Difference between revisions of "Omaha"

Revision as of 13:24, 18 May 2014

OWASP Omaha

Welcome to the Omaha chapter homepage. The chapter leaders are John Rogers, Zac Fowler, Rob Temple, and Fred Donovan.

Participation

OWASP Foundation (Overview Slides) is a professional association of global members and is open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.

Sponsorship/Membership

to this chapter or become a local chapter supporter. Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member?

Chapter Meetings

Everyone is welcome to join us at our chapter meetings!

Follow us on Twitter! https://www.twitter.com/owaspomaha

Typically, we meet at UNO's Peter Kiewit Institute over the noon hour during the last month of each quarter.

We also use Google+ Hangouts OnAir to stream our presentations live!

Past Events

Thu Mar 7, 2013 - Welcome to OWASP Omaha!

-Presenters, OWASP Omaha Chapter Leadership
-Thursday, March 7th, 12:00 noon - 1:00 P.M., Bellevue University
-Durham Student Center (building #6). Park in Lot D. Check out the map here: [1].
-Meet the chapter leaders and learn more about OWASP Omaha

Thu Jun 6, 2013 - Web Application Security - So many tools, so little time

Presenter, John M. Rogers, Senior Application Security Engineer, Lincoln Financial Group

This talk focuses on the first three candidates of the 2013 OWASP Top 10. John will demonstrate attack examples, common tools to find these flaws, and consequences that occur without remediation or mitigating controls.

John Rogers is a Senior Application Security Engineer working in the Security Assurance department at Lincoln Financial Group.  Previously John worked as a Lead Security Engineer at ACI Worldwide, Inc.  John is one of the unique Application Security Professionals with over 20 years of experience in all aspects of the Software Development Lifecycle (SDLC) for the Banking, Payment and Financial Services industries.  John is also a Certified Information Systems Security Professional (CISSP) and serves as President of InfraGard Nebraska

Time & Location: Thursday, June 6, 12PM. Peter Kiewit Institute, Room 279. (67th and Pacific in Omaha) RSVP and view more details on our EventBrite page: https://www.eventbrite.com/event/6952516163

Thu Sep 12, 2013 - The OWASP Way: Understanding the OWASP Vision and the Top Ten

Presenter, Scott Christiansen, Software Security Engineer, TD Ameritrade

Scott a Software Security Engineer for TD Ameritrade.  In this role he provides static and dynamic application assessments for over 250 TD Ameritrade front end, back end and mobile applications.  Prior to this Scott was the Lead Analyst for TD Ameritrade’s Security Event Center which coordinates incident response within TD Ameritrade.  In addition to this Scott is also an Adjunct Instructor for ITT Technical Institute’s Bachelors of Information Security program, and an adjunct Professor for Bellevue University’s Masters of Cyber Security Program.  Prior to his current role with Scott was the Chief Security Officer for the Leo A Daly Company.  Scott is also a Past President of Nebraska InfraGard, and a graduate of the FBI Citizen’s Academy.  Scott received his Bachelor’s Degree in 2003 from Bellevue University in Business Information Systems and his Master’s Degree from the University of Nebraska Omaha in the Management of Information Systems.  Upon Graduation Scott was the recipient of the 2007-2008 Outstanding Graduate Student in Information Systems & Quantitative Analysis.  Scott is a current CISSP holder in addition to numerous other certification’s from CompTIA and Microsoft.

Time & Location: Thursday, Sept 12th, 12PM. TriPointe Coffeehouse, http://tripointecoffeehouse.com/, 138 N. Washington Street Papillion, NE 68046

Download Scott's Slides

Thu Dec 5, 2013 - Mobile Application Security Assessments

Presenter, Michael Born, Solutionary

As the world becomes increasingly more 'connected', our digital lives get transmitted through various types of applications including mobile devices. Besides that, the bring your own device debate among security professionals within corporate enterprise environments, maintaining confidentiality, availability, and integrity of data transmitted through these devices must be a continued focus of the security community.

In this presentation, Michael Born, an Associate Security Consultant with Solutionary will walk through a step by step demonstration of setting up and performing a mobile application security assessment on both Android and iOS. Included in the presentation will be an example iOS Security Assessment performed by Michael along with a hands on walk through of a Jailbroken iOS device file system.

Check out a warm-up video at our youtube channel: http://www.youtube.com/watch?v=VRnj816ec-8. This video walks through some set up step so that we're on the same page for the presentation!

-Peter Kiewit Institute, 1110 S. 67th Street, Omaha, NE 68182, Room 279. 12:00 - 1:00 PM. The room will open at 11:45AM.
-Pizza will be provided on a first-come first-serve basis
-UNO has open parking that week, so you will not need to worry about obtaining a pass.

RSVP on EventBrite</b> at http://www.eventbrite.com/e/mobile-application-security-assessments-tickets-9326244047?aff=eorg

Thu Mar 13, 2014 - Vetting Third Party Vendor Applications

Presenter: John Rogers
This presentation will discuss how to acquire and validate information that will provide assurance that your third party vendor applications adhere to your standards and are free from the common web application vulnerabilities. The discussion will also include what basic requirements are needed to accept a web application security assessment report from an independent security assessment firm.

John will hit points covering:
- 3rd Party Vendor Assessment Requirements - 3rd Party Vendor Assessment Public Facing Document - 3rd Party Vendor Application Security Standards

Location: -Peter Kiewit Institute, 1110 S. 67th Street, Omaha, NE 68182, Room 350.
Time: 12:00 - 1:00 PM. The room will open at 11:45AM.

RSVP on EventBrite at https://www.eventbrite.com/e/vetting-third-party-vendor-applications-tickets-9617944531 </b>

Parking: Email [email protected] for a parking pass for the talk. **A copy was attached on the reminder sent to OWASP Omaha mailing list -- check your inbox.

Screencast: Google+ Hangout link will be posted prior to start via OWASP Omaha mailing list and twitter feed. Here's the link: http://youtu.be/Z5gcT53Wydc

""Files"": You can download the files from this presentation here: https://drive.google.com/folderview?id=0B4t_HSHrO2GxZ1N6OUxVYXE2Q2M&usp=sharing

Sat Mar 29 2014 - Web Application Security - So many tools, so little time Redux

Presenter, John M. Rogers, Senior Application Security Engineer, Lincoln Financial Group

Location: Nebraska Code Camp 2014

This talk focuses on the first three candidates of the 2013 OWASP Top 10. John will demonstrate attack examples, common tools to find these flaws, and consequences that occur without remediation or mitigating controls.

John Rogers is a Senior Application Security Engineer working in the Security Assurance department at Lincoln Financial Group.  Previously John worked as a Lead Security Engineer at ACI Worldwide, Inc.  John is one of the unique Application Security Professionals with over 20 years of experience in all aspects of the Software Development Lifecycle (SDLC) for the Banking, Payment and Financial Services industries.  John is also a Certified Information Systems Security Professional (CISSP) and serves as President of InfraGard Nebraska

Note: This is a talk at the Nebraska Code Camp - http://nebraskacodecamp.com

Upcoming Events

Thu June 12, 2014 - PCI 3.0 and OWASP

Location: -Peter Kiewit Institute, 1110 S. 67th Street, Omaha, NE 68182, Room TBA.
Time: 12:00 - 1:00 PM. The room will open at 11:45AM.