Difference between revisions of "Switzerland"

Please find below the planned dates for the upcoming OWASP Switzerland Meetings:

Date	Info	Speaker	Location	Host	Event	Topic
2015-06-17				Compass Security	Chapter Meeting	?
2015-08-19		?	?	?	Chapter Meeting	?
2015-10-14		?		Ergon Informatik	Chapter Meeting	?
2015-12-15		?	?	?	Chapter Meeting	?

We'd like to invite you to out next OWASP Switzerland meeting. If you want to attend, please make sure to register for the event with your *full name* through register. Space is limited to 30 attendees.

• When: Wednesday, June 17th 2015

  Starting at 18:00

  Doors at 17:30

• What (presentation): "Android apps in sheep's clothing" by Tobias Ospelt, Security Analyst at modzero AG

  An XSLT processor is a piece of software for manipulating XML files or transforming them into other file formats. These XSLT processors are very feature rich, which makes them interessting in the or even run commands. These processors enable you also to perform so called Server Side Request Forgeries (SSRF). SSRF is a technique which triggers a request on the vulnerable host. So it is possible for an attacker to access remote machines which are not directly available for the attacker.

  In a student project at the Hochschule für Technik Rapperswil (HSR), we did some testing on vulnerabilities of XSLT processors and the ability to use them for SSRF. In our talk we will present the test results and show a live demonstration. You will see which processor is vulerable against which vulnerabilities and what a developer can do to use them safely.

• Where:

  Compass Security Schweiz AG

  Ahornweg 2

  3012 Bern

• Who:

  As usual, all of our meetings are open to everyone and free of charge.

• Agenda:

  17:30 | Doors will open

  18:00 – 18:15 | Update on OWASP by Sven Vetsch, OWASP Switzerland

  18:20 – 19:00 | "XSLT Processing Security and Server Side Request Forgeries" by Roland Bischofberger and Emanuel Duss

  19:15 - **:** | Dinner

OWASP Chapter meetings are free and open. Our chapter's meetings are informal and encourage open discussion of all aspects of application security. Anyone in our area interested in application security is welcome to attend. We encourage attendees to give short presentations about specific topics.

Our main topics are:

• Security testing
• Secure development
• Hacking
• Secure Architectures

If you would like to give a presentation (make sure that you have read and understood the speaker agreement), or have any questions about the OWASP Switzerland Chapter, send an email to Sven Vetsch.

Help us to make application security visible and become a supporter of the OWASP or our Chapter in Switzerland. All information about becoming a member/sponsor can be found here.

If your company is interested in supporting us directly, please contact Sven Vetsch to talk about the following sponsoring possibilities.

• Chapter Supporter
• Single Meeting Supporter
• Facility Sponsor
• Organization Supporters (allocating 40% of your annual donation to our Chapter)

Here you can find material related to the OWASP Switzerland Chapter.

OWASP Switzerland bylaws (in German)
Download bylaws

OWASP Switzerland Update Presentation (December 13th 2011)
Download Presentation