Projects Summit 2013/Working Sessions/0013 - Revision history

Kait Disney-Leugers at 19:45, 22 October 2013

2013-10-22T19:45:35Z

Kait Disney-Leugers at 21:15, 15 October 2013

2013-10-15T21:15:25Z

Kait Disney-Leugers at 21:14, 15 October 2013

2013-10-15T21:14:28Z

Samantha Groves at 03:18, 8 October 2013

2013-10-08T03:18:58Z

Kait Disney-Leugers at 23:13, 7 October 2013

2013-10-07T23:13:17Z

Kait Disney-Leugers at 23:11, 7 October 2013

2013-10-07T23:11:30Z

Kait Disney-Leugers at 23:07, 7 October 2013

2013-10-07T23:07:51Z

Samantha Groves: Created page with "{{Template:{{{1}}}Projects Summit 2013 Working Sessions |- | summit_track_logo = Image:Working_Session.jpg | summit_ws_lo..."

2013-10-07T20:12:34Z

Created page with "{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Projects Summit 2013 Working Sessions</noinclude> |- | summit_track_logo = Image:Working_Session.jpg | summit_ws_lo..."

New page

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Projects Summit 2013 Working Sessions</noinclude>
|-
| summit_track_logo = [[Image:Working_Session.jpg]]
| summit_ws_logo = [[Image:Working_Session.jpg]]
| summit_session_name = Mobile Security Project
| summit_session_url = http://www.owasp.org/index.php/Projects_Summit_2013/Working_Sessions/003
| mailing_list = Google Groups: [https://groups.google.com/forum/#!forum/owasp-project-summit-2013 owasp-project-summit-2013]

|-

| short_working_session_description= '''The OWASP Mobile Security Project is a centralized resource intended to give developers and security teams the resources they need to build and maintain secure mobile applications.'''

|-

| related_project_name1 = OWASP Mobile Security Project
| related_project_url_1 = https://www.owasp.org/index.php/OWASP_Mobile_Security_Project

| related_project_name2 = Project Assessment
| related_project_url_2 = https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHVBRUphTkY4MGNYeFpLbV83OFZoNlE&usp=sharing

| related_project_name3 = Active Project Inventory
| related_project_url_3 = https://www.owasp.org/index.php/OWASP_Project_Inventory

| related_project_name4 =
| related_project_url_4 =

| related_project_name5 =
| related_project_url_5 =

|-

| summit_session_objective_name1= The primary focus is at the application layer.
| summit_session_objective_name2 = Target the areas that the average developer can make a difference.

| summit_session_objective_name3 = Focus on the mobile applications deployed to end user devices.
| summit_session_objective_name4 = Focus on the broader server-side infrastructure which the mobile apps communicate with.

| summit_session_objective_name5 = A heavy focus is placed on the integration between the mobile application, remote authentication services, and cloud platform-specific features.

|-

| working_session_date_and_time = Monday and Tuesday: all day

|-

| discussion_model = participants and attendees

|-

| operational_resources = Projector, whiteboards, markers, Internet connectivity, power

|-

| working_session_additional_details = <br>
[[Image:NEW-PROJECTS-BANNER2.jpg]]

===Chair: Jack Mannino===

Jack Mannino is a managing partner at nVisium Security, a leading provider of mobile application and web application security services. At nVisium he is responsible for ensuring that all services are delivered at the highest levels of quality and with keen attention to detail. He focuses on mobile application security research (especially Android), and is the co-leader of the OWASP Mobile Security Project. In addition to the Mobile Security Project, Jack is also heavily involved with the OWASP Northern Virginia Chapter where he serves as the chapter leader.

Jack is the lead developer for the OWASP GoatDroid Project, and is a contributor to the OWASP RailsGoat Project.
===Operational Manager:===

|-

|summit_session_deliverable_name1 = Top Ten Mobile Risks

|summit_session_deliverable_name2 = Mobile Tools

|summit_session_deliverable_name3 = Mobile Security Testing

|summit_session_deliverable_name4 = Mobile Cheat Sheet Series

|summit_session_deliverable_name5 = Secure Mobile Development

|summit_session_deliverable_name6 = Top Ten Mobile Controls

|summit_session_deliverable_name7 = OWASP Mobile Threat Model Project

|summit_session_deliverable_name8 =

|-

| summit_session_leader_name1 = Jack Mannino
| summit_session_leader_email1 = Jack@nvisiumsecurity.com
| summit_session_leader_username1 =

| summit_session_leader_name2 =
| summit_session_leader_email2 =
| summit_session_leader_username2 =

| summit_session_leader_name3 =
| summit_session_leader_email3 =
| summit_session_leader_username3 =

|-

| operational_leader_name1 =
| operational_leader_email1 =
| operational_leader_username1 =

|-
| meeting_notes = 123

|-

| summit_session_attendee_name1 =
| summit_session_attendee_email1 =
| summit_session_attendee_username1 =
| summit_session_attendee_company1=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed1=

| summit_session_attendee_name2 =
| summit_session_attendee_email2 =
| summit_session_attendee_username2 =
| summit_session_attendee_company2=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed2=

| summit_session_attendee_name3 =
| summit_session_attendee_email3 =
| summit_session_attendee_username3 =
| summit_session_attendee_company3=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed3=

| summit_session_attendee_name4 =
| summit_session_attendee_email4 =
| summit_session_attendee_username4 =
| summit_session_attendee_company4=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed4=

| summit_session_attendee_name5 =
| summit_session_attendee_email5 =
| summit_session_attendee_username5 =
| summit_session_attendee_company5=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed5=

| summit_session_attendee_name6 =
| summit_session_attendee_email6 =
| summit_session_attendee_username6 =
| summit_session_attendee_company6=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed6=

| summit_session_attendee_name7 =
| summit_session_attendee_email7 =
| summit_session_attendee_username7 =
| summit_session_attendee_company7=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed7=

| summit_session_attendee_name8 =
| summit_session_attendee_email8 =
| summit_session_attendee_username8 =
| summit_session_attendee_company8=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed8=

| summit_session_attendee_name9 =
| summit_session_attendee_email9 =
| summit_session_attendee_username9 =
| summit_session_attendee_company9=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed9=

| summit_session_attendee_name10 =
| summit_session_attendee_email10 =
| summit_session_attendee_username10 =
| summit_session_attendee_company10=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed10=

| summit_session_attendee_name11 =
| summit_session_attendee_email11 =
| summit_session_attendee_username11 =
| summit_session_attendee_company11=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed11=

| summit_session_attendee_name12 =
| summit_session_attendee_email12 =
| summit_session_attendee_username12 =
| summit_session_attendee_company12=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed12=

| summit_session_attendee_name13 =
| summit_session_attendee_email13 =
| summit_session_attendee_username13 =
| summit_session_attendee_company13=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed13=

| summit_session_attendee_name14 =
| summit_session_attendee_email14 =
| summit_session_attendee_username14 =
| summit_session_attendee_company14=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed14=

| summit_session_attendee_name15 =
| summit_session_attendee_email15 =
| summit_session_attendee_username15 =
| summit_session_attendee_company15=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed15=

| summit_session_attendee_name16 =
| summit_session_attendee_email16 =
| summit_session_attendee_username16 =
| summit_session_attendee_company16=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed16=

| summit_session_attendee_name17 =
| summit_session_attendee_email17 =
| summit_session_attendee_username17 =
| summit_session_attendee_company17=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed17=

| summit_session_attendee_name18 =
| summit_session_attendee_email18 =
| summit_session_attendee_username18 =
| summit_session_attendee_company18=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed18=

| summit_session_attendee_name19 =
| summit_session_attendee_email19 =
| summit_session_attendee_username19 =
| summit_session_attendee_company19=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed19=

| summit_session_attendee_name20 =
| summit_session_attendee_email20 =
| summit_session_attendee_username20 =
| summit_session_attendee_company20=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed20=

|-
| session_name_mask =  Session003
| session_home_page =  Projects_Summit_2013/Working_Sessions/003
}}

@@ Line 41: / Line 41: @@
 |-
-| working_session_date_and_time = Monday and Tuesday: all day (What day works for you)
+| working_session_date_and_time = Monday to Thursday, November 18-21: 8PM to 11:59PM
 |-

← Older revision		Revision as of 21:15, 15 October 2013
Line 9:		Line 9:
	\|-		\|-

−	\| short_working_session_description= '''Collaboration, Learning, and Sharing Knowledge are the objectives for Bug Bounty program. It offers a '~~life~~ hacking' event within a controlled environment.'''	+	\| short_working_session_description= '''Collaboration, Learning, and Sharing Knowledge are the objectives for Bug Bounty program. It offers a 'live hacking' event within a controlled environment.'''

← Older revision		Revision as of 21:14, 15 October 2013
Line 9:		Line 9:
	\|-		\|-

−	\| short_working_session_description= '''Collaboration, Learning, and Sharing Knowledge are the objectives for Bug Bounty program. It offers a 'life hacking' event within a ~~controled~~ environment.'''	+	\| short_working_session_description= '''Collaboration, Learning, and Sharing Knowledge are the objectives for Bug Bounty program. It offers a 'life hacking' event within a controlled environment.'''

@@ Line 3: / Line 3: @@
 | summit_track_logo = [[Image:Working_Session.jpg]]
 | summit_ws_logo = [[Image:Working_Session.jpg]]
-| summit_session_name = Mobile Security Project
+| summit_session_name = Bug Bounty Session
-| summit_session_url = http://www.owasp.org/index.php/Projects_Summit_2013/Working_Sessions/003
+| summit_session_url = http://www.owasp.org/index.php/Projects_Summit_2013/Working_Sessions/0013
 | mailing_list = Google Groups: [https://groups.google.com/forum/#!forum/owasp-project-summit-2013 owasp-project-summit-2013]
 |-
-| short_working_session_description= '''Collaboration, Learning and Sharing Knowledge are the objectives for Bug Bounty programs. It offers a 'life hacking' event within a control environment.'''
+| short_working_session_description= '''Collaboration, Learning, and Sharing Knowledge are the objectives for Bug Bounty program. It offers a 'life hacking' event within a controled environment.'''
 |-
-| related_project_name1 = OWASP Mobile Security Project
+| related_project_name1 = OWASP Bug Bounty Session
-| related_project_url_1 = https://www.owasp.org/index.php/OWASP_Mobile_Security_Project
+| related_project_url_1 = https://bugcrowd.com/list-of-bug-bounty-programs/
-| related_project_name2 = Project Assessment
+| related_project_name2 =
-| related_project_url_2 = https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdHVBRUphTkY4MGNYeFpLbV83OFZoNlE&usp=sharing
+| related_project_url_2 =
-| related_project_name3 = Active Project Inventory
+| related_project_name3 =
-| related_project_url_3 = https://www.owasp.org/index.php/OWASP_Project_Inventory
+| related_project_url_3 =
 | related_project_name4 =
@@ Line 32: / Line 32: @@
 | summit_session_objective_name1= Collaboration, Learning and Sharing Knowledge - By creating an environment where attendees can get together in an 'live hacking' event.
-| summit_session_objective_name2 = In order to keep things legal and focused, the 'targets' are going to be companies that have public "Bug Bounties' programs. These will be companies that accept adn want to be targets for such ethical hacking activities.
+| summit_session_objective_name2 = In order to keep things focused, the 'targets' are going to be companies that have public "Bug Bounties' programs. These will be companies that accept and want to be targets for such ethical hacking activities.
 | summit_session_objective_name3 = Each participant will be asked to have 'common sense' and to respect a couple 'soft' rules of engagement.
@@ Line 41: / Line 41: @@
 |-
-| working_session_date_and_time = Monday and Tuesday: all day
+| working_session_date_and_time = Monday and Tuesday: all day (What day works for you)
 |-
@@ Line 61: / Line 61: @@
 For the past years Dinis has focused on the field of Static Source Code analysis, from May 2007 to Dec 2009 he worked as a independent consultant for Ounce Labs (bought by IBM in July 2009) where during active security engagements using Ounce's technology he developed the Open Source codebase which now is the foundation of the OWASP O2 Platform.
-At OWASP, Dinis is the leader of the OWASP O2 Platform project
+At OWASP, Dinis is the leader of the OWASP O2 Platform project.
 ===Operational Manager:===
@@ Line 85: / Line 85: @@
 | summit_session_leader_name1 = Dinis Cruz
-| summit_session_leader_email1 =
+| summit_session_leader_email1 = dinis.cruz@owasp.org
 | summit_session_leader_username1 =
@@ Line 229: / Line 229: @@
 |-
-| session_name_mask = <!--Please replace DO NOT EDIT this string --> Session003
+| session_name_mask = <!--Please replace DO NOT EDIT this string --> Session0013
-| session_home_page = <!--Please replace DO NOT EDIT this string --> Projects_Summit_2013/Working_Sessions/003
+| session_home_page = <!--Please replace DO NOT EDIT this string --> Projects_Summit_2013/Working_Sessions/0013
 }}

← Older revision		Revision as of 23:11, 7 October 2013
Line 9:		Line 9:
	\|-		\|-

−	\| short_working_session_description= '''~~The OWASP Mobile Security Project is a centralized resource intended to give developers~~ and ~~security teams~~ the ~~resources they need to build and maintain secure mobile applications~~.'''	+	\| short_working_session_description= '''Collaboration, Learning and Sharing Knowledge are the objectives for Bug Bounty programs. It offers a 'life hacking' event within a control environment.'''

@@ Line 66: / Line 66: @@
 |-
-|summit_session_deliverable_name1 =
+|summit_session_deliverable_name1 = To have authorization to attack/test 'targets'.
 |summit_session_deliverable_name2 =

@@ Line 31: / Line 31: @@
 |-
-| summit_session_objective_name1= The primary focus is at the application layer.
+| summit_session_objective_name1= Collaboration, Learning and Sharing Knowledge - By creating an environment where attendees can get together in an 'live hacking' event.
-| summit_session_objective_name2 = Target the areas that the average developer can make a difference.
+| summit_session_objective_name2 = In order to keep things legal and focused, the 'targets' are going to be companies that have public "Bug Bounties' programs. These will be companies that accept adn want to be targets for such ethical hacking activities.
-| summit_session_objective_name3 = Focus on the mobile applications deployed to end user devices.
+| summit_session_objective_name3 = Each participant will be asked to have 'common sense' and to respect a couple 'soft' rules of engagement.
-| summit_session_objective_name4 = Focus on the broader server-side infrastructure which the mobile apps communicate with.
+| summit_session_objective_name4 = All participants are encouraged to share their ideas, techniques and discoveries.
-| summit_session_objective_name5 =  A heavy focus is placed on the integration between the mobile application, remote authentication services, and cloud platform-specific features.
+| summit_session_objective_name5 =  In addition to the 'Bug Bounty' targets, we will also add a couple Open Source apps so that the 'builders' also have the opportunity to fix the source code and the 'breakers' can do source-code analysis.
 |-
@@ Line 56: / Line 56: @@
 [[Image:NEW-PROJECTS-BANNER2.jpg]]
-===Chair: Jack Mannino===
+===Chair: Dinis Cruz===
-Jack Mannino is a managing partner at nVisium Security, a leading provider of mobile application and web application security services. At nVisium he is responsible for ensuring that all services are delivered at the highest levels of quality and with keen attention to detail.  He focuses on mobile application security research (especially Android), and is the co-leader of the OWASP Mobile Security Project. In addition to the Mobile Security Project, Jack is also heavily involved with the OWASP Northern Virginia Chapter where he serves as the chapter leader.
+For the past years Dinis has focused on the field of Static Source Code analysis, from May 2007 to Dec 2009 he worked as a independent consultant for Ounce Labs (bought by IBM in July 2009) where during active security engagements using Ounce's technology he developed the Open Source codebase which now is the foundation of the OWASP O2 Platform.
-Jack is the lead developer for the OWASP GoatDroid Project, and is a contributor to the OWASP RailsGoat Project.
+At OWASP, Dinis is the leader of the OWASP O2 Platform project
 ===Operational Manager:===
 |-
-|summit_session_deliverable_name1 = Top Ten Mobile Risks
+|summit_session_deliverable_name1 =
-|summit_session_deliverable_name2 = Mobile Tools
+|summit_session_deliverable_name2 =
-|summit_session_deliverable_name3 = Mobile Security Testing
+|summit_session_deliverable_name3 =
-|summit_session_deliverable_name4 = Mobile Cheat Sheet Series
+|summit_session_deliverable_name4 =
-|summit_session_deliverable_name5 = Secure Mobile Development
+|summit_session_deliverable_name5 =
-|summit_session_deliverable_name6 = Top Ten Mobile Controls
+|summit_session_deliverable_name6 =
-|summit_session_deliverable_name7 = OWASP Mobile Threat Model Project
+|summit_session_deliverable_name7 =
 |summit_session_deliverable_name8 =
@@ Line 83: / Line 84: @@
 |-
-| summit_session_leader_name1 = Jack Mannino
+| summit_session_leader_name1 = Dinis Cruz
-| summit_session_leader_email1 = Jack@nvisiumsecurity.com
+| summit_session_leader_email1 =
 | summit_session_leader_username1 =