This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Summit 2011 Working Sessions/Session002"
(5 intermediate revisions by 5 users not shown) | |||
Line 14: | Line 14: | ||
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed2= | | summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed2= | ||
− | | summit_session_attendee_name3 = | + | | summit_session_attendee_name3 = Tony UcedaVelez |
− | | summit_session_attendee_email3 = | + | | summit_session_attendee_email3 = [email protected] |
− | | summit_session_attendee_username3 = | + | | summit_session_attendee_username3 = Tony UcedaVelez |
− | | summit_session_attendee_company3= | + | | summit_session_attendee_company3= VerSprite |
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed3= | | summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed3= | ||
Line 56: | Line 56: | ||
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed9= | | summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed9= | ||
− | | summit_session_attendee_name10 = | + | | summit_session_attendee_name10 = Paolo Perego |
− | | summit_session_attendee_email10 = | + | | summit_session_attendee_email10 = [email protected] |
− | | summit_session_attendee_username10= | + | | summit_session_attendee_username10= thesp0nge |
− | | summit_session_attendee_company10= | + | | summit_session_attendee_company10= Armoredcode.com |
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed10= | | summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed10= | ||
− | | summit_session_attendee_name11 = | + | | summit_session_attendee_name11 = Eduardo Vela |
− | | summit_session_attendee_email11 = | + | | summit_session_attendee_email11 = [email protected] |
− | | summit_session_attendee_username11= | + | | summit_session_attendee_username11= EduardoVela |
− | | summit_session_attendee_company11= | + | | summit_session_attendee_company11= Google |
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed11= | | summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed11= | ||
− | | summit_session_attendee_name12 = | + | | summit_session_attendee_name12 = Abraham Kang |
− | | summit_session_attendee_email12 = | + | | summit_session_attendee_email12 = [email protected] |
− | | summit_session_attendee_username12= | + | | summit_session_attendee_username12= Abraham Kang |
| summit_session_attendee_company12 = | | summit_session_attendee_company12 = | ||
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed12= | | summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed12= | ||
− | | summit_session_attendee_name13 = | + | | summit_session_attendee_name13 = Nuno Loureiro |
− | | summit_session_attendee_email13 = | + | | summit_session_attendee_email13 = [email protected] |
| summit_session_attendee_username13 = | | summit_session_attendee_username13 = | ||
− | | summit_session_attendee_company13= | + | | summit_session_attendee_company13= SAPO |
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed13= | | summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed13= | ||
− | | summit_session_attendee_name14 = | + | | summit_session_attendee_name14 = Alexandre Miguel Aniceto |
− | | summit_session_attendee_email14 = | + | | summit_session_attendee_email14 = [email protected] |
− | | summit_session_attendee_username14= | + | | summit_session_attendee_username14= Alexandre Miguel Aniceto |
− | | summit_session_attendee_company14= | + | | summit_session_attendee_company14= Willway |
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed14= | | summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed14= | ||
Latest revision as of 23:59, 7 February 2011
Global Summit 2011 Home Page
Global Summit 2011 Tracks
HTML5 Security | ||||||
---|---|---|---|---|---|---|
Please see/use the 'discussion' page for more details about this Working Session | ||||||
Working Sessions Operational Rules - Please see here the general frame of rules. |
WORKING SESSION IDENTIFICATION | ||||||
---|---|---|---|---|---|---|
Short Work Session Description | | |||||
Related Projects (if any) |
| |||||
Email Contacts & Roles | Chair Mario Heiderich Gareth Heyes @ |
Operational Manager John Wilander @ |
Mailing list https://groups.google.com/group/owasp-summit-browsersec |
WORKING SESSION SPECIFICS | ||||||
---|---|---|---|---|---|---|
Objectives |
| |||||
Venue/Date&Time/Model | Venue/Room OWASP Global Summit Portugal 2011 |
Date & Time Tuesday, 09 February Time: TBA
|
Discussion Model The working form will most probably be short presentations to frame the topic and then round table discussions. Depending on number of attendees we'll break into groups. |
|
---|
WORKING SESSION OPERATIONAL RESOURCES | ||||||
---|---|---|---|---|---|---|
Projector, whiteboards, markers, Internet connectivity, power |
|
---|
WORKING SESSION ADDITIONAL DETAILS | ||||||
---|---|---|---|---|---|---|
Co-chair Mario HeiderichMario Heiderich works as a researcher for the Ruhr-University in Bochum, Germany and currently focuses on HTML5, SVG security and security implications of the ES5 specification draft. Mario invoked the HTML5 security cheat-sheet and maintains the PHPIDS filter rules. In his spare time he delivers trainings and security consultancy for larger German and international companies. He is also one of the co-authors of Web Application Obfuscation: '-/WAFs..Evasion..Filters//alert(/Obfuscation/)-' – a book on how an attacker would bypass different types of security controls including IDS/IPS. Co-chair Gareth HeyesGareth "Gaz" Heyes calls himself Chief Conspiracy theorist and is affiliated with Microsoft. He is the designer and developer behind JSReg – a Javascript sandbox which converts code using regular expressions; HTMLReg & CSSReg – converters of malicious HTML/CSS into a safe form of HTML. He is also one of the co-authors of Web Application Obfuscation: '-/WAFs..Evasion..Filters//alert(/Obfuscation/)-' – a book on how an attacker would bypass different types of security controls including IDS/IPS. |
WORKING SESSION OUTCOMES / DELIVERABLES | ||
---|---|---|
Proposed by Working Group | Approved by OWASP Board | |
After the Board Meeting - fill in here. | ||
After the Board Meeting - fill in here. | ||
After the Board Meeting - fill in here. | ||
After the Board Meeting - fill in here. | ||
After the Board Meeting - fill in here. | ||
After the Board Meeting - fill in here. | ||
After the Board Meeting - fill in here. | ||
After the Board Meeting - fill in here. |
Working Session Participants
(Add you name by clicking "edit" on the tab on the upper left side of this page)
WORKING SESSION PARTICIPANTS | ||||||
---|---|---|---|---|---|---|
Name | Company | Notes & reason for participating, issues to be discussed/addressed | ||||
John Wilander @ |
|
| ||||
Michael Coates @ |
| |||||
Tony UcedaVelez @ |
VerSprite |
| ||||
Stefano Di Paola |
| |||||
Isaac Dawson |
Veracode |
| ||||
Chris Eng @ |
Veracode |
| ||||
Nishi Kumar @ |
FIS |
| ||||
Elke Roth-Mandutz @ |
GSO-University of Applied Science |
| ||||
Giorgio Fedon |
| |||||
Paolo Perego @ |
Armoredcode.com |
| ||||
Eduardo Vela @ |
Google |
| ||||
Abraham Kang @ |
| |||||
Nuno Loureiro @ |
SAPO |
| ||||
Alexandre Miguel Aniceto @ |
Willway |
| ||||
|
| |||||
|
| |||||
|
| |||||
|
| |||||
|
| |||||
|
|
</includeonly>