This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Vancouver"

From OWASP
Jump to: navigation, search
m (→‎OWASP Vancouver: added events section and Q1 events.)
m
 
(69 intermediate revisions by the same user not shown)
Line 1: Line 1:
 +
Welcome to the OWASP [https://en.wikipedia.org/wiki/Vancouver Vancouver] chapter homepage. We are located in the beautiful province of [https://en.wikipedia.org/wiki/British_Columbia British Columbia], on the West Coast of [https://en.wikipedia.org/wiki/Canada Canada].
  
−
{{Chapter Template|chaptername=Vancouver|extra=The chapter leader is [mailto:[email protected] Farshad Abasi].
+
Our mission is to enrich Vancouver's application security community. We hope you can join us in accomplishing that.
−
|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-vancouver|emailarchives=http://lists.owasp.org/pipermail/owasp-vancouver|events=The following are the upcoming events:
 
  
−
Date: Jan 25
+
[[File:Vancouver1000x450.png]]
−
Speaker: Miles (San-Tsai) Sun
 
−
Title: Finding High-Risk Web Vulnerabilities with a Small Number of Generic Payloads
 
  
−
Abstract:
+
= Events =
−
Using a small number of generic payloads to discover high-risk web vulnerabilities (e.g., SQL injection, Remote Code Execution) is highly desirable during a penetration test.  In this talk, I will present and demonstrate a lightweight vulnerability detection approach complimenting to traditional automatic scanners. Using an expression probing technique, this approach can systematically probe whether user-controlled input is treated as code by the server-side program logic, as well as the situational context of the injected payload, and its underlying language. Compared to automatic vulnerability scanners, this approach imposes tiny network footprint (e.g., quick, negligible system impact, avoid IP blocking), is agnostic to application platform/language, and friendly to Web Application Firewall/Intrusion Detection and Prevention System. This lightweight detection technique could address or reduce many common challenges faced by penetration testers.
+
Our monthly sessions take place on the 4th Thursday of each month. We also host one off events and workshops around town.  
  
−
Speaker Bio:
+
Have a look at [http://owaspvancouver.eventbrite.com/ our calendar of awesome events] and join us!
−
San-Tsai Sun is a passionate information security professional and researcher. With more than 20 years of expertise in system development and application security, he is currently an Advanced Security Engineer at Staples, where he enjoys his work in penetration test, static/dynamic vulnerability scan, source code review, risk analysis/threat modeling, and application security design consultancy. Prior to Staples, he was a Senior Information Security Consultant at HSBC Bank. San-Tsai holds a PhD in Information Security from the University of British Columbia, and has been helping hundred of websites to address high risk security vulnerabilities found on their sites.
 
  
−
Date: Mar 22
+
= Contact  =
−
Speaker: Lance Knittig
+
The OWASP Vancouver chapter board members are:
−
Title: Leveraging AWS <-> K8S <-> Docker <-> Apps in harmony to deploy and operate more securely
+
* [mailto:[email protected] Farshad Abasi](Chapter lead)
 +
* [mailto:[email protected] Jeevan Singh]<br>
 +
[https://groups.google.com/a/owasp.org/forum/#!forum/vancouver-chapter Click here] to join the local chapter mailing list and Google Group (pre-Google mailing list archives can be found [http://lists.owasp.org/pipermail/owasp-vancouver here])
  
−
Abstract:
+
= Watch Online =
−
An introspective review of changes encountered with deployment of containerized miroservices and in AWS.  The "old school" way has changed to infrastructure as code and fleets managed by Kubernetes.  Amazing good security practices can be yours by default! Let's walk through some examples of these changes in deployment and call out some amazing security capabilities and quality inherent in the new approach.  
+
'''Subscribe''' to the '''[https://www.youtube.com/channel/UCSXBb_cPvieNm-MoLjjtbXw OWASP Vancouver YouTube channel]''' where you can check out live streams of upcoming sessions as well as archives of previous sessions (big thanks to '''George Pajari''' and volunteers).
  
 +
= Speakers =
 +
We welcome speakers of all level! You don't have to be a pro to talk at one of our events, but we do ask that you talk be related to an application security domain and you provide value to attendees. To be a speaker, simply review the [[Speaker_Agreement |speaker agreement]] and then contact the our [mailto:[email protected] chapter lead] with details of what OWASP project, independent research or related application security topic you would like to present on.
  
−
May 24
+
= Membership =
−
Speaker: Karim Lalji
+
OWASP Foundation ([https://docs.google.com/a/owasp.org/presentation/d/10wi1EWFCPZwCpkB6qZaBNN8mR2XfQs8sLxcj9SCsP6c/edit?usp=sharing Overview Slides]) is a professional association of [[Membership |global members]] and is open to anyone interested in learning more about software security. Local chapters are run independently and guided by the [[Chapter_Leader_Handbook]].
−
Title: Managing an Application Security Testing and Vulnerability Management Program in a CI/CD Environment
 
  
−
Abstract:
+
Consider the value of [[Membership | Individual, Corporate, or Academic Supporter membership]]. Ready to become a member? [[Image:Join_Now_BlueIcon.JPG|75px|link=https://www.owasp.org/index.php/Membership]]
−
Modern software environments have adopted new methodologies to developing products including continuous integration and continuous delivery, more commonly referred to CI/CD. Application security testing and vulnerability management is an important aspect in software environments; unfortunately this practice is often lacking in both effectiveness and requisite knowledge when dealt with from an applications perspective as opposed to traditional IT infrastructures. The challenges are further extended in CI/CD environments where critical code is merging into production at regular intervals without proper security coverage.
 
  
−
This talk will aim to provide individuals with a working understanding of application security testing (AST) as well as vulnerability management in a modern software enterprise employing DevOps practices, and more specifically a CI/CD pipeline. The talk will discuss security testing at different stages of the S-SDLC from source code analysis to penetration testing and how to effectively manage vulnerabilities. The discussion is applicable to anyone with an interest in security or software in general but is of particular relevance to managers and architects interested in building an effective application security program.
 
  
−
Speaker Bio:
+
__NOTOC__
−
Karim has a background in application security particularly in the banking/finance industries and currently works in a senior offensive security consulting role conducting penetration testing and threat/vulnerability assessments for a variety of clients. Karim was a software engineer in his past life and securing applications has been a strong focus for a good portion of his career.
 
  
 +
<headertabs />
  
−
Date: Jul 19
+
= Sponsors  =
−
Speaker: Roger Trevisan
 
  
−
Title: Application Security Testing in the modern world, differences between various methods, and applicability.}}
+
As a [[About_OWASP | 501(c)(3)]] non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button.  
  
−
[[Category:Canada]]
+
[[Image:Btn_donate_SM.gif|link=https://www.owasp.org/index.php/Local_Chapter_Supporter]] to this chapter or become a local chapter supporter.
 +
 
 +
= Our 2019 Sponsors  =
 +
 
 +
We would like to thank the following companies for providing us with space, pizza and pop, and helping us with our mission to enrich Vancouver's application security community.
 +
 
 +
{|
 +
|-
 +
| &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;[[File:FwdSec.png|frameless|200px|thumb|left|link=https://www.forwardsecurity.com]] || &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;[[File:PlentyOfFish.png|frameless|200px|thumb|left|link=https://www.pof.com/en/press/]] || &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;[[File:zenefits.png|frameless|200px|thumb|left|link=https://www.zenefits.com]]
 +
|-
 +
| [[File:Galvanize.jpg|frameless|200px|thumb|left|link=https://www.wegalvanize.com/]] || [[File:CISCO.png|frameless|200px|thumb|left|link=https://www.cisco.com/c/en_ca/index.html]] || [[File:cmd.png|frameless|200px|thumb|left|link=https://www.cmd.com]]
 +
|}
 +
 
 +
[[Category:Vancouver]]
 +
[[Category:OWASP Chapter]]

Latest revision as of 08:49, 15 May 2019

Welcome to the OWASP Vancouver chapter homepage. We are located in the beautiful province of British Columbia, on the West Coast of Canada.

Our mission is to enrich Vancouver's application security community. We hope you can join us in accomplishing that.

Vancouver1000x450.png

Our monthly sessions take place on the 4th Thursday of each month. We also host one off events and workshops around town.

Have a look at our calendar of awesome events and join us!

The OWASP Vancouver chapter board members are:

Click here to join the local chapter mailing list and Google Group (pre-Google mailing list archives can be found here)

Subscribe to the OWASP Vancouver YouTube channel where you can check out live streams of upcoming sessions as well as archives of previous sessions (big thanks to George Pajari and volunteers).

We welcome speakers of all level! You don't have to be a pro to talk at one of our events, but we do ask that you talk be related to an application security domain and you provide value to attendees. To be a speaker, simply review the speaker agreement and then contact the our chapter lead with details of what OWASP project, independent research or related application security topic you would like to present on.

OWASP Foundation (Overview Slides) is a professional association of global members and is open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook.

Consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member? Join Now BlueIcon.JPG



Sponsors

As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button.

Btn donate SM.gif to this chapter or become a local chapter supporter.

Our 2019 Sponsors

We would like to thank the following companies for providing us with space, pizza and pop, and helping us with our mission to enrich Vancouver's application security community.

          
thumb
           
thumb
           
thumb
thumb
thumb
thumb
Retrieved from "https://wiki.owasp.org/index.php?title=Vancouver&oldid=251589"