San Antonio - Revision history

Mvaldes: minor edit

2018-10-29T12:35:02Z

minor edit

Mvaldes: Added November meeting details

2018-10-29T12:31:18Z

Added November meeting details

Michael.xin: /* Local News */ add news

2018-10-06T15:29:49Z

‎Local News: add news

Michael.xin: add slides for the meetup

2018-10-06T15:28:55Z

add slides for the meetup

Mvaldes: Add October Meeting info

2018-10-02T02:01:57Z

Add October Meeting info

Mvaldes: added recent meeting information and link to meetup page

2018-09-19T02:16:13Z

added recent meeting information and link to meetup page

Mvaldes: /* Local News */ Add January meeting news

2018-01-29T16:51:57Z

‎Local News: Add January meeting news

Mvaldes: /* Local News */ Updating 2017 meeting schedule

2017-11-09T16:20:27Z

‎Local News: Updating 2017 meeting schedule

Show changes

Dorindareyna: /* Local News */

2017-01-26T20:44:16Z

‎Local News

Dorindareyna: /* Local News */

2016-08-18T20:24:19Z

‎Local News

@@ Line 9: / Line 9: @@
   Please see https://www.meetup.com/OWASP-San-Antonio/ for the most up to date chapter meeting schedule
-=== '''OWASP San Antonio - October 5, 2018 @ 11:30am''' ===
+=== '''OWASP San Antonio - November 9, 2018 @ 11:30am''' ===
 Join us for the November 2018 OWASP San Antonio meeting!

← Older revision		Revision as of 12:31, 29 October 2018
Line 10:		Line 10:

	=== '''OWASP San Antonio - October 5, 2018 @ 11:30am''' ===		=== '''OWASP San Antonio - October 5, 2018 @ 11:30am''' ===
		+	Join us for the November 2018 OWASP San Antonio meeting!
		+
		+	We will have an interesting talk covering strategies and benefits of application tracing!
		+
		+	'''Title:'''
		+
		+	Tracing your system for fun and profit
		+
		+	'''Abstract:'''
		+
		+	How many of us go in every day knowing the ins and outs of our application but not fully understanding how interacts within the greater system flow? How often do we get called up at night from a frantic developer three dependencies away from our application yelling about a response that they did not expect due to a bug fix we put in a few weeks earlier? As developers, that happens more often than we care to admit. Having something that shows an entire system workflow is monumental. On top of that, security professionals would also benefit from understanding how different parts of the system interact with each other.
		+
		+	There have been many ways to solve this problem (design documents, architecture designs, workflow system documents, etc.) but most uses require manual updates and dedicated resources that know the entire system flow to understand what to update. This is not (usually) scalable.
		+
		+	Tracing cross-boundary systems looks to help solve these issues. In this talk, we’ll talk about one way of tracing a system end-to-end (OpenTracing) and will talk about benefits to security professionals, look at implementation details, talk about other competing products in this space, and next steps in the ecosystem. The goal for this talk is for the attendees to leave with a rudimentary understanding of system tracing and potential benefits and drawbacks
		+
		+	'''Speaker:''' Dimitry Ushakov
		+
		+	'''Bio:'''
		+
		+	Dimitry Ushakov is a Quality Engineer at Rackspace. When not dealing with impostor syndrome from working with geniuses every day, he works on making operators' and developers' lives easier with test automation, continuous integration/delivery management, and other testing industry buzzwords.
		+
		+	'''Location:''' Denim Group Offices: 1354 N Loop 1604 E Suite 110, San Antonio, TX 78232
		+
		+	==='''OWASP San Antonio - October 5, 2018 @ 11:30am''' ===
	Join us for the October 2018 OWASP San Antonio meeting where we will have a talk covering the latest in DDoS attack tools and services!		Join us for the October 2018 OWASP San Antonio meeting where we will have a talk covering the latest in DDoS attack tools and services!

@@ Line 9: / Line 9: @@
   Please see https://www.meetup.com/OWASP-San-Antonio/ for the most up to date chapter meeting schedule
-'''OWASP San Antonio - October 5, 2018 @ 11:30am'''
+=== '''OWASP San Antonio - October 5, 2018 @ 11:30am''' ===
 Join us for the October 2018 OWASP San Antonio meeting where we will have a talk covering the latest in DDoS attack tools and services!

← Older revision		Revision as of 15:28, 6 October 2018
Line 28:		Line 28:

	'''Location:''' Denim Group Offices: 1354 N Loop 1604 E Suite 110, San Antonio, TX 78232		'''Location:''' Denim Group Offices: 1354 N Loop 1604 E Suite 110, San Antonio, TX 78232
		+
		+	The slide link: https://www.slideshare.net/michaelxin2015/weapons-of-mass-disruption-by-roman-lara-for-owasp-san-antonio-chapter-meetup

	==='''OWASP San Antonio - June 29, 2018 @ 11:30am''' ===		==='''OWASP San Antonio - June 29, 2018 @ 11:30am''' ===

@@ Line 9: / Line 9: @@
   Please see https://www.meetup.com/OWASP-San-Antonio/ for the most up to date chapter meeting schedule
-=== '''OWASP San Antonio - June 29, 2018 @ 11:30am''' ===
+'''OWASP San Antonio - October 5, 2018 @ 11:30am'''
 Join us for the June 2018 OWASP San Antonio meeting where we will have a talk covering how to evaluate threats to IoT devices and their related systems!
@@ Line 664: / Line 684: @@
 :45 - 4:00: Close

@@ Line 1: / Line 1: @@
 {{Chapter Template|chaptername=San Antonio|extra=The chapter leadership team is:
 [mailto:dan@denimgroup.com Dan Cornell]
-[mailto:greg.anderson@owasp.org Greg Anderson]
+[mailto:matt.valdes@owasp.org Matt Valdes]  [mailto:michael.xin@owasp.org Michael Xin]
 |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-sanantonio|emailarchives=http://lists.owasp.org/pipermail/owasp-sanantonio}}
 == Local News  ==
-'''OWASP San Antonio - January 26, 2018 @ 11:30am'''
+ Please see https://www.meetup.com/OWASP-San-Antonio/ for the most up to date chapter meeting schedule
-Join us for the January 2017 OWASP San Antonio meeting!
+=== '''OWASP San Antonio - June 29, 2018 @ 11:30am''' ===
 We will have a great talk about heap-related attacks and prevention methods.
@@ Line 36: / Line 91: @@
 San Antonio, TX 78232
-'''OWASP San Antonio - November 17, 2017 @ 11:30am'''
+=== '''OWASP San Antonio - November 17, 2017 @ 11:30am''' ===
 Join us for the November 2017 OWASP San Antonio meeting!
@@ Line 53: / Line 107: @@
 In our physical world, we have instrumentation all around us. Clocks tell us time, kitchen ovens tell us temperature, cars tell us speed and fuel level, and even have onboard health diagnostics. At our homes, we have security alerts when someone trespasses our property or opens a door. However, in the world of software, we have very little visibility into what is going on inside the software. Our presenters will describe how instrumentation can be used to enable your software applications to both detect vulnerabilities and block attacks.  Furthermore, they will demonstrate the insights offered by using instrumentation and why this approach can offer unique insights to your security program.
-@Denim Group Offices
+@Denim Group Offices 1354 N Loop 1604 E Suite 110 San Antonio, TX 78232
-'''OWASP San Antonio - October 27, 2017 @ 11:30am'''
+=== Join us for the October 2017 OWASP San Antonio meeting! ===
 We will have a talk about DNS Exfiltration Techniques and Methods.
@@ Line 79: / Line 129: @@
 San Antonio, TX 78232
+=== '''OWASP San Antonio - September 29, 2017 @ 11:30am''' ===
 Join us for the September 2017 OWASP San Antonio meeting!
@@ Line 616: / Line 664: @@
 :45 - 4:00: Close

@@ Line 10: / Line 10: @@
 == Local News  ==
 '''OWASP San Antonio - November 17, 2017 @ 11:30am'''
@@ Line 198: / Line 224: @@
 https://www.meetup.com/OWASP-San-Antonio/events/236883708/
@@ Line 460: / Line 485: @@
 http://www.meetup.com/OWASP-San-Antonio/events/223970537/
@@ Line 492: / Line 516: @@
 https://github.com/stackforge/opencafe
 https://wiki.openstack.org/wiki/Security/Projects/Bandit
@@ Line 593: / Line 616: @@
 :45 - 4:00: Close

← Older revision		Revision as of 20:44, 26 January 2017
Line 10:		Line 10:

	== Local News ==		== Local News ==
		+	'''OWASP San Antonio - January 27, 2017 @ 11:30am'''
		+
		+
		+	Denim Group
		+	1354 N Loop 1604 E Ste 110, San Antonio, TX
		+
		+
		+	Join us for the January 2017 OWASP San Antonio meeting!
		+
		+
		+	We will have a talk about integrating Security into DevOps pipelines through the use of attack surface monitoring.
		+
		+
		+	Speakers: Dan Cornell
		+
		+
		+	Bios: A globally recognized application security expert, Dan Cornell holds over 15 years of experience architecting, developing and securing web-based software systems. As the Chief Technology Officer and a Principal at Denim Group, Ltd., he leads the technology team to help Fortune 500 companies and government organizations integrate security throughout the development process. He is also the original creator of ThreadFix, Denim Group's industry leading application vulnerability management platform.
		+
		+
		+	Title: Monitoring Application Attack Surface to Integrate Security into DevOps Pipelines
		+
		+
		+	Abstract: A web application’s attack surface is the combination of URLs it will respond to as well as the inputs to those URLs that can change the behavior of the application. Understanding an application’s attack surface is critical to being able to provide sufficient security test coverage, and by watching an application’s attack surface change over time security and development teams can help target and optimize testing activities.
		+
		+	This presentation looks at methods of calculating web application attack surface and tracking the evolution of attack surface over time. In addition, it looks at metrics and thresholds that can be used to craft policies for integrating different testing activities into Continuous Integration / Continuous Delivery (CI/CD)
		+	pipelines for teams integrating security into their DevOps practices.
		+
		+
		+	https://www.meetup.com/OWASP-San-Antonio/events/236883708/
		+
		+
		+

	'''OWASP San Antonio - August 26, 2016 @ 11:30am'''		'''OWASP San Antonio - August 26, 2016 @ 11:30am'''

← Older revision		Revision as of 20:24, 18 August 2016
Line 10:		Line 10:

	== Local News ==		== Local News ==
		+
		+	'''OWASP San Antonio - August 26, 2016 @ 11:30am'''
		+
		+
		+	Denim Group
		+	1354 N Loop 1604 E Ste 110, San Antonio, TX
		+
		+
		+
		+	Join us for the June OWASP San Antonio meeting!
		+
		+
		+	We will have a talk about Automated DNS Data Exfiltration and Mitigation .
		+
		+
		+	Speakers: Nolan Berry, Towne Besel, Cory Schwartz
		+
		+
		+	Bios: Nolan Berry is a Linux Systems Engineer on the Network Operations DNS Infrastructure team at Rackspace.
		+
		+	Towne Besel is a Security Engineer on the Network Operations DDoS Team at Rackspace.
		+
		+	Cory Schwartz is a Linux Operations Engineer on the Rackspace Cloud Storage Team.
		+
		+
		+	Title: Automated DNS Data Exfiltration and Mitigation
		+
		+
		+	Abstract: Come and learn about DNS based data exfiltration and see it in action. We will show you how a few simple scripts we wrote can steal data from a secure network almost without detection using obfuscated DNS lookups. We will cover the concepts, perform a live demo, and show you how to detect this type of malicious activity.
		+
		+	http://www.meetup.com/OWASP-San-Antonio/events/233427790/
		+