Latest revision as of 00:40, 21 September 2013

OWASP Global Projects Report

• Project Numbers
  • Active Projects: 139
  • Inactive Projects: 103

• New Project Applications
  • OWASP Pygoat Project

• New OWASP Projects
  • OWASP This I Believe Security Project

• Projects Under Review
  • OWASP Cheat Sheets Project
  • OWASP Java HTML Sanitizer Project (Testing)
  • Xenotix XSS Exploit Framework
  • OWASP Cornucopia Project (Testing)
  • OWASP Java Encoder Project (Testing)
  • Project reviews are on hold until the Technical Advisory group complete and test the updated assessment criteria.

Currently Working On

• Technical Project Advisors: Work Update
  • I have put together another version of the project assessment criteria.
  • This version was based on the first test assessments conducted by the advisors.
  • This version eliminates redundancies between the product assessment and the project health assessment.
  • Additionally, we have separated out the focus of each assessment.
  • The Project Assessment focuses on the project health based on OWASP best practices.
  • The Product Assessment focuses on the quality of the deliverable.

• Women in AppSec: AppSec USA 2013
  • The Women in AppSec grading has now begun.
  • Kait, our new Grants & Fundraising intern, has been helping with the administrative work for the program.
  • We have collected the letters of recommendation sent to us from each of our applicant's references.
  • We have separated them out, and placed them into the folders of each selection committee member.
  • We intend to finish the grading by September 23rd.

• Meet our new Grants & Fundraising Intern
  • Our Grants & Fundraising intern has now gone through the orientation process, and she has begun to work on program activities.
  • She has been working on getting set up on the wiki, and learning how to create and edit wiki pages.
  • Kait will be putting together the content for the Women in AppSec Program Page.
  • Additionally, she is putting together content for our marketing page.
  • You can read more about her week by reading her Intern Weekly Report.
  • Start Date: Monday, September 16th 2013.
  • Internship End Date: Monday, January 13th 2014.

• Grants and Fundraising Strategy
  • I now have more time to work on strategic planning for projects, grants, and fundraising since Kait is helping with the admin work for several of our programs.
  • I have been working on outlining and writing the grants and fundraising strategy to raise funds for projects and programs for 2014.
  • This week, I worked on developing the strategy outline, and I am analyzing the macro and micro environment OWASP exists within.

• Google for Non-Profits: YouTube Channel
  • I helped Project Leader, Jonathan Marcil, submit an application too Google for Non-Profits on behalf of OWASP.
  • We had to apply to Google so we could link his YouTube channel to our foundation account with Google.
  • Unfortunately, the application was unsuccessful, twice.
  • However, we managed to get it approved with a bit of persistence.
  • Jonathan is all set up to put together our official YouTube channel on behalf of the foundation.
  • Thank you Jonathan for your hard work on this, and for taking this project on.

• Daily Project based queries and requests
  • This has not changed much since I began the post: questions are very similar in nature.
  • Global AppSec questions.
  • Funding queries.
  • Travel availability.
  • Project based administrative help.
  • Project status information.
  • Several project donation questions.
  • Marketing questions.
  • Grant funding questions.
  • OWASP social media updates.
  • What's happening with projects, questions.

Project Funding Updates

• OWASP OWTF Project: Brucon 5x5 Award

1. Amount: €5,000.00 (Approx. $6,670.00)
2. Status: Awarded. Congratulations, Abraham Aranguren and all involved in the project, for your award.

• OWASP OWTF Grant Proposal

1. Amount: $55,800 USD
2. Status: This proposal is complete, and has been submitted.

• OWASP AppSensor Grant Proposal

1. Amount: $15,000 USD
2. Status: This proposal is complete, and has been submitted.

• OWASP OpenSAMM Grant Proposal

1. Amount: $112,000 USD
2. Status: This proposal is complete, and has been submitted.

• OWASP Guidebooks Proposal

1. Amount: $25,000 USD
2. Status: Awarded. The first payment has been allocated to our project budgets. The second invoice has now been sent to Georgia Tech for payment.
3. OWASP Development Guide Plan
4. OWASP Testing Guide Plan
5. OWASP Code Review Guide Plan

• OWASP ESAPI Grant Proposal

1. Amount: $25,000 USD
2. Status: The ESAPI proposal is still being reviewed.

• OWASP ModSecurity CRS Proposal

1. Amount: $30,000 USD
2. Status: The ModSecurity proposal is still being reviewed.

• Google Grants Proposal

1. Amount: $120,000 USD in Adwords Funds
2. Status: Awarded.
3. Note: There is no link to show the proposal for this grant. There was a form that was submitted to Google, and we did not receive a record of this form.

• European Commission Grant Proposal

1. Amount: €250,000
2. Status: Denied.

• Google Summer of Code

1. Amount: $5,500
2. Status: Awarded

• Projects breakdown:
  • 4 ZAP Projects: $2,000
  • 4 OWTF Projects: $2,000
  • 1 PHP Security Project: $500
  • 1 Hackademics Project: $500
  • 1 Modsecurity Project: $500
  • Note: Big thank you to Fabio Cerullo for coordinating and managing this award.

• Total Funds Awarded: $157,170 USD for 2013.