Revision as of 22:51, 31 May 2013

OWASP Global Projects Report

• Project Numbers
  • Active Projects: 154
  • Inactive Projects: 67

• Project Applications
  • VCR Project
  • Windows Binary Executable Files Security Checks
  • Wordpress Security Checklist
  • Simple Host Base Incidence Detection System
  • Chat Application
  • Supporting Legacy Web Applications in the Current Environment

• Projects Under Review
  • OWASP Cheat Sheets Project
  • OWASP Java HTML Sanitizer Project
  • Xenotix XSS Exploit Framework
  • Project reviews are on hold until we can fill the Technical Project Advisor volunteer roles.

Currently Working On

• OWASP Projects at AppSec Conferences 2013
  • Planning continues for the project event modules for AppSec USA 2013.
  • I continue to work with our project summit participating leaders to work out costs and logistics for their attendance.
  • I am in the process of putting together our project leader workshop materials.
  • The workshop will be a 45 - 50 minute interactive presentation for current and potential OWASP Project Leaders.
  • It will take place at the AppSec USA 2013 conference in New York.
  • I will continue to provide support to the local event planning team for AppSec EU, as needed.

• Women in Security: AppSec USA 2013
  • The team has finished a first draft of the Sponsorship Document.
  • The plan is to reach out to different organizations for sponsorship.
  • You can find more information on the AppSec USA website.
  • We are currently attempting to raise $3,000.00 for each winner.
  • We plan on having 2 winners for 2013.
  • The total amount we are requesting is $6,000.00 to cover conference fee, training fee, travel and accommodation for both winners.
  • We are working hard to make this a possibility for our 2 potential winners.

• Determining Active Project Status
  • This is a status update on this initiative.
  • I am reaching out to each leader individually to confirm these pieces of data for all 154 projects.
  • Flagship projects are completed.
  • Labs are completed.
  • Incubator projects are now in the 3rd phase of 4 phases.

• Technical Project Advisory Roles
  • I have decided to take a secondary role in the planning of our project event modules for AppSec EU 2013.
  • I will not be able to attend this year, so I felt it best if the local events team take the initiative with the planning of each event module.
  • I will continue to provide support to the local event planning team as needed.

• Marketing Phase 3 Update
  • Seba and I have finished our work on the OWASP section of the European Commission grant proposal.
  • The grant opportunity has the potential to help a hand full of OWASP projects with resources and funds.
  • Seba and I presented our internal proposal to proceed to the Board of Directors last week, and it was approved.
  • The proposal has now been submitted to the European Commission.
  • We expect to hear back from the EU Commission with a decision towards the end of 2013.

• Strategic Goals Presentation
  • Seba and I have finished our work on the OWASP section of the European Commission grant proposal.
  • The grant opportunity has the potential to help a hand full of OWASP projects with resources and funds.
  • Seba and I presented our internal proposal to proceed to the Board of Directors last week, and it was approved.
  • The proposal has now been submitted to the European Commission.
  • We expect to hear back from the EU Commission with a decision towards the end of 2013.

• Personal Development
  • Seba and I have finished our work on the OWASP section of the European Commission grant proposal.
  • The grant opportunity has the potential to help a hand full of OWASP projects with resources and funds.
  • Seba and I presented our internal proposal to proceed to the Board of Directors last week, and it was approved.
  • The proposal has now been submitted to the European Commission.
  • We expect to hear back from the EU Commission with a decision towards the end of 2013.

• Daily Project based queries and requests
  • This has not changed much since I began the post: questions are very similar in nature.
  • Global AppSec questions.
  • Funding queries.
  • Travel availability.
  • Project based administrative help.
  • Project status information.
  • Several project donations questions.
  • Marketing questions.
  • Grant funding questions.
  • OWASP Social Media Updates.
  • What's happening with projects, questions.

Grants Updates

• OWASP Guidebooks Proposal

1. Amount: $25,000 USD
2. Status: The first payment has been allocated to our project budgets.
3. OWASP Development Guide Plan
4. OWASP Testing Guide Plan
5. OWASP Code Review Guide Plan

• OWASP ESAPI Grant Proposal

1. Amount: $25,000 USD
2. Status: The ESAPI proposal is still being reviewed.

• OWASP ModSecurity CRS Proposal

1. Amount: $30,000 USD
2. Status: The ModSecurity proposal is still being reviewed.

• Google Grants Proposal

1. Amount: $120,000 USD in Adwords Funds
2. Status: We now have a better idea of the initiatives and tasks we must undertake to better leverage this award. We will discuss possible solutions during our Mid-Term (6-12 month) marketing planning.
3. Note: There is no link to show the proposal for this grant. There was a form that was submitted to Google, and we did not receive a record of this form.

• European Commission Grant Proposal

1. Amount: €250,000
2. Status: This proposal has been completed and submitted.

• Total Grant Funds Awarded: $145,000 USD for 2013.