This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Suncoast"
(→Next Meeting) |
(→Next Meeting) |
||
| Line 7: | Line 7: | ||
== Next Meeting == | == Next Meeting == | ||
| − | '''Topic:''' Security Assertion Markup Language (SAML) | + | '''Topic:''' Security Assertion Markup Language (SAML) - hosted by Sunjug |
'''Date/Time:''' February 24, 2010 | '''Date/Time:''' February 24, 2010 | ||
| Line 20: | Line 20: | ||
Steve has built the code using OpenSAML for encryption and signing assertions as well to allow end to end testing using Apache Http Client. He will cover topics all the way down to creating RSA key pairs in a Java key store using keytool, so in essence this is a complete solution. The talk will not be covering SSO solutions like JOSSO as this is perhaps better covered at a later date. | Steve has built the code using OpenSAML for encryption and signing assertions as well to allow end to end testing using Apache Http Client. He will cover topics all the way down to creating RSA key pairs in a Java key store using keytool, so in essence this is a complete solution. The talk will not be covering SSO solutions like JOSSO as this is perhaps better covered at a later date. | ||
| + | |||
| + | See more details [http://www.codetown.us/events/sarasota-java-users-group-2 here] | ||
== Past Meetings == | == Past Meetings == | ||
Revision as of 21:25, 24 January 2010
OWASP Suncoast
Welcome to the Suncoast chapter homepage.
Participation
OWASP Foundation (Overview Slides) is a professional association of global members and is open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.
Sponsorship/Membership
to this chapter or become a local chapter supporter.
Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member? 
<paypal>Suncoast Chapter</paypal>
Next Meeting
Topic: Security Assertion Markup Language (SAML) - hosted by Sunjug
Date/Time: February 24, 2010
Location: The Community Foundation of Sarasota County (2635 Fruitville Road Sarasota, FL 34237)
Presenter: Steve Goldsmith
Presentation Details: SAML is an XML-based standard for exchanging authentication and authorization data between security domains, that is, between an identity provider (a producer of assertions) and a service provider (a consumer of assertions). SAML is a product of the OASIS Security Services Technical Committee.
Since there are many facets to SAML Steve will give a brief overview of SAML and then jump right into a real world scenario using a service provider. The service provider will accept an encrypted and signed assertion from an external entity which will be decrypted and have its attributes revealed. This can be used to integrate an external entities' SSO system into legacy web applications without the need to implement expensive and complex federated security solutions like SIteMinder, etc.
Steve has built the code using OpenSAML for encryption and signing assertions as well to allow end to end testing using Apache Http Client. He will cover topics all the way down to creating RSA key pairs in a Java key store using keytool, so in essence this is a complete solution. The talk will not be covering SSO solutions like JOSSO as this is perhaps better covered at a later date.
See more details here
Past Meetings
Date/Time: October 29, 2009 - 6:00pm
Location: Gevity HR in Lakewood Ranch (9000 Town Center Pkwy, Lakewood Ranch, FL 34202)
Presenter: James Tarala (See bio at http://www.sans.org/security-training/instructors.php#Tarala)
Presentation Details: "Software Assessment Tools & Methodologies"
Recent reports, such as the SANS Top Security Risks Report (http://www.sans.org/top-cyber-security-risks/) have indicated that operating system security is no longer one of the biggest challenges to organizations' information security today. Instead one of the primary vectors used by those who threaten information resources are individual applications that reside on an organization's systems. Software applications have become the greater vulnerability to an organization today. In this presentation James Tarala of Enclave Security and a frequent instructor at the SANS Institute will present tools and methodologies for assessing these applications in an effort to better secure an organization's systems
The slides can be downloaded here
Date/Time: CANCELLED!
Location: Gevity HR in Lakewood Ranch (9000 Town Center Pkwy, Lakewood Ranch, FL 34202)
Presenter: Wes Brown
Presentation Details: "So You Want To Analyze Malware?"
Malware is a broad category of malicious software that covers trojans, viruses, worms, rootkits, and other software that steals information or subverts computers into unintended purposes. There are many reasons why one would want to analyze malware, and they can range from professional interest in defending networks from them, to personal fascination in the techniques involved in crafting them.
Whatever one’s reason for analyzing malware, Wes will share many of the techniques that he’s utilized in the course of his career working on client incident response engagements as well as a full time analyst on a heuristic detection product.
Many might think that the techniques are dominated by methods such as reverse engineering and binary analysis, and indeed it is a major part of any analyst’s toolkit. However, statistical analysis, and static forensics can often play just as key a role, combined with scripting, systems management, and data warehousing.
Wes will describe and show examples of such techniques, as well as supporting tools. The emphasis will be on doing this with low cost or free tools, so that an audience member can get up and running quickly with malware analysis even on a shoestring budget.
OWASP Suncoast Chapter Meeting on Tuesday June 23, 2009 @ 6pm
Location: The Community Foundation of Sarasota County (2635 Fruitville Road Sarasota, FL 34237)
Topic: Cross-site Request Forgery, The Sleeping Giant of Web Application Vulnerabilities
Presenter: Steve Carter
Click here to view the invitation.
The slides can be downloaded here: Media:CSRF_062209.pdf
Introduction to the OWASP Suncoast Chapter at the 82 Degrees Tech Networking Event
When: Wednesday, April 29th 5 to 7 p.m.
Where: Hyatt Place Sarasota, 950 University Drive, Sarasota (across from the airport)
Cost: $10 for 82 Degree Tech Members, $15 for Future members (beer, wine and appetizers will be provided)
(CANCELLED) OWASP Suncoast Chapter Meeting on Monday March 9th, 2009 @ 6pm
Location: Gevity HR in Lakewood Ranch (9000 Town Center Pkwy, Lakewood Ranch, FL 34202)
Topic: Web 2.0 Vulnerabilities - Scan, Attack and Detect
Presenter: Shreeraj Shah
Full a full description and bio of Mr. Shah see Media:Web2.0_Vulnerabilities_Shreeraj.pdf
Successful Meeting Held at Gevity
Thanks to Shane Hartman from Suncoast Security for a great briefing on Flash malware. Also, thanks gain to John Hale and Gevity for providing a conference room.
The presentation materials are available for download:
Media:Malware_analysis_of_flash_content.pdf
OWASP Suncoast Chapter Meeting on Tuesday December 2th, 2008 @ 6pm
Location: Gevity HR in Lakewood Ranch (9000 Town Center Pkwy, Lakewood Ranch, FL 34202)
Topic: Analyzing Flash Malware
Successful Meeting Held at Gevity
There was a good turn out for last night's Suncoast OWASP Meeting, held at Gevity on Sept 9th. Thanks to all who attended and special thanks to John Hale and Gevity for sponsoring the event and providing the terrific briefing room.
The presentation materials are available for download:
Media:OWASP_Tools_Demo_090908.ppt
OWASP Suncoast Chapter Meeting September 9th, 2008 @ 6pm , Location: Gevity HR in Lakewood Ranch (Frederick Taylor conference room)
Agenda: Discussion of OWASP Top Ten Vulnerabilities, OWASP tools demonstration
The presentations from the May 6 Suncoast OWASP meeting are now available for download
The following presentation is an introduction OWASP (and the Suncoast chapter) with in depth information regarding its missions, goals and objectives: Media:Introduction_to_OWASP_Suncoast_050608.ppt
The following presentation is a brief web application security introduction intended for those completely new to the subject: Media:Webappsec intro.ppt
First Suncoat OWASP Meeting Tuesday May 6, 2008 @ 6pm - 8pm, location: LTC Engineering Associates
Agenda: Introduction to OWASP, Introduction to Web Application Security, OWASP tools demonstration (time permitting)
We are looking for support including speakers and sponsors. We are also still trying to identify a larger conference room in the area to host future events. Please contact Mike Nixon or Stephen Carter if you are able to help in any way. Speakers from commercial companies are welcome although it is against Chapter rules to promote commercial products.
