This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Projects/Reports/2013-23-08"

From OWASP
Jump to: navigation, search
 
(4 intermediate revisions by the same user not shown)
Line 8: Line 8:
 
*'''[https://docs.google.com/spreadsheet/ccc?key=0Amvv_7Gz8Z7TdHZfWGhHZ0Z4UFFwZU42djBXcVVLSlE&usp=sharing New Project Applications]'''
 
*'''[https://docs.google.com/spreadsheet/ccc?key=0Amvv_7Gz8Z7TdHZfWGhHZ0Z4UFFwZU42djBXcVVLSlE&usp=sharing New Project Applications]'''
 
**PHP Portscanner  
 
**PHP Portscanner  
 +
**OWASP Framework Security Project
  
 
*'''Projects Under Review'''
 
*'''Projects Under Review'''
Line 19: Line 20:
 
==Currently Working On==         
 
==Currently Working On==         
  
−
*'''Project Summit: AppSec USA 2013'''
+
*'''[https://docs.google.com/spreadsheet/ccc?key=0AllOCxlYdf1AdEdCYVJpdmZHaWJYZ055WHROa19qN3c&usp=sharing Active Project Audit]'''
−
**I continue to plan the logistics for the project summit taking place at AppSec USA this year.
+
**The Project Audit is now complete.
−
**We are now closer to finalizing the travel arrangements for each project leader.  
+
**I reached out to every project leader listed in our inventory, and asked them to confirm the status of their project.
−
**We are in the process of organizing the schedule of project talks for the conference, as well.
+
**The majority of our Leaders responded, and their project activity status was marked accordingly.
−
**The schedule is filling up, and I hope to have it finalized soon so we can update the conference schedule.  
+
**Those that did not respond were sent 3 messages before their project was marked inactive.
−
**The Project Summit will be taking place in the Sky Room on both conference days.  
+
**Due to the audit, the number of active OWASP Projects in our inventory went down from 169 to 132.  
 +
**I have also created an [https://lists.owasp.org/mailman/listinfo/owasp_project_leader_list OWASP Project Leader Mailing List], and I added all of our confirmed active Leaders to it.  
 +
**The next audit will take place on February 2014.
  
 
*'''Women in AppSec: AppSec USA 2013'''
 
*'''Women in AppSec: AppSec USA 2013'''
−
**The Women in AppSec Planning team is now putting together a process to help select our final candidates.
+
**This week, I met with Dawn-Marie Hutchinson, Head of Information Security at Urban Outfitters.
−
**Additionally, we are putting together a selection committee to help review and select the winning candidates.  
+
**We spoke about her participation in the Women in AppSec Panel.
 +
**Everything is ready to go on her end, and she will reach out to us closer to the date with any logistical questions she may have.  
 +
**Additionally, the Women in AppSec Team are still putting together a selection committee to help review and select the winning candidates.
 +
**[https://docs.google.com/document/d/1BLIM6QpXmCiHdI0zT2YbecmkhEBZqIZt1pGoUXuQxMk/edit?usp=sharing Women in AppSec Program Selection Criteria: 1st Draft].  
 
**We plan on beginning our selection process after the 9th of September once the application deadline has passed.  
 
**We plan on beginning our selection process after the 9th of September once the application deadline has passed.  
 
**[https://docs.google.com/forms/d/1WEtInvzlxLDXpTgfXh-E1E7e8H5FRfEOPIaTOizlBpk/viewform Women in AppSec Application Form.]
 
**[https://docs.google.com/forms/d/1WEtInvzlxLDXpTgfXh-E1E7e8H5FRfEOPIaTOizlBpk/viewform Women in AppSec Application Form.]
Line 34: Line 40:
 
**The deadline for sponsors is Monday, September 09, 2013, as well.   
 
**The deadline for sponsors is Monday, September 09, 2013, as well.   
  
−
*'''Projects at Conferences'''
+
*'''[https://www.owasp.org/index.php/Projects/Internships/Grants_and_Fundraising_Intern Grants & Fundraising Intern]'''
−
**I have been working closely with the local event planners for AppSec EU and AppSec LATAM on this.
+
**I continue to search for a Grants & Fundraising intern.
−
**We are sending one project leader to Germany next week to present his project at AppSec EU.
+
**I currently have 4 applicants for the role, but I would like to get a few more before the deadline.
−
**I have been helping him with his travel and accommodation logistics for the conference, and he is now set to go.  
+
**Application Deadline: Monday August 26 2013 5PM GMT.
−
**Additionally, I helped source two project leaders for the AppSec LATAM conference.
+
**Interviews Scheduled: First Week of September.
−
**They will be speaking about their projects at the event in October.  
+
**Selection Announcement: Monday, September 09th 2013.
−
**I am helping them book their travel and accommodation for the event, as well.
+
**Start Date: Monday, September 16th 2013.
 +
**Internship End Date: Monday, January 13th 2014.
 +
**If you are interested, or know of anyone that might be interested, please contact me at [email protected].  
  
−
*'''Grants for Projects'''
+
*'''Projects in Salesforce'''
−
**I worked on three grant proposals for three of our projects this week.  
+
**I worked closely with Kate this week to figure out a way to better integrate our project data into Salesforce.
−
**One was for the OWASP AppSensor Project, the second was for OpenSAMM, and the third was for the OWTF Project.  
+
**The issue we are having is that many of the primary activities a Project Leader takes part in, happen outside of the wiki and Salesforce.
−
**The project teams did an excellent job of putting their proposals and project plans together.
+
**Moreover, project leaders do not have access to the information in Salesforce about their project.
−
**The deadline was close, but we managed to get all of them submitted in time.
+
**This means that project leaders cannot update, add, or delete information about their projects.
−
**I just want to say thank you to all of the project leaders and contributors that worked on these grant proposals this week.
+
**The end result is that I have to make duplicate data lists, one in Salesforce and one in Google Docs where Leaders can have access to it.
−
**They are very time consuming, and I am grateful we all tackled them on as a team.
+
**Kate is looking into several applications that can help eliminate this duplication, and help with our workflow.
−
**Please see the Project Funding Updates section below for a more detailed look at each proposal.  
 
  
 
*'''Daily Project based queries and requests'''
 
*'''Daily Project based queries and requests'''

Latest revision as of 02:56, 24 August 2013

OWASP Global Projects Report

Currently Working On

  • Active Project Audit
    • The Project Audit is now complete.
    • I reached out to every project leader listed in our inventory, and asked them to confirm the status of their project.
    • The majority of our Leaders responded, and their project activity status was marked accordingly.
    • Those that did not respond were sent 3 messages before their project was marked inactive.
    • Due to the audit, the number of active OWASP Projects in our inventory went down from 169 to 132.
    • I have also created an OWASP Project Leader Mailing List, and I added all of our confirmed active Leaders to it.
    • The next audit will take place on February 2014.
  • Women in AppSec: AppSec USA 2013
    • This week, I met with Dawn-Marie Hutchinson, Head of Information Security at Urban Outfitters.
    • We spoke about her participation in the Women in AppSec Panel.
    • Everything is ready to go on her end, and she will reach out to us closer to the date with any logistical questions she may have.
    • Additionally, the Women in AppSec Team are still putting together a selection committee to help review and select the winning candidates.
    • Women in AppSec Program Selection Criteria: 1st Draft.
    • We plan on beginning our selection process after the 9th of September once the application deadline has passed.
    • Women in AppSec Application Form.
    • The application deadline is Monday, September 09, 2013 at 5pm GMT.
    • The deadline for sponsors is Monday, September 09, 2013, as well.
  • Grants & Fundraising Intern
    • I continue to search for a Grants & Fundraising intern.
    • I currently have 4 applicants for the role, but I would like to get a few more before the deadline.
    • Application Deadline: Monday August 26 2013 5PM GMT.
    • Interviews Scheduled: First Week of September.
    • Selection Announcement: Monday, September 09th 2013.
    • Start Date: Monday, September 16th 2013.
    • Internship End Date: Monday, January 13th 2014.
    • If you are interested, or know of anyone that might be interested, please contact me at [email protected].
  • Projects in Salesforce
    • I worked closely with Kate this week to figure out a way to better integrate our project data into Salesforce.
    • The issue we are having is that many of the primary activities a Project Leader takes part in, happen outside of the wiki and Salesforce.
    • Moreover, project leaders do not have access to the information in Salesforce about their project.
    • This means that project leaders cannot update, add, or delete information about their projects.
    • The end result is that I have to make duplicate data lists, one in Salesforce and one in Google Docs where Leaders can have access to it.
    • Kate is looking into several applications that can help eliminate this duplication, and help with our workflow.
  • Daily Project based queries and requests
    • This has not changed much since I began the post: questions are very similar in nature.
    • Global AppSec questions.
    • Funding queries.
    • Travel availability.
    • Project based administrative help.
    • Project status information.
    • Several project donation questions.
    • Marketing questions.
    • Grant funding questions.
    • OWASP social media updates.
    • What's happening with projects, questions.

Project Funding Updates

  • OWASP OWTF Project: Brucon 5x5 Award
  1. Amount: €5,000.00 (Approx. $6,670.00)
  2. Status: Awarded. Congratulations, Abraham Aranguren and all involved in the project, for your award.
  1. Amount: $55,800 USD
  2. Status: This proposal is complete, and has been submitted.
  1. Amount: $15,000 USD
  2. Status: This proposal is complete, and has been submitted.
  1. Amount: $112,000 USD
  2. Status: This proposal is complete, and has been submitted.
  1. Amount: $25,000 USD
  2. Status: Awarded. The first payment has been allocated to our project budgets. The second invoice has now been sent to Georgia Tech for payment.
  3. OWASP Development Guide Plan
  4. OWASP Testing Guide Plan
  5. OWASP Code Review Guide Plan
  1. Amount: $25,000 USD
  2. Status: The ESAPI proposal is still being reviewed.
  1. Amount: $30,000 USD
  2. Status: The ModSecurity proposal is still being reviewed.
  • Google Grants Proposal
  1. Amount: $120,000 USD in Adwords Funds
  2. Status: Awarded.
  3. Note: There is no link to show the proposal for this grant. There was a form that was submitted to Google, and we did not receive a record of this form.
  • European Commission Grant Proposal
  1. Amount: €250,000
  2. Status: Denied.
  • Google Summer of Code
  1. Amount: $5,500
  2. Status: Awarded
  • Projects breakdown:
    • 4 ZAP Projects: $2,000
    • 4 OWTF Projects: $2,000
    • 1 PHP Security Project: $500
    • 1 Hackademics Project: $500
    • 1 Modsecurity Project: $500
    • Note: Big thank you to Fabio Cerullo for coordinating and managing this award.


  • Total Funds Awarded: $157,170 USD for 2013.
Retrieved from "https://wiki.owasp.org/index.php?title=Projects/Reports/2013-23-08&oldid=157283"