|
|
| (64 intermediate revisions by 7 users not shown) |
| Line 1: |
Line 1: |
| − | {{Chapter Template|chaptername=Khartoum, Sudan|extra=The chapter leaders are [mailto:[email protected] Ali Hussein], [mailto:[email protected] Mohammed Abd Allah], and [mailto:[email protected] Ali Abdel Rahman].|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-khartoum|emailarchives=http://lists.owasp.org/pipermail/owasp-khartoum}} | + | {{Inactive Chapter}} |
| | | | |
| − | {{Chapter Template|chaptername=Khartoum|extra=The chapter leadership includes: [mailto:[email protected] Ali Hussein, Founder/Chapter Leader], [mailto:[email protected] Mohammed Abd Allah], [mailto:[email protected] Greg Genung, Board Member]|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-khartoum|emailarchives=http://lists.owasp. org/pipermail/owasp-khartoum}} | + | {{Chapter Template|chaptername=Khartoum, Sudan|extra=The chapter leade is '''OPEN'''. |
| − | <br><br>
| |
| | | | |
| | + | |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-khartoum|emailarchives=http://lists.owasp.org/pipermail/owasp-khartoum}} |
| | | | |
| | | | |
| − | =Upcoming Events=
| + | [[Category:OWASP Chapter]] |
| − | | |
| − | | |
| − | == OWASP Khartoum Open Session - Cross-Site Request Forgery ==
| |
| − | | |
| − | | |
| − | '''When:''' January 12 th from 3:30PM - 9:00pm
| |
| − | | |
| − | '''Who:''' Abdullah Ulber
| |
| − | | |
| − | Abdullah Ulber works at Banan IT as a senior software architect, web developer and education manager. He looks back to more than ten years of professional software development, specialising in web applications based on ASP.NET MVC, HTML5 and Silverlight. He is a keen follower of all trends in the web world and enjoys passing on his knowledge in captivating presentations and courses.
| |
| − | | |
| − | Outside his work, he is an organising member of the OWASP local chapter in Khartoum.
| |
| − | | |
| − | Before his move to Sudan, Abdullah was the co-organiser of the Swiss Olympiad in Informatics and the team leader of the Swiss delegation to the International Olympiads in Informatics from 1998 to 2005.
| |
| − | | |
| − | He holds a master’s degree in computer science from ETH Zurich.
| |
| − | | |
| − | | |
| − | '''Topic:''' Data events, or why security is cloudier than you think.
| |
| − | | |
| − | '''Abstract:''' Cross-Site Request Forgery (CSRF) hides in the shadow of two more well-known web vulnerabilities: Cross-site scripting and SQL injection. Despite its occlusion, statistics clearly show that CSRF attacks are on the increase. The leading secure cloud hosting company Firehost rated CSRF as the most frequent attack in 2011 and the second most frequent attack in the third quarter of 2012. Termed “the sleeping giant” back in 2007, the giant has definitely woken up.
| |
| − | | |
| − | CSRF attacks are remarkably easy to mount and their potential impact is limited only by the targeted site itself. All the major web sites like Gmail, Amazon and Facebook had their brush with CSRF in the past. CSRF is a clear and present threat that is better taken seriously.
| |
| − | | |
| − | This OWASP session raises awareness of the threat, explains its workings, and leads the audience through the gamut of available protections, both client and server side. Attendees will leave equipped with the necessary knowledge to protect their web applications as well as themselves against this underestimated attack.
| |
| − | | |
| − | | |
| − | '''Location:''' Sudan University of Science and Technology
| |
| − | | |
| − | | |
| − | | |
| − | == Future Speakers and Events ==
| |
| − | | |
| − | | |
| − | =Record Hall of Meetings=
| |
| − | June,30 2012 meeting was an introduction to OWASP Top 10: A1: SQL injections manually and using automated tools. Presented by Ali Hussein and Mohammed Osman
| |
| − | | |
| − | July,14 2012 meeting was about OWASP Top 10: A2: Cross Site Scripting (XSS). Presented by Ayman Babiker
| |
| − | | |
| − | Aug,11 2012 meeting was about OWASP Top 10: A3: Broken Authentication and Session Management and A4: Insecure Direct Object References. Presented Obay Osman
| |
| − | | |
| − | Sep,1 2012 meeting was about OWASP Top 10: A5: Cross Site Request Forgery (CSRF). Presented Obay Osman
| |
| − | | |
| − | Sep,22 2012 meeting was about OWASP Top 10: A6: Security Misconfiguration. Presented Ali Hussein
| |
| − | =Presentation Archives=
| |
| − | | |
| − | The following presentations have been given at local chapter meetings:
| |
| − | | |
| − | =Khartoum OWASP Chapter Leaders=
| |
| − | | |
| − | | |
| − | | |
| − | | |
| − | | |
| − | | |
| − | | |
| − | =Sponsorship Opportunities=
| |
| − | | |
| − | =Local News=
| |
| − | | |
| − | ''If a link is available, click for more details on directions, speakers, etc. You can also review [http://lists.owasp.org/pipermail/owasp-khartoum/ Email Archives] to see what folks have been talking about'' <paypal>Khartoum</paypal>
| |
| − | | |
| − | | |
| − | __NOTOC__ <headertabs />
| |
| − | | |
| − | {{PutInCategory}}
| |
| − |
| |
| − | | |
| − | [[Category:Khartoum]]
| |
Welcome to the Khartoum, Sudan chapter homepage. The chapter leade is OPEN.
to this chapter or become a local chapter supporter.
Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member? 
