This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Switzerland"

From OWASP
Jump to: navigation, search
m (added info link to August meeting)
m
 
(86 intermediate revisions by 3 users not shown)
Line 7: Line 7:
 
Welcome to the Home Page of the OWASP Switzerland Chapter.  
 
Welcome to the Home Page of the OWASP Switzerland Chapter.  
  
*The chapter leader is [mailto:sven.vetsch__AT__owasp.org Sven Vetsch] supported by the members of the board [mailto:antonio.fontes__AT__owasp.org Antonio Fontes] and [mailto:alexis.fitzgerald__AT__owasp.org Alexis FitzGerald]. Please contact us with any questions about the chapter.
+
*If you want to give a talk, provide a venue or in case of other questions regarding this chapter - just ping one of our '''Chapter Leaders: [mailto:sven.vetsch@owasp.org Sven Vetsch] and [mailto:robert.schneider@owasp.org Robert Schneider].'''
*Please subscribe to the [https://lists.owasp.org/mailman/listinfo/owasp-switzerland mailing list] for meeting announcements and other news related to OWASP in Switzerland.  
+
 
*You can follow us on [https://twitter.com/owasp_ch Twitter] and [https://www.facebook.com/OWASPSwitzerland Facebook]
+
*Please join us on [https://www.meetup.com/de-DE/OWASPSwitzerland/ Meetup] and/or subscribe to our (low-traffic) [https://groups.google.com/a/owasp.org/forum/#!forum/switzerland-chapter mailing list] for meeting announcements and other news related to OWASP in Switzerland.  
  
 
<br> If you're living in the French speaking part of Switzerland, please also visit the '''[[Geneva|OWASP Geneva chapter]]''' for more information.  
 
<br> If you're living in the French speaking part of Switzerland, please also visit the '''[[Geneva|OWASP Geneva chapter]]''' for more information.  
  
 
= Next Meetings  =
 
= Next Meetings  =
Please find below the planned dates for the upcoming OWASP Switzerland Meetings:
+
Please see our list of upcoming meetings on Meetup:
* '''Wednesday, August 20th 2014''' (more information can be found [http://lists.owasp.org/pipermail/owasp-switzerland/2014-August/000279.html here])
+
[[Image:Meetup-button.png|left|alt=See our planned meeting and register for them here|link=https://www.meetup.com/de-DE/OWASPSwitzerland/]]
* Tuesday, October 21th 2014
 
* Wednesday, December 10th 2014
 
 
 
<!--
 
 
<br>
 
<br>
----
 
 
<br>
 
<br>
'''Tuesday, June 17th 2014'''<br>
 
We'd like to invite you to the third of six OWASP Switzerland meetings in 2014. Please make sure to [http://doodle.com/f4affysew6upxa8c register] for the event.
 
* When:
 
*:Tuesday, June 17th 2014
 
*:Starting at 18:00
 
*:Doors at 17:30
 
 
* What:
 
*:'''XSS and beyond''' (''René Freingruber, SEC Consult [[Image:person.png|20px|link=https://www.sec-consult.com/]]'')
 
*:Cross-Site Scripting (XSS) vulnerabilities are one of the most seen vulnerability categories nowadays. Unfortunately, these vulnerabilities are often underestimated, e.g. because an attacker cannot directly compromise the database or webserver by exploiting them. Instead it’s possible to execute JavaScript code in the context of a user session allowing to steal session cookies, start key-logging, and so on. This talk goes beyond these basic attacks and shows the audience how it’s possible for attackers to completely compromise client systems by exploiting vulnerabilities in browsers. On the basis of real world vulnerabilities, attacks against browsers running on an older operating system (e.g. Windows XP) will be demonstrated. Current operating systems (like Windows 8.1) have implemented lots of mitigation techniques in order to prevent attackers from exploiting such vulnerabilities. During the talk the most important mitigation techniques will be explained. In addition, possible bypasses will be given. At the end of the presentation a real world Firefox exploit, which works reliable against all major Windows versions (including Windows 8.1 and Windows Server 2012), fully bypasses ASLR/DEP (without depending on java6), does not use heapspray and doesn’t crash the browser will be shown to demonstrate that such attacks are still possible and mitigation techniques can be bypassed.
 
 
* Where:
 
*:Credit Suisse
 
*:Europaallee 1
 
*:8004 Zürich
 
*:[https://www.google.ch/maps/search/Credit+Suisse+Europaallee+1+8004+Zürich Arrival]
 
 
* Who:
 
*:As usual, all of our meetings are open to everyone and free of charge.
 
 
* Agenda
 
*:18:00 – 18:15 | Intro and Update on OWASP by Sven Vetsch, OWASP Switzerland [[Image:person.png|20px|link=User:Disenchant]]
 
*:18:20 – 19:30 | XSS and beyond by René Freingruber, SEC Consult [[Image:person.png|20px|link=https://www.sec-consult.com/]]
 
*:20:00 – **:** | Dinner
 
-->
 
 
<!--Fore this year we are planning to serve you with six meetings. The first one will take place in February.<br>
 
Keep yourself informed and up-to-date by using one of the possibilities listed below. -->
 
<!-- There are no planned meetings for 2015 yet. Keep yourself informed and up-to-date by subscribing to our (low-traffic) [https://lists.owasp.org/mailman/listinfo/owasp-switzerland mailinglist]. -->
 
  
 
= Past Meetings  =
 
= Past Meetings  =
Line 70: Line 36:
 
-->
 
-->
  
 +
Please see our list of past meetings on Meetup:
 +
[[Image:Meetup-button.png|left|alt=See our past meeting and register for them here|link=https://www.meetup.com/de-DE/OWASPSwitzerland/]]
 +
<br>
 +
<br>
 +
<br>
 +
<br>
 +
 +
Previous meetings "prior" Meetup:
 
{| class="wikitable sortable" border="0"
 
{| class="wikitable sortable" border="0"
 
|-
 
|-
 
! scope="col" | Date
 
! scope="col" | Date
! scope="col" class="unsortable" | Info
 
 
! scope="col" class="unsortable" | Speaker
 
! scope="col" class="unsortable" | Speaker
 
! scope="col" class="unsortable" | Host
 
! scope="col" class="unsortable" | Host
Line 79: Line 52:
 
! scope="col" | Event
 
! scope="col" | Event
 
! scope="col" | Topic
 
! scope="col" | Topic
 +
|-
 +
|2017-08-16
 +
|<center>[[Image:person.png|20px|link=http://www.christian-folini.ch/]]</center>
 +
|<center>[[Image:location.png|20px|link=https://www.swisscom.ch/]]</center>
 +
|<center>[[Image:slides.png|20px|link=File:20170816-Introducing_the_OWASP_ModSecurity_Core_Rule_Set_3-Christian_Folini.pdf]]</center>
 +
|Chapter Meeting
 +
|Introducing the OWASP ModSecurity Core Rule Set 3.0
 +
|-
 +
| 2016-10-04
 +
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Florian_Badertscher]]</center>
 +
| <center>[[Image:location.png|20px|link=https://www.swissre.com/]]</center>
 +
| <center>[[Image:slides.png|20px|link=File:20161004-Bug_Bounty_progams_in_Switzerland-Florian_Badertscher.pdf]]</center>
 +
| Chapter Meeting
 +
| Bug Bounty programs in Switzerland?
 +
|-
 +
| 2016-06-07
 +
| <center>[[Image:person.png|20px|link=https://twitter.com/fenceposterror]]</center>
 +
| <center>[[Image:location.png|20px|link=https://www.swisscom.ch/]]</center>
 +
| <center>[[Image:slides.png|20px|link=File:20160607-xssi-the_tale_of_a_fameless_but_widepsread_vulnerability-Veit_Hailperin.pdf]]</center>
 +
| Chapter Meeting
 +
| XSSI - The Tale of a Fameless but Widespread Vulnerability
 +
|-
 +
| 2015-12-15
 +
| <center>[[Image:person.png|20px|link=http://intothesymmetry.blogspot.ch/]]<br>[[Image:person.png|20px|link=https://www.xing.com/profile/Pascal_Buchbinder]]</center>
 +
| <center>[[Image:location.png|20px|link=https://www.liip.ch/]]</center>
 +
| <center>[[Image:slides.png|20px|link=File:20151215-Top_X_OAuth_2_Hacks-asanso.pdf]]<br>[[Image:slides.png|20px|link=File:20151215-Reliable_log_data_transfer-Pascal_Buchbinder.pdf]]</center>
 +
| Chapter Meeting
 +
| Top X OAuth 2 Hacks<br>Reliable log data transfer: about syslog, logstash and log data signing
 +
|-
 +
| 2015-10-14
 +
| <center>[[Image:person.png|20px|link=https://twitter.com/blitzfranklyn]]</center>
 +
| <center>[[Image:location.png|20px|link=https://www.ergon.ch/]]</center>
 +
| <center>[[Image:slides.png|20px|link=File:20151014-Application_Security_Testing_by_Static_Code_Analysis-blitzfranklyn.pdf]]</center>
 +
| Chapter Meeting
 +
| Application Security Testing by Static Code Analysis
 +
|-
 +
| 2015-08-19
 +
| <center>[[Image:person.png|20px|link=]][[Image:person.png|20px|link=]][[Image:person.png|20px|link=]][[Image:person.png|20px|link=]]</center>
 +
| <center>[[Image:location.png|20px|link=https://www.swisscom.ch/]]</center>
 +
|
 +
| Chapter Meeting
 +
| BarCamp
 +
|-
 +
| 2015-06-17
 +
| <center>[[Image:person.png|20px|link=http://eprints.hsr.ch/414/]][[Image:person.png|20px|link=http://eprints.hsr.ch/414/]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.csnc.ch/]]</center>
 +
| <center>[[Image:slides.png|20px|link=File:OWASP_Switzerland_Meeting_2015-06-17_XSLT_SSRF_ENG.pdf]]</center>
 +
| Chapter Meeting
 +
| XSLT Processing Security and Server Side Request Forgeries
 +
|-
 +
| 2015-04-15
 +
| <center>[[Image:person.png|20px|link=http://www.floyd.ch/]]</center>
 +
| <center>[[Image:location.png|20px|link=https://www.credit-suisse.com/ch/]]</center>
 +
| <center>[[Image:slides.png|20px|link=File:20150415-Android_apps_in_sheeps_clothing-Tobias_Ospelt-modzero.pdf]]</center>
 +
| Chapter Meeting
 +
| Android apps in sheep's clothing
 +
|-
 +
| 2015-02-18
 +
| <center>[[Image:person.png|20px|link=https://miki.it/]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.swisscom.com/]]</center>
 +
| <center>[[Image:slides.png|20px|link=File:20150218-Abusing_JSONP_with_Rosetta_Flash-miki.it.pdf]]</center>
 +
| Chapter Meeting
 +
| Abusing JSONP with Rosetta Flash
 +
|-
 +
| 2014-12-10
 +
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.vorbahnhof.ch/]]</center>
 +
|
 +
| Chapter Meeting
 +
| OWASP Switzerland Fondue
 +
|-
 +
| 2014-11-12
 +
| <center>[[Image:person.png|20px|link=http://www.christian-folini.ch/]]</center>
 +
| <center>[[Image:location.png|20px|link=https://www.open.ch/]]</center>
 +
| <center>[[Image:slides.png|20px|link=File:Owasp-ch-folini-nov-2014.pdf]]</center>
 +
| Chapter Meeting
 +
| Living on the Edge - Advanced ModSecurity to Save Your Ass
 +
|-
 +
| 2014-08-20
 +
| <center>[[Image:person.png|20px|link=http://www.arcus-security.ch/]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.kshp.ch/]]</center>
 +
| <center>[[Image:slides.png|20px|link=File:20140820-Flash_Security_by_Arcus_Security.pdf]]</center>
 +
| Chapter Meeting
 +
| (Client-Side) Flash Security
 
|-
 
|-
 
| 2014-06-17
 
| 2014-06-17
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2014-June/000275.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://www.sec-consult.com/]]</center>
 
| <center>[[Image:person.png|20px|link=https://www.sec-consult.com/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.credit-suisse.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.credit-suisse.ch/]]</center>
Line 89: Line 145:
 
|-
 
|-
 
| 2014-04-09
 
| 2014-04-09
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2014-April/000271.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://twitter.com/dobinrutis]]</center>
 
| <center>[[Image:person.png|20px|link=https://twitter.com/dobinrutis]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.ubs.com/ch/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.ubs.com/ch/]]</center>
Line 97: Line 152:
 
|-
 
|-
 
| 2014-02-19
 
| 2014-02-19
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2014-January/000267.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=User:Schattenbaum]]</center>
 
| <center>[[Image:person.png|20px|link=User:Schattenbaum]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.swisscom.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.swisscom.ch/]]</center>
 
| <center>[[Image:slides.png|20px|link=File:20140219-SSDLC_Ready_for_Clouds-Robert.pdf]]</center>
 
| <center>[[Image:slides.png|20px|link=File:20140219-SSDLC_Ready_for_Clouds-Robert.pdf]]</center>
 
| Chapter Meeting
 
| Chapter Meeting
| S-SDLC – Ready for Clouds?
+
| S-SDLC – Ready for the Cloud?
 
|-
 
|-
 
| 2013-12-17
 
| 2013-12-17
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2013-December/000262.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.credit-suisse.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.credit-suisse.ch/]]</center>
Line 113: Line 166:
 
|-
 
|-
 
| 2013-10-22
 
| 2013-10-22
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2013-October/000258.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Alexandre_Herzog]]</center>
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Alexandre_Herzog]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.colab-zurich.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.colab-zurich.ch/]]</center>
Line 121: Line 173:
 
|-
 
|-
 
| 2013-10-22
 
| 2013-10-22
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2013-October/000258.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.colab-zurich.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.colab-zurich.ch/]]</center>
Line 129: Line 180:
 
|-
 
|-
 
| 2013-04-09
 
| 2013-04-09
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2013-March/000241.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.securesafe.com/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.securesafe.com/]]</center>
Line 137: Line 187:
 
|-
 
|-
 
| 2012-09-19
 
| 2012-09-19
|
 
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.security-zone.info/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.security-zone.info/]]</center>
Line 145: Line 194:
 
|-
 
|-
 
| 2012-06-12
 
| 2012-06-12
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2012-June/000229.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Tobias_Ospelt]]</center>
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Tobias_Ospelt]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
Line 153: Line 201:
 
|-
 
|-
 
| 2012-02-14
 
| 2012-02-14
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2012-February/000224.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://www.blackhat.com/html/bh-us-12/speakers/Gianni-Gnesa.html]]</center>
 
| <center>[[Image:person.png|20px|link=https://www.blackhat.com/html/bh-us-12/speakers/Gianni-Gnesa.html]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
Line 161: Line 208:
 
|-
 
|-
 
| 2011-12-13
 
| 2011-12-13
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2011-December/000223.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Alexis_FitzGerald]]</center>
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Alexis_FitzGerald]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
Line 169: Line 215:
 
|-
 
|-
 
| 2011-12-13
 
| 2011-12-13
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2011-December/000223.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Stephan_Berger37]][[Image:person.png|20px|link=https://plus.google.com/106548980928636767176/posts]]</center>
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Stephan_Berger37]][[Image:person.png|20px|link=https://plus.google.com/106548980928636767176/posts]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
Line 177: Line 222:
 
|-
 
|-
 
| 2011-10-11
 
| 2011-10-11
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2011-September/000218.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Cyrill_Brunschwiler]]</center>
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Cyrill_Brunschwiler]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.itacs.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.itacs.ch/]]</center>
Line 185: Line 229:
 
|-
 
|-
 
| 2011-08-09
 
| 2011-08-09
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2011-August/000215.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
Line 193: Line 236:
 
|-
 
|-
 
| 2011-06-14
 
| 2011-06-14
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2011-June/000208.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Pascal_Buchbinder]]</center>
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Pascal_Buchbinder]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
Line 201: Line 243:
 
|-
 
|-
 
| 2011-06-14
 
| 2011-06-14
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2011-June/000208.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
Line 209: Line 250:
 
|-
 
|-
 
| 2011-05-12
 
| 2011-05-12
|
 
 
| <center>[[Image:person.png|20px|link=User:Afontes]]</center>
 
| <center>[[Image:person.png|20px|link=User:Afontes]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.swisscyberstorm.com/]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.swisscyberstorm.com/]]</center>
Line 217: Line 257:
 
|-
 
|-
 
| 2011-04-12
 
| 2011-04-12
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2011-April/000204.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Alexandre_Herzog]]</center>
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Alexandre_Herzog]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
Line 225: Line 264:
 
|-
 
|-
 
| 2010-04-12
 
| 2010-04-12
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2010-February/000152.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Tobias_Christen]]</center>
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Tobias_Christen]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
Line 233: Line 271:
 
|-
 
|-
 
| 2010-04-12
 
| 2010-04-12
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2010-February/000152.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Michael_Tschannen]]</center>
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Michael_Tschannen]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
Line 241: Line 278:
 
|-
 
|-
 
| 2009-06-25
 
| 2009-06-25
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2009-June/000144.html]]</center>
 
 
| <center>[[Image:person.png|20px|Jerry Hoff]][[Image:person.png|20px|Jason Li]]</center>
 
| <center>[[Image:person.png|20px|Jerry Hoff]][[Image:person.png|20px|Jason Li]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.avantec.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.avantec.ch/]]</center>
Line 249: Line 285:
 
|-
 
|-
 
| 2009-06-25
 
| 2009-06-25
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2009-June/000144.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Bruno_Blumenthal]]</center>
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Bruno_Blumenthal]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.avantec.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.avantec.ch/]]</center>
Line 257: Line 292:
 
|-
 
|-
 
| 2009-04-07
 
| 2009-04-07
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2009-March/000140.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Tobias_Christen]]</center>
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Tobias_Christen]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.avantec.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.avantec.ch/]]</center>
Line 265: Line 299:
 
|-
 
|-
 
| 2009-04-07
 
| 2009-04-07
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2009-March/000140.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Cyrill_Brunschwiler]]</center>
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Cyrill_Brunschwiler]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.avantec.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.avantec.ch/]]</center>
Line 273: Line 306:
 
|-
 
|-
 
| 2008-09-08
 
| 2008-09-08
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2008-August/000132.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Pascal_Buchbinder]]</center>
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Pascal_Buchbinder]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.swissre.com/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.swissre.com/]]</center>
Line 281: Line 313:
 
|-
 
|-
 
| 2008-09-08
 
| 2008-09-08
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2008-August/000132.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Cyrill_Brunschwiler]]</center>
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Cyrill_Brunschwiler]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.swissre.com/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.swissre.com/]]</center>
Line 289: Line 320:
 
|-
 
|-
 
| 2008-09-08
 
| 2008-09-08
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2008-August/000132.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Alessandro_Moretti]]</center>
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Alessandro_Moretti]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.swissre.com/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.swissre.com/]]</center>
Line 297: Line 327:
 
|-
 
|-
 
| 2008-04-01
 
| 2008-04-01
| <center>[[Image:info.png|20px|link=http://lists.owasp.org/pipermail/owasp-switzerland/2008-March/000114.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Christian_Folini]]</center>
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Christian_Folini]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.ethz.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.ethz.ch/]]</center>
Line 305: Line 334:
 
|-
 
|-
 
| 2008-04-01
 
| 2008-04-01
| <center>[[Image:info.png|20px|link=http://lists.owasp.org/pipermail/owasp-switzerland/2008-March/000114.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Alessandro_Moretti]]</center>
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Alessandro_Moretti]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.ethz.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.ethz.ch/]]</center>
Line 313: Line 341:
 
|-
 
|-
 
| 2008-04-01
 
| 2008-04-01
| <center>[[Image:info.png|20px|link=http://lists.owasp.org/pipermail/owasp-switzerland/2008-March/000114.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.ethz.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.ethz.ch/]]</center>
Line 321: Line 348:
 
|-
 
|-
 
| 2007-12-11
 
| 2007-12-11
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2007-November/000106.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Thomas_Bader]]</center>
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Thomas_Bader]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.zurich.com/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.zurich.com/]]</center>
Line 329: Line 355:
 
|-
 
|-
 
| 2007-12-11
 
| 2007-12-11
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2007-November/000106.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Tobias_Christen]]</center>
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Tobias_Christen]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.zurich.com/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.zurich.com/]]</center>
Line 337: Line 362:
 
|-
 
|-
 
| 2007-12-11
 
| 2007-12-11
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2007-November/000106.html]]</center>
 
 
| <center>[[Image:person.png|20px|Daniel Hulliger]]</center>
 
| <center>[[Image:person.png|20px|Daniel Hulliger]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.zurich.com/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.zurich.com/]]</center>
Line 345: Line 369:
 
|-
 
|-
 
| 2007-09-20
 
| 2007-09-20
| <center>[[Image:info.png|20px|link=http://www.disenchant.ch/blog/owasp-switzerland-goes-public/80]]</center>
 
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.security-zone.info/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.security-zone.info/]]</center>
Line 353: Line 376:
 
|-
 
|-
 
| 2007-09-19
 
| 2007-09-19
| <center>[[Image:info.png|20px|link=http://www.disenchant.ch/blog/owasp-switzerland-goes-public/80]]</center>
 
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.security-zone.info/]]</center>
 
| <center>[[Image:location.png|20px|link=http://www.security-zone.info/]]</center>
Line 361: Line 383:
 
|-
 
|-
 
| 2007-07-24
 
| 2007-07-24
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2007-July/000095.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.zurich.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.zurich.ch/]]</center>
Line 369: Line 390:
 
|-
 
|-
 
| 2007-07-24
 
| 2007-07-24
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2007-July/000095.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Pierre_Parrend]]</center>
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Pierre_Parrend]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.zurich.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.zurich.ch/]]</center>
Line 377: Line 397:
 
|-
 
|-
 
| 2007-07-24
 
| 2007-07-24
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2007-July/000095.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/HansPeter_Waldegger]][[Image:person.png|20px|link=https://www.xing.com/profiles/Pascal_Buchbinder]]</center>
 
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/HansPeter_Waldegger]][[Image:person.png|20px|link=https://www.xing.com/profiles/Pascal_Buchbinder]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.zurich.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.zurich.ch/]]</center>
Line 385: Line 404:
 
|-
 
|-
 
| 2007-04-26
 
| 2007-04-26
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2007-April/000086.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=http://www.linkedin.com/in/bchess]]</center>
 
| <center>[[Image:person.png|20px|link=http://www.linkedin.com/in/bchess]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.zurich.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.zurich.ch/]]</center>
Line 393: Line 411:
 
|-
 
|-
 
| 2007-02-12
 
| 2007-02-12
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2007-February/000079.html]]</center>
 
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.zurich.ch/]]</center>
 
| <center>[[Image:location.png|20px|link=https://www.zurich.ch/]]</center>
Line 401: Line 418:
 
|-
 
|-
 
| 2006-11-11
 
| 2006-11-11
|
 
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
|  
 
|  
Line 408: Line 424:
 
| OWASP Switzerland Chapter Kick-Off Meeting
 
| OWASP Switzerland Chapter Kick-Off Meeting
 
|}
 
|}
 
  
 
= Participation  =
 
= Participation  =
Line 416: Line 431:
 
<br> Our main topics are:  
 
<br> Our main topics are:  
  
 +
*DevOps
 
*Security testing  
 
*Security testing  
 
*Secure development  
 
*Secure development  
Line 421: Line 437:
 
*Secure Architectures
 
*Secure Architectures
  
<br> If you would like to give a presentation (make sure that you have read and understood the [[Speaker_Agreement|speaker agreement]]), or have any questions about the OWASP Switzerland Chapter, send an email to [mailto:sven.vetsch__AT__disenchant.ch Sven Vetsch].  
+
<br> If you would like to give a presentation (make sure that you have read and understood the [[Speaker_Agreement|speaker agreement]]), or have any questions about the OWASP Switzerland Chapter, send an email to [mailto:robert.schneider__AT__owasp.org Robert Schneider].  
  
 
= Sponsoring  =
 
= Sponsoring  =
Line 433: Line 449:
 
*Facility Sponsor  
 
*Facility Sponsor  
 
*Organization Supporters (allocating 40% of your annual donation to our Chapter)
 
*Organization Supporters (allocating 40% of your annual donation to our Chapter)
 +
<br>
 +
{{#widget:PayPal Donation
 +
|target=_blank
 +
|budget=OWASP Switzerland
 +
}}
  
 
= Chapter Material  =
 
= Chapter Material  =
Line 440: Line 461:
 
'''OWASP Switzerland bylaws (in German)'''<br> [[Media:Bylaws owasp switzerland.pdf|Download bylaws]]
 
'''OWASP Switzerland bylaws (in German)'''<br> [[Media:Bylaws owasp switzerland.pdf|Download bylaws]]
  
'''OWASP Switzerland Update Presentation (December 13th 2011)'''<br> [[Media:Owasp_update_presentation.pdf|Download Presentation]]
+
'''OWASP Switzerland Update Presentation (December 13th 2011)'''<br> [[Media:Owasp update presentation.pdf|Download Presentation]]
 
 
<headertabs />
 
  
<paypal>Switzerland</paypal>
+
<headertabs></headertabs>
  
 
{| cellspacing="15"
 
{| cellspacing="15"
 
|-
 
|-
| [[Image:Join the list.png|120px|link=https://lists.owasp.org/mailman/listinfo/owasp-switzerland]]
+
| [[Image:Mailinglist_button.png|62px|link=https://groups.google.com/a/owasp.org/forum/#!forum/switzerland-chapter]]  
| [[Image:Follow-us-on-twitter.png|120px|link=https://twitter.com/owasp_ch]]
+
| [[Image:Meetup-logo.png|62px|link=https://www.meetup.com/de-DE/OWASPSwitzerland/]]
| [[Image:Facebook-icon.png|120px|link=https://www.facebook.com/OWASPSwitzerland]]
 
 
|}
 
|}
  
[[Category:OWASP_Chapter]] [[Category:Switzerland]] [[Category:Europe]]
+
[[Category:OWASP_Chapter]]  
 +
[[Category:Switzerland]]  
 +
[[Category:Europe]]

Latest revision as of 21:38, 10 December 2019


OWASP Switzerland Chapter Logo

Welcome to the Home Page of the OWASP Switzerland Chapter.

  • If you want to give a talk, provide a venue or in case of other questions regarding this chapter - just ping one of our Chapter Leaders: Sven Vetsch and Robert Schneider.
  • Please join us on Meetup and/or subscribe to our (low-traffic) mailing list for meeting announcements and other news related to OWASP in Switzerland.


If you're living in the French speaking part of Switzerland, please also visit the OWASP Geneva chapter for more information.

Please see our list of upcoming meetings on Meetup:

See our planned meeting and register for them here



Please see our list of past meetings on Meetup:

See our past meeting and register for them here





Previous meetings "prior" Meetup:

Date Speaker Host Slides Event Topic
2017-08-16
Person.png
Location.png
Slides.png
Chapter Meeting Introducing the OWASP ModSecurity Core Rule Set 3.0
2016-10-04
Person.png
Location.png
Slides.png
Chapter Meeting Bug Bounty programs in Switzerland?
2016-06-07
Person.png
Location.png
Slides.png
Chapter Meeting XSSI - The Tale of a Fameless but Widespread Vulnerability
2015-12-15
Person.png
Person.png
Location.png
Slides.png
Slides.png
Chapter Meeting Top X OAuth 2 Hacks
Reliable log data transfer: about syslog, logstash and log data signing
2015-10-14
Person.png
Location.png
Slides.png
Chapter Meeting Application Security Testing by Static Code Analysis
2015-08-19
Person.pngPerson.pngPerson.pngPerson.png
Location.png
Chapter Meeting BarCamp
2015-06-17
Person.pngPerson.png
Location.png
Slides.png
Chapter Meeting XSLT Processing Security and Server Side Request Forgeries
2015-04-15
Person.png
Location.png
Slides.png
Chapter Meeting Android apps in sheep's clothing
2015-02-18
Person.png
Location.png
Slides.png
Chapter Meeting Abusing JSONP with Rosetta Flash
2014-12-10
Person.png
Location.png
Chapter Meeting OWASP Switzerland Fondue
2014-11-12
Person.png
Location.png
Slides.png
Chapter Meeting Living on the Edge - Advanced ModSecurity to Save Your Ass
2014-08-20
Person.png
Location.png
Slides.png
Chapter Meeting (Client-Side) Flash Security
2014-06-17
Person.png
Location.png
Slides.png
Chapter Meeting XSS and beyond
2014-04-09
Person.png
Location.png
Slides.png
Chapter Meeting SSL/TLS jungle - bringing light into the cipher forest
2014-02-19
Person.png
Location.png
Slides.png
Chapter Meeting S-SDLC – Ready for the Cloud?
2013-12-17
Person.png
Location.png
Chapter Meeting Annual Review & Outlook
2013-10-22
Person.png
Location.png
Slides.png
Chapter Meeting Advances in secure (ASP).NET development – Break the hacker's spirit
2013-10-22
Person.png
Location.png
Slides.png
Chapter Meeting Node.js Security
2013-04-09
Person.png
Location.png
Chapter Meeting Tools (not) to use
2012-09-19
Person.png
Location.png
Slides.png
Security-Zone OWASP Top 10 Mobile Risks
2012-06-12
Person.png
Location.png
Chapter Meeting Reversing Android Apps
2012-02-14
Person.png
Location.png
Chapter Meeting Analysis of the RSA Security Breach
2011-12-13
Person.png
Location.png
Chapter Meeting AppSec - Why is it important
2011-12-13
Person.pngPerson.png
Location.png
Chapter Meeting Dangers of Firefox Add-On's
2011-10-11
Person.png
Location.png
Chapter Meeting Presentation of the OWASP Top 10 & a hands-on session
2011-08-09
Person.png
Location.png
Chapter Meeting Foundation of OWASP Switzerland Association
2011-06-14
Person.png
Location.png
Slides.png
Chapter Meeting Automatic CRL updates for the Apache Web server
2011-06-14
Person.png
Location.png
Slides.png
Chapter Meeting New Standards and upcoming Technologies in Browser Security (Slides by Tobias Gondrom)
2011-05-12
Person.png
Location.png
Slides.png
Swiss Cyber Storm III Do you know OWASP?
2011-04-12
Person.png
Location.png
Slides.png
Chapter Meeting ASP.NET & ViewState Security
2010-04-12
Person.png
Location.png
Chapter Meeting Usability vs. Security
2010-04-12
Person.png
Location.png
Chapter Meeting 2-factor authentication for mobile devices: a secure and practical approach
2009-06-25
Jerry HoffJason Li
Location.png
Chapter Meeting Benefits of a security API such as ESAPI
2009-06-25
Person.png
Location.png
Chapter Meeting Advanced SQL injection exploitation to operating system full control
2009-04-07
Person.png
Location.png
Chapter Meeting Open security architecture (www.opensecurityarchitecture.org)
2009-04-07
Person.png
Location.png
Chapter Meeting XSRF and JSON hijacking & a hands-on session
2008-09-08
Person.png
Location.png
Chapter Meeting Quality of services for web applications (Hands-On Workshop)
2008-09-08
Person.png
Location.png
Chapter Meeting XML Security (Hands-On Workshop)
2008-09-08
Person.png
Location.png
Chapter Meeting ISC2/Application security
2008-04-01
Person.png
Location.png
Global OWASP Week Taking Apache access logs to the next level
2008-04-01
Person.png
Location.png
Global OWASP Week Implementing an Application Security Lifecycle programme
2008-04-01
Person.png
Location.png
Global OWASP Week WebAppSec the Big Picture
2007-12-11
Person.png
Location.png
Chapter Meeting Certified Secure Web
2007-12-11
Person.png
Location.png
Chapter Meeting Secure Development Life Cycle
2007-12-11
Daniel Hulliger
Location.png
Chapter Meeting Securing my Assets (Presentation & Demo)
2007-09-20
Person.png
Location.png
Security-Zone OWASP Testing Guide
2007-09-19
Person.png
Location.png
Security-Zone OWASP Top 10
2007-07-24
Person.png
Location.png
Chapter Meeting OWASP - An Overview
2007-07-24
Person.png
Location.png
Slides.png
Chapter Meeting Dependability for Java Mobile Code
2007-07-24
Person.pngPerson.png
Location.png
Chapter Meeting OWASP Top 10 (Demo)
2007-04-26
Person.png
Location.png
Chapter Meeting Risk metrics
2007-02-12
Person.png
Location.png
Slides.png
Chapter Meeting XSS-Worms
2006-11-11
Person.png
Chapter Meeting OWASP Switzerland Chapter Kick-Off Meeting

OWASP Chapter meetings are free and open. Our chapter's meetings are informal and encourage open discussion of all aspects of application security. Anyone in our area interested in application security is welcome to attend. We encourage attendees to give short presentations about specific topics.


Our main topics are:

  • DevOps
  • Security testing
  • Secure development
  • Hacking
  • Secure Architectures


If you would like to give a presentation (make sure that you have read and understood the speaker agreement), or have any questions about the OWASP Switzerland Chapter, send an email to Robert Schneider.

Help us to make application security visible and become a supporter of the OWASP or our Chapter in Switzerland. All information about becoming a member/sponsor can be found here.

If your company is interested in supporting us directly, please contact Sven Vetsch to talk about the following sponsoring possibilities.

  • Chapter Supporter
  • Single Meeting Supporter
  • Facility Sponsor
  • Organization Supporters (allocating 40% of your annual donation to our Chapter)


Here you can find material related to the OWASP Switzerland Chapter.

OWASP Switzerland bylaws (in German)
Download bylaws

OWASP Switzerland Update Presentation (December 13th 2011)
Download Presentation

Mailinglist button.png Meetup-logo.png