurity Project: $500
**Note: Big thank you to Fabio Cerullo for coordinating and managing this award.

*'''Total Funds Awarded: $157,170 USD for 2013.'''

@@ Line 37: / Line 37: @@
 *'''Women in AppSec: AppSec USA 2013'''
 **This week, the team selected three new members for the Women in AppSec Selection Committee.
-**These individuals will help 3 of the original members review the applications and select the two winners.
+**These individuals will help review the applications and select the two winners.
 **The following people make up the selection committee: Helen Gao, Bev Corwin, Jim Manico, Tom Ryan, Lucas Ferreira, and Samantha Groves.
 **Once the selection committee was established, we began discussing the selection criteria in more detail.
@@ Line 58: / Line 58: @@
 *'''Projects at Conferences'''
-**The two conferences left for the year are AppSec LATAM, and AppSec USA.
+**The two conferences left to plan for this year are AppSec LATAM, and AppSec USA.
-**I have reached out to two project leaders in the Latin American region, and asked them if they would speak at the conference.
+**I have reached out to two project leaders in the Latin America region, and asked them if they would speak at the conference.
-**Both leaders agreed to speak at the conference.
+**Both leaders agreed to give a talk at the conference.
 **I have been helping them with their travel, accommodation, and conference logistics planning.
 **Thank you to Michael Hidalgo and Rafael Gil Larios for representing OWASP Projects at AppSec LATAM.

@@ Line 19: / Line 19: @@
 **[https://www.owasp.org/index.php/OWASP_Cornucopia OWASP Cornucopia Project] (Testing)
 **[https://www.owasp.org/index.php/OWASP_Java_Encoder_Project OWASP Java Encoder Project] (Testing)
-**Project reviews are on hold until the Technical Advisory group complete and test the [https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHliVUlMYVdPRWpqajF1bGtnSGtWckE&usp=sharing updated assessment criteria].
+**Project reviews are on hold until the Technical Advisory group complete and test the [https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHJUSl9rbGtscGJfSGRWVFNUM2JPMlE&usp=sharing updated assessment criteria].
 ==Currently Working On==

@@ Line 1: / Line 1: @@
 __TOC__
 = OWASP Global Projects Report =
 *'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHBGbDhXQko4akJoVnMtMUpvZnJucVE&usp=sharing Project Numbers]'''
-**Active Projects: 132
+**Active Projects: 135
-**Inactive Projects: 104
+**Inactive Projects: 103
 *'''[https://docs.google.com/spreadsheet/ccc?key=0Amvv_7Gz8Z7TdHZfWGhHZ0Z4UFFwZU42djBXcVVLSlE&usp=sharing New Project Applications]'''
 **OWASP JAWS Project
-*'''[https://docs.google.com/spreadsheet/ccc?key=0Amvv_7Gz8Z7TdHZfWGhHZ0Z4UFFwZU42djBXcVVLSlE&usp=sharing New Project Applications]'''
+*'''New OWASP Projects'''
-**PHP Portscanner
+**[https://www.owasp.org/index.php/OWASP_Framework_Security_Project OWASP Framework Security Project]
-**OWASP Framework Security Project
+**[https://www.owasp.org/index.php/OWASP_Ruby_on_Rails_Security_Guide_Project OWASP Ruby on Rails Security Guide Project] - Adoption
 *'''Projects Under Review'''
 **[https://www.owasp.org/index.php/Cheat_Sheets OWASP Cheat Sheets Project]
-**[https://www.owasp.org/index.php/OWASP_Java_HTML_Sanitizer_Project OWASP Java HTML Sanitizer Project]
+**[https://www.owasp.org/index.php/OWASP_Java_HTML_Sanitizer_Project OWASP Java HTML Sanitizer Project] (Testing)
 **[https://www.owasp.org/index.php/OWASP_Xenotix_XSS_Exploit_Framework Xenotix XSS Exploit Framework]
-**[https://www.owasp.org/index.php/OWASP_Cornucopia OWASP Cornucopia Project]
+**[https://www.owasp.org/index.php/OWASP_Cornucopia OWASP Cornucopia Project] (Testing)
-**[https://www.owasp.org/index.php/OWASP_Java_Encoder_Project OWASP Java Encoder Project]
+**[https://www.owasp.org/index.php/OWASP_Java_Encoder_Project OWASP Java Encoder Project] (Testing)
-**Project reviews are on hold until the Technical Advisory group complete and test the [https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHliVUlMYVdPRWpqajF1bGtnSGtWckE&usp=sharing updated assessment criteria].
+**Project reviews are on hold until the Technical Advisory group complete and test the [https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHJUSl9rbGtscGJfSGRWVFNUM2JPMlE&usp=sharing updated assessment criteria].
 ==Currently Working On==

@@ Line 36: / Line 36: @@
 *'''Women in AppSec: AppSec USA 2013'''
-**This week, I met with Dawn-Marie Hutchinson, Head of Information Security at Urban Outfitters.
+**This week, the team selected three new members for the Women in AppSec Selection Committee.
-**We spoke about her participation in the Women in AppSec Panel.
+**These individuals will help 3 of the original members review the applications and select the two winners.
-**Everything is ready to go on her end, and she will reach out to us closer to the date with any logistical questions she may have.
+**The following people make up the selection committee: Helen Gao, Bev Corwin, Jim Manico, Tom Ryan, Lucas Ferreira, and Samantha Groves.
-**Additionally, the Women in AppSec Team are still putting together a selection committee to help review and select the winning candidates.
+**Once the selection committee was established, we began discussing the selection criteria in more detail.
-**[https://docs.google.com/document/d/1BLIM6QpXmCiHdI0zT2YbecmkhEBZqIZt1pGoUXuQxMk/edit?usp=sharing Women in AppSec Program Selection Criteria: 1st Draft].
+**We are now in the third version of the criteria.
 **We plan on beginning our selection process after the 9th of September once the application deadline has passed.
 **[https://docs.google.com/forms/d/1WEtInvzlxLDXpTgfXh-E1E7e8H5FRfEOPIaTOizlBpk/viewform Women in AppSec Application Form.]
@@ Line 47: / Line 48: @@
 *'''[https://www.owasp.org/index.php/Projects/Internships/Grants_and_Fundraising_Intern Grants & Fundraising Intern]'''
-**I continue to search for a Grants & Fundraising intern.
+**My search for a Grants & Fundraising intern is coming to an end
-**I currently have 4 applicants for the role, but I would like to get a few more before the deadline.
+**I received four applications for the role, and I have scheduled interviews with each applicant for next week.
-**Application Deadline: Monday August 26 2013 5PM GMT.
+**I will make a decision next week, and announce the successful applicant on the 9th of September.
-**Interviews Scheduled: First Week of September.
+**Application Deadline: Monday August 26 2013 5PM GMT. (Now Closed)
 **Selection Announcement: Monday, September 09th 2013.
 **Start Date: Monday, September 16th 2013.
 **Internship End Date: Monday, January 13th 2014.
 *'''Projects at Conferences'''
-**I worked closely with Kate this week to figure out a way to better integrate our project data into Salesforce.
+**The two conferences left for the year are AppSec LATAM, and AppSec USA.
-**The issue we are having is that many of the primary activities a Project Leader takes part in, happen outside of the wiki and Salesforce.
+**I have reached out to two project leaders in the Latin American region, and asked them if they would speak at the conference.
-**Moreover, project leaders do not have access to the information in Salesforce about their project.
+**Both leaders agreed to speak at the conference.
-**This means that project leaders cannot update, add, or delete information about their projects.
+**I have been helping them with their travel, accommodation, and conference logistics planning.
-**The end result is that I have to make duplicate data lists, one in Salesforce and one in Google Docs where Leaders can have access to it.
+**Thank you to Michael Hidalgo and Rafael Gil Larios for representing OWASP Projects at AppSec LATAM.
-**Kate is looking into several applications that can help eliminate this duplication, and help with our workflow.
+**AppSec USA planning for projects is going very well.
 *'''Daily Project based queries and requests'''

@@ Line 23: / Line 23: @@
 ==Currently Working On==
-*'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdEdCYVJpdmZHaWJYZ055WHROa19qN3c&usp=sharing Active Project Audit]'''
+*'''Technical Project Advisors: Work Update'''
-**The Project Audit is now complete.
+**The Advisors and I met this week to discuss their review of the current Assessment criteria.
-**I reached out to every project leader listed in our inventory, and asked them to confirm the status of their project.
+**We also reviewed Chuck's comments, and discussed each in more detail.
-**The majority of our Leaders responded, and their project activity status was marked accordingly.
+**We made some changes to the original document, and I've put together a revised draft based on our conversation.
-**Those that did not respond were sent 3 messages before their project was marked inactive.
+**Here is [https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHliVUlMYVdPRWpqajF1bGtnSGtWckE&usp=sharing Ly's original document] with Chuck's comments and my notes.
-**Due to the audit, the number of active OWASP Projects in our inventory went down from 169 to 132.
+**Here is the [https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHJUSl9rbGtscGJfSGRWVFNUM2JPMlE&usp=sharing new revised draft].
-**I have also created an [https://lists.owasp.org/mailman/listinfo/owasp_project_leader_list OWASP Project Leader Mailing List], and I added all of our confirmed active Leaders to it.
+**We plan to use the revised draft to test 3 projects against the criteria.
-**The next audit will take place on February 2014.
+***Project being reviewed are the following:
 *'''Women in AppSec: AppSec USA 2013'''
@@ Line 53: / Line 56: @@
 **If you are interested, or know of anyone that might be interested, please contact me at Samantha.Groves@owasp.org.
-*'''Projects in Salesforce'''
+*'''Projects at Conferences'''
 **I worked closely with Kate this week to figure out a way to better integrate our project data into Salesforce.
 **The issue we are having is that many of the primary activities a Project Leader takes part in, happen outside of the wiki and Salesforce.