This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "OWASP Newsletter 4"
From OWASP
Dinis.cruz (talk | contribs) (→New Documents & Presentations from chapters) |
Dinis.cruz (talk | contribs) (→OWASP projects that need your help) |
||
Line 3: | Line 3: | ||
== 1 OWASP Newsletter #4 == | == 1 OWASP Newsletter #4 == | ||
== OWASP projects that need your help == | == OWASP projects that need your help == | ||
− | + | * [[Top 10 2007|OWASP Top 10 2007 RC1]] - We are opening review of the Top 10 2007 until February 28, 2007. Please review the document and provide feedback to the [email protected] mail list. If you cannot make public submissions or feedback but still wish to make your voice heard, please mail vanderaj (at) owasp.org. '''Please note: This document is not to be used or referenced until after its release.''' | |
+ | * [[OWASP Testing Project v2.0 - Review Guidelines| OWASP Testing Project v2.0]] - Now that the The OWASP Testing Guide v2.0 has reached the 'Release Candidate 1 milestone, the time has come to make sure that everything is 100% and that there is nothing major missing (review process ends on the 10th of Feb). | ||
+ | * Online Questionaires: I (Dinis) want to do a OWASP wide survey, what solution should I use to create, deploy and manage it? | ||
+ | * WordPress guru needed: Our blogs (http://blogs.owasp.org/) still looks miserable. We need somebody to help Mide de Libero to sort it out (and while you're there get a feed to put on owasp.org and the next version of the OWASP newsletter) | ||
* This is not from an OWASP project, but a request I received from an MBA Student who is doing a survey on Open Source (http://www.surveymonkey.com/s.asp?u=387523013251]) | * This is not from an OWASP project, but a request I received from an MBA Student who is doing a survey on Open Source (http://www.surveymonkey.com/s.asp?u=387523013251]) | ||
Revision as of 11:12, 31 January 2007
Using the same format as used in OWASP Newsletter's 1, 2 and 3 this is the page that will be used for the next Newsletter
1 OWASP Newsletter #4
OWASP projects that need your help
- OWASP Top 10 2007 RC1 - We are opening review of the Top 10 2007 until February 28, 2007. Please review the document and provide feedback to the [email protected] mail list. If you cannot make public submissions or feedback but still wish to make your voice heard, please mail vanderaj (at) owasp.org. Please note: This document is not to be used or referenced until after its release.
- OWASP Testing Project v2.0 - Now that the The OWASP Testing Guide v2.0 has reached the 'Release Candidate 1 milestone, the time has come to make sure that everything is 100% and that there is nothing major missing (review process ends on the 10th of Feb).
- Online Questionaires: I (Dinis) want to do a OWASP wide survey, what solution should I use to create, deploy and manage it?
- WordPress guru needed: Our blogs (http://blogs.owasp.org/) still looks miserable. We need somebody to help Mide de Libero to sort it out (and while you're there get a feed to put on owasp.org and the next version of the OWASP newsletter)
- This is not from an OWASP project, but a request I received from an MBA Student who is doing a survey on Open Source (http://www.surveymonkey.com/s.asp?u=387523013251])
4 Featured Project: WebScrab
3 Featured Project: {TBD}
5 Latest additions to the WIKI
5.1 New Pages
- Top 10 2007 - Top 10 2007 RC1 Public Comments & Review page
- Guide to SQL Injection - Article examining the possibility of tampered SQL query data exploiting your database and/or application.
- Member Offers - New offers available for all individual OWASP Members and employees of OWASP Corporate Members.
- Announce:Web Honeynet - Web Honeynet project announcement by SecuriTeam and the ISOTF.
- Code Auditor Workbench Tool - Ideas about a source code analysis tool to aid security consultants
- OWASP News 2006, OWASP Community 2006 - These pages contains OWASP news stories and community events from 2006.
5.2 Updated pages
- Membership - Add reference to the Member Offers page and changed the 'Educational Members' category to be 'Educational and Non-Profit Members'
- SQL Injection - Updated with links to the SQL Injection pages in the OWASP Guide, OWASP Code Review and OWASP Testing Guide
- OWASP Stinger Project - Updated with new release information (2.4 RC1)
- .Net Research Links - Several new CLR links
- Fuzzing
- Testing for SQL Injection , Testing: Information Gathering , Reviewing Code for SQL Injection
- minor edits or comments: Talk:JAAS Tomcat Login Module , (added link to Orizon Blog) , OWASP Stinger 3 Ideas
New Documents & Presentations from chapters
- OWASP Testing Guide Presentation
- OWASP Top 10 2007 RC1.pdf or OWASP Top 10 2007 RC1.doc - the new version of the OWASP Top 10 (Release Candidate 1)
- From the Belgium chapter:
- Jan 07:
- OWASP BE 2007-01-23 OWASP Update.zip - OWASP Update including 2006 poll results
- File:OWASP BE 2007-01-23 AOP security.zip - AOP Security presentation
- Jan 07:
- From the Israel chapter
- Jan 07
- Nov 06 (OWASP IL mini conference):
- Jul 06:
- ValidationQuestionnaire.doc
5.3 Latest Blog entries
5.4 Interesting Discussion Threads
5.5 OWASP Community
- Feb 26-Mar 1 - Black Hat DC
- OWASP members receive a $100 Briefings discount by inserting BH7DCASSOC in the box marked “Coupon Codes”
- Feb 20 (18:00h) - Rochester chapter meeting
- Feb 15 (18:00h) - Seattle chapter meeting
- Feb 15 (18:00h) - Washington DC (MD) chapter meeting
- Feb 15 (18:00h) - Washington DC (N. VA) chapter meeting
- Feb 15 (18:00h) - Seattle chapter meeting
- Feb 14 (18:00h) - Toronto chapter meeting
- Feb 13 (18:00h) - Ireland chapter meeting
- Feb 12 (18:30h) - Switzerland chapter meeting
- Feb 7 (18:30h) - Boston chapter meeting
- Feb 6-7 - Italy@InfoSecurity
- Feb 6 (18:00h) - Melbourne chapter meeting
- Feb 2 (14:00h) - Chennai chapter meeting
- Jan 31 (15:00h) - Mumbai chapter meeting
- Jan 30 (11:30h) - Austin chapter meeting