User:Jeff Williams - Revision history

Jeff Williams at 20:56, 4 October 2015

2015-10-04T20:56:09Z

Jeff Williams at 20:48, 4 October 2015

2015-10-04T20:48:45Z

Jeff Williams at 18:35, 19 January 2015

2015-01-19T18:35:41Z

KateHartmann: Removed protection from "User:Jeff Williams"

2015-01-19T18:13:24Z

Removed protection from "User:Jeff Williams"

Jmanico: Fixed error regarding credit for CSRFGuard, that was eric Sheridan's work

2012-07-20T01:45:39Z

Fixed error regarding credit for CSRFGuard, that was eric Sheridan's work

Jeff Williams at 05:25, 16 March 2012

2012-03-16T05:25:47Z

Jeff Williams at 18:58, 17 May 2010

2010-05-17T18:58:41Z

Jeff Williams at 19:20, 18 February 2010

2010-02-18T19:20:44Z

Jeff Williams at 19:17, 18 February 2010

2010-02-18T19:17:49Z

Jeff Williams at 20:55, 8 October 2009

2009-10-08T20:55:57Z

← Older revision		Revision as of 20:56, 4 October 2015
Line 1:		Line 1:
−	I'm Jeff Williams, I'm the CTO of ~~both~~ [http://contrastsecurity.com Contrast Security]. I helped found OWASP, created the OWASP Foundation 501c3, and served as the volunteer Chair of the OWASP Foundation from 2003 to 2012. I’ve dedicated my life to trying to make the world’s software more secure, and so I create lots of free and open tools, libraries, guidance, and standards to try to change the status quo. Thank you all for your dedication to application security and your participation in OWASP. Please send any questions or comments to me via email at [mailto:jeff.williams@contrastsecurity.com jeff.williams@contrastsecurity.com]. Or you can twitter @planetlevel.	+	I'm Jeff Williams, I'm the CTO and cofounder of [http://contrastsecurity.com Contrast Security]. Contrast is not a scanner or static analysis tool. Instead, Contrast uses software instrumentation to both find vulnerabilities and block attacks. The instrumentation approach provides access to not only the code and HTTP traffic, but also full data flow, control flow, configuration, libraries and frameworks, architecture, and much more. This wealth of information yields incredible accuracy. And that's not all... because Contrast runs in parallel and provides results in real time, you can provide security at [http://www.contrastsecurity.com/jeff-williams-appsec-at-devops-speed-and-portfolio-scale devops speed and portfolio scale].
		+
		+	in the early 2000's, I helped found OWASP, created the OWASP Foundation 501c3, and served as the volunteer Chair of the OWASP Foundation from 2003 to 2012. I’ve dedicated my life to trying to make the world’s software more secure, and so I create lots of free and open tools, libraries, guidance, and standards to try to change the status quo. Thank you all for your dedication to application security and your participation in OWASP. Please send any questions or comments to me via email at [mailto:jeff.williams@contrastsecurity.com jeff.williams@contrastsecurity.com]. Or you can twitter @planetlevel.

	last revised {{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}		last revised {{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}

@@ Line 1: / Line 1: @@
-I'm Jeff Williams, I'm the CTO of both [http://contrastsecurity.com Contrast Security] and [http://aspectsecurity.com Aspect Security]. I helped found OWASP, created the OWASP Foundation 501c3, and served as the volunteer Chair of the OWASP Foundation from 2003 to 2012. I’ve dedicated my life to trying to make the world’s software more secure, and so I create lots of free and open tools, libraries, guidance, and standards to try to change the status quo. Thank you all for your dedication to application security and your participation in OWASP. Please send any questions or comments to me via email at [mailto:jeff.williams@contrastsecurity.com jeff.williams@contrastsecurity.com]. Or you can twitter @planetlevel.
+I'm Jeff Williams, I'm the CTO of both [http://contrastsecurity.com Contrast Security]. I helped found OWASP, created the OWASP Foundation 501c3, and served as the volunteer Chair of the OWASP Foundation from 2003 to 2012. I’ve dedicated my life to trying to make the world’s software more secure, and so I create lots of free and open tools, libraries, guidance, and standards to try to change the status quo. Thank you all for your dedication to application security and your participation in OWASP. Please send any questions or comments to me via email at [mailto:jeff.williams@contrastsecurity.com jeff.williams@contrastsecurity.com]. Or you can twitter @planetlevel.
 last revised {{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}
@@ Line 44: / Line 44: @@
 Then in 1998, while I was the technical director of the Global Security Practice at Exodus Communications, a Fortune 10 company approached us and said “We’d like to host our applications with you, but we have this rule – every line of code has to be reviewed before it goes on the Internet.” So I started an application security practice and started providing application assessments, developer training, and help with security requirements and architecture. We built a successful practice securing some of the biggest and most complex web applications in the world.
-In April 2002, together with Dave Wichers, Noelle Hardy, and some other great folks, I started Aspect Security to focus exclusively on application security. I just feel so fortunate to get to work with such an amazing group of consultants and customers. I’m having the most fun of my professional career.
+In April 2002, together with Dave Wichers, Noelle Hardy, and some other great folks, I started [http://aspectsecurity.com Aspect Security] to focus exclusively on application security. I just feel so fortunate to work with such an amazing group of consultants and customers. I’m having the most fun of my professional career.
 I first heard of OWASP in 2001 from Chuck Pfleeger (the author of Security in Computing). The idea of a free and open community for application security was an interesting idea. At the time, getting companies to focus on application security was difficult. In meetings with several government agencies, they acknowledged that it was an issue, but that they were managing to the SANS Top 20. I came home and literally in the shower said to myself, “I wish we had an application security top ten…” So a small team of us at Aspect took the lead in drafting the first OWASP Top Ten.

@@ Line 1: / Line 1: @@
-I'm Jeff Williams, I work as CEO of [http://www.aspectsecurity.com Aspect] [https://www.aspectsecurity.com Security] and I served as the volunteer Chair of the OWASP Foundation from 2003 to 2012. I’ve dedicated my life to trying to make the world’s software more secure, and so I create lots of free and open tools, libraries, guidance, and standards to try to change the status quo. Thank you all for your dedication to application security and your participation in OWASP. Please send any questions or comments to me via email at [mailto:jeff.williams@aspectsecurity.com jeff.williams@aspectsecurity.com]. Or you can twitter @planetlevel.
+I'm Jeff Williams, I'm the CTO of both [http://contrastsecurity.com Contrast Security] and [http://aspectsecurity.com Aspect Security]. I helped found OWASP, created the OWASP Foundation 501c3, and served as the volunteer Chair of the OWASP Foundation from 2003 to 2012. I’ve dedicated my life to trying to make the world’s software more secure, and so I create lots of free and open tools, libraries, guidance, and standards to try to change the status quo. Thank you all for your dedication to application security and your participation in OWASP. Please send any questions or comments to me via email at [mailto:jeff.williams@contrastsecurity.com jeff.williams@contrastsecurity.com]. Or you can twitter @planetlevel.
 last revised {{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}
-Some of my work (in roughly reverse chronological order)
+I'm particularly proud of this free tool that uses instrumentation to find vulnerabilities. Far easier to use and more accurate than static (SAST) or dynamic analysis (DAST) scanners.
-* Enterprise Java Rootkits - http://www.aspectsecurity.com/documents/EnterpriseJavaRootkits.zip
+* FREE tool - Contrast for Eclipse - http://marketplace.eclipse.org/content/contrast-eclipse
-* XSS-Proofing Your JavaEE, JSP, and JSP Applications - http://developers.sun.com/learning/javaoneonline/j1sessn.jsp?sessn=TS-4374&yr=2009&track=javaee
-    I'm an official [http://java.sun.com/javaone/2009/rockstars.jsp Java Rock Star]!
+Also please read the "Continuous Security Handbook" which reinterprets application security for high-speed DevOps environments.
 * XSS Prevention Cheatsheet – http://www.owasp.org/index.php/XSS_(Cross_Site_Scripting)_Prevention_Cheat_Sheet
 * Java EE ClickJack Filter - http://www.owasp.org/index.php/ClickjackFilter_for_Java_EE

@@ Line 15: / Line 15: @@
 * Application Security Risk Rating Model - http://www.owasp.org/index.php/OWASP_Risk_Rating_Methodology
 * CSRF Tester Tool - http://www.owasp.org/index.php/Category:OWASP_CSRFTester_Project
 * How to Write Insecure Code - http://www.owasp.org/index.php/How_to_write_insecure_code
 * Java Stinger Validation Library - http://www.owasp.org/index.php/Category:OWASP_Stinger_Project

← Older revision		Revision as of 05:25, 16 March 2012
Line 1:		Line 1:
−	I'm Jeff Williams, I work as CEO of [http://www.aspectsecurity.com Aspect] [https://www.aspectsecurity.com Security] and I ~~serve~~ as the volunteer Chair of the OWASP Foundation. I’ve dedicated my life to trying to make the world’s software more secure, and so I create lots of free and open tools, libraries, guidance, and standards to try to change the status quo. Thank you all for your dedication to application security and your participation in OWASP. Please send any questions or comments to me via email at [mailto:jeff.williams@~~owasp~~.~~org~~ jeff.williams@~~owasp~~.~~org~~]. Or you can twitter @planetlevel.	+	I'm Jeff Williams, I work as CEO of [http://www.aspectsecurity.com Aspect] [https://www.aspectsecurity.com Security] and I served as the volunteer Chair of the OWASP Foundation from 2003 to 2012. I’ve dedicated my life to trying to make the world’s software more secure, and so I create lots of free and open tools, libraries, guidance, and standards to try to change the status quo. Thank you all for your dedication to application security and your participation in OWASP. Please send any questions or comments to me via email at [mailto:jeff.williams@aspectsecurity.com jeff.williams@aspectsecurity.com]. Or you can twitter @planetlevel.

	last revised {{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}		last revised {{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}

← Older revision	Revision as of 18:13, 19 January 2015
(No difference)

@@ Line 51: / Line 51: @@
 We’re still a long way from the point where a company can go to OWASP for everything they need in order to build, acquire, and operate secure applications… but we’ve got an incredible process and we’re working very hard to get there.
-I have a wonderful wife Jennifer and three kids, Chance (12), Zack (10), Zoe (3), and Tyler (1). We live in the woods and spend a lot of time outside with our two Labrador retrievers. I’m very much into sports – I rowed on the crew team at U.Va. and still play basketball three times a week. For a while I was into extreme rollerblading and then I got into mountain bike trials – I broke a lot of equipment, but never had any serious injuries :)"
+I have big family and absolutely love my kids. We live in the woods and spend a lot of time outside with our two Labrador retrievers. I’m very much into sports – I rowed on the crew team at UVA and still play basketball three times a week (if you meet me you'll know why). For a while I was into extreme rollerblading and then I got into mountain bike trials – I broke a lot of equipment, but never had any serious injuries :)"
 ==Articles / Presentations==

@@ Line 14: / Line 14: @@
 * CSRF Tester Tool - http://www.owasp.org/index.php/Category:OWASP_CSRFTester_Project
 * CSRF Guard -  http://www.owasp.org/index.php/CSRF_Guard
 * Java Stinger Validation Library - http://www.owasp.org/index.php/Category:OWASP_Stinger_Project
 * Application Security Contract Annex - http://www.owasp.org/index.php/OWASP_Secure_Software_Contract_Annex