This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Los Angeles"
(→OWASP LA Security Summit: April 25, 2012, 3:00PM - 8PM) |
|||
| Line 18: | Line 18: | ||
<br> | <br> | ||
| − | + | We will have our May monthly as usual this month. Please note that we need to start at 6:45 sharp and Chris's talk will start promptly at 7:00PM as he needs to fly back to the east coast. | |
| − | + | Please RSVP here: http://www.meetup.com/OWASP-Los-Angeles/events/61886212/ | |
| + | Data Mining a Mountain of Zero Day Vulnerabilities | ||
| − | + | Every day, software developers around the world, from Bangalore to | |
| + | Silicon Valley, churn out millions of lines of insecure code. We used | ||
| + | static binary analysis on thousands of applications submitted to us by | ||
| + | large enterprises, commercial software vendors, open source projects, | ||
| + | and software outsourcers, to create an anonymized vulnerability data | ||
| + | set. By mining this data we can answer some interesting questions. | ||
| − | + | Which industries have the most secure and least secure code? What | |
| + | types of mistakes do developers make most often? Which languages and | ||
| + | platforms have the apps with the most vulnerabilities? Should you be | ||
| + | most worried of internally built apps, open source, commercial | ||
| + | software, or outsourcers? These questions and many more will be | ||
| + | answered as we tunnel through zero day mountain. | ||
| + | Bio: | ||
| − | + | Chris Wysopal, Veracode’s CTO and Co-Founder, is responsible for the | |
| − | + | company’s software security analysis capabilities. In 2008 he was | |
| − | + | named one of InfoWorld's Top 25 CTO's and one of the 100 most | |
| + | influential people in IT by eWeek. One of the original vulnerability | ||
| + | researchers and a member of L0pht Heavy Industries, he has testified | ||
| + | on Capitol Hill in the US on the subjects of government computer | ||
| + | security and how vulnerabilities are discovered in software. He is an | ||
| + | author of L0phtCrack and netcat for Windows. He is the lead author of | ||
| + | “The Art of Software Security Testing” published by Addison-Wesley. | ||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
<br> | <br> | ||
Revision as of 20:21, 17 May 2012
Welcome to Los Angeles Chapter!
<paypal>Los Angeles</paypal>
Donate funds to Los Angeles chapter via RegOnline.
Announcements
We are on Meetup. Please join our community there.
http://www.meetup.com/OWASP-Los-Angeles/
Sign up for OWASP Los Angeles mailing list, very low volume and spam free.
https://lists.owasp.org/mailman/listinfo/owasp-losangeles
We will have our May monthly as usual this month. Please note that we need to start at 6:45 sharp and Chris's talk will start promptly at 7:00PM as he needs to fly back to the east coast.
Please RSVP here: http://www.meetup.com/OWASP-Los-Angeles/events/61886212/
Data Mining a Mountain of Zero Day Vulnerabilities
Every day, software developers around the world, from Bangalore to Silicon Valley, churn out millions of lines of insecure code. We used static binary analysis on thousands of applications submitted to us by large enterprises, commercial software vendors, open source projects, and software outsourcers, to create an anonymized vulnerability data set. By mining this data we can answer some interesting questions.
Which industries have the most secure and least secure code? What types of mistakes do developers make most often? Which languages and platforms have the apps with the most vulnerabilities? Should you be most worried of internally built apps, open source, commercial software, or outsourcers? These questions and many more will be answered as we tunnel through zero day mountain.
Bio:
Chris Wysopal, Veracode’s CTO and Co-Founder, is responsible for the company’s software security analysis capabilities. In 2008 he was named one of InfoWorld's Top 25 CTO's and one of the 100 most influential people in IT by eWeek. One of the original vulnerability researchers and a member of L0pht Heavy Industries, he has testified on Capitol Hill in the US on the subjects of government computer security and how vulnerabilities are discovered in software. He is an author of L0phtCrack and netcat for Windows. He is the lead author of “The Art of Software Security Testing” published by Addison-Wesley.
Would you like to speak at an OWASP Los Angeles Meeting?
Call for Papers (CFP) is NOW OPEN. To speak at upcoming OWASP Los Angeles meetings please submit your BIO and talk abstract via email to Tin Zaw. The talk must be vendor neutral and its content be available under Creative Common 3.0 license.
Archives of Previous Meetings
List of presentations available from past meetings
Los Angeles Chapter
- Tin Zaw -- Chapter Leader and President
- Cassio Goldschmidt -- Board Member
- Richard Greenberg -- Board Member
- Edward Bonver -- Board Member
Volunteer OWASP Leaders: Kelly Fitzgerald, Yev Avidon, Mikhael Felker and Stuart Schwartz
The AppSec USA 2010 conference received rave reviews. Thanks to all the volunteers and great speakers who helped make it a success!
Web archive: http://2010.AppSecUSA.org
Videos: http://vimeo.com/user4863863/videos
