Difference between revisions of "OWASP Newsletter 4"

Revision as of 03:29, 31 January 2007

Using the same format as used in OWASP Newsletter's 1, 2 and 3 this is the page that will be used for the next Newsletter

1 OWASP Newsletter #4

OWASP projects that need your help

• This is not from an OWASP project, but a request I received from an MBA Student who is doing a survey on Open Source (http://www.surveymonkey.com/s.asp?u=387523013251])

4 Featured Project: WebScrab

3 Featured Project: {TBD}

5 Latest additions to the WIKI

5.1 New Pages

• Top 10 2007 - Top 10 2007 RC1 Public Comments & Review page
• Guide to SQL Injection - Article examining the possibility of tampered SQL query data exploiting your database and/or application.
• Member Offers - New offers available for all individual OWASP Members and employees of OWASP Corporate Members.
• Announce:Web Honeynet - Web Honeynet project announcement by SecuriTeam and the ISOTF.
• Code Auditor Workbench Tool - Ideas about a source code analysis tool to aid security consultants
• OWASP News 2006, OWASP Community 2006 - These pages contains OWASP news stories and community events from 2006.

5.2 Updated pages

• Membership - Add reference to the Member Offers page and changed the 'Educational Members' category to be 'Educational and Non-Profit Members'
• SQL Injection - Updated with links to the SQL Injection pages in the OWASP Guide, OWASP Code Review and OWASP Testing Guide
• OWASP Stinger Project‎ - Updated with new release information (2.4 RC1)
• .Net Research Links - Several new CLR links
• Fuzzing
• Testing for SQL Injection , Testing: Information Gathering
• minor edits or comments: Talk:JAAS Tomcat Login Module , (added link to Orizon Blog) , OWASP Stinger 3 Ideas

New Documents & Presentations from chapters

• OWASP Testing Guide Presentation

• From the Israel Chapter
  • Jan 07
    • of the Universal XSS PDF vulnerability - Cause, Solutions and Fun Stuff
  • Nov 06 (OWASP IL mini conference):
    • Malicious content in enterprise portals
    • Real vs. Virtual Patching
    • "The Core Rule Set": Generic detection of application layer attacks
    • The OWASP Top Ten Backdoors
    • Hacking The Framework
  • Jul 06:
    • Exposing cryptography for software developers
    • Preventing Spoofing, Phishing and Spamming by Secure Usability and Cryptography
• ValidationQuestionnaire.doc

5.3 Latest Blog entries

5.4 Interesting Discussion Threads

5.5 OWASP Community

• Feb 26-Mar 1 - Black Hat DC

OWASP members receive a $100 Briefings discount by inserting BH7DCASSOC in the box marked “Coupon Codes”

• Feb 20 (18:00h) - Rochester chapter meeting
• Feb 15 (18:00h) - Seattle chapter meeting
• Feb 15 (18:00h) - Washington DC (MD) chapter meeting
• Feb 15 (18:00h) - Washington DC (N. VA) chapter meeting
• Feb 15 (18:00h) - Seattle chapter meeting
• Feb 14 (18:00h) - Toronto chapter meeting
• Feb 13 (18:00h) - Ireland chapter meeting
• Feb 12 (18:30h) - Switzerland chapter meeting
• Feb 7 (18:30h) - Boston chapter meeting
• Feb 6-7 - Italy@InfoSecurity
• Feb 6 (18:00h) - Melbourne chapter meeting
• Feb 2 (14:00h) - Chennai chapter meeting
• Jan 31 (15:00h) - Mumbai chapter meeting
• Jan 30 (11:30h) - Austin chapter meeting

5.6 Application Security News

6 OWASP references in the Media