This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Switzerland"
From OWASP
Schattenbaum (talk | contribs) (Past Meetings: Added the missing slides and hid the past meeting on the Next Meeting page) |
Schattenbaum (talk | contribs) (→Next Meetings: Added meeting infos) |
||
| Line 14: | Line 14: | ||
= Next Meetings = | = Next Meetings = | ||
| − | + | We'd like to invite you to our next OWASP Switzerland meeting. If you want to attend, please make sure to register for the event with your *full name* through register. Space is limited to 30 attendees. | |
| − | [[Image:Register_button.png|62px|link=http://doodle.com/poll/ | + | [[Image:Register_button.png|62px|link=http://doodle.com/poll/7qh388sgvhczbqrv]] |
| − | * When: Tuesday, | + | * When: Tuesday, June 7th 2015 |
| − | *:17: | + | *:17:30 | Doors will open |
| − | *: | + | *:18:00 – 18:15 | Update on OWASP |
| − | *: | + | *:18:20 – 19:00 | Talk |
*:19:15 – **:** | Dinner | *:19:15 – **:** | Dinner | ||
| − | [[File:owasp_switzerland_next_meeting.png|150px|right|OWASP Switzerland Next Meeting]] | + | <!--[[File:owasp_switzerland_next_meeting.png|150px|right|OWASP Switzerland Next Meeting]]--> |
| − | * What " | + | * What: "The Tale of a Fameless but Widespread Vulnerability" by Veit Hailperin (Scip): |
| − | *: | + | *:Two key components account for finding vulnerabilities of a certain class: awareness of the vulnerability and ease of finding the vulnerability. Cross-Site Script Inclusion (XSSI) vulnerabilities are not mentioned in the de facto standard for public attention - the OWASP Top 10. Additionally there is no publicly available tool to facilitate finding XSSI. The impact reaches from leaking personal information stored, circumvention of token-based protection to complete compromise of accounts. XSSI vulnerabilities are fairly wide spread and the lack of detection increases the risk of each XSSI. In this talk I am going to demonstrate how to find XSSI, exploit XSSI and also how to protect against XSSI exploitation. |
| − | |||
| − | |||
| − | |||
| − | + | * Where: [[Image:location.png|20px|link=https://goo.gl/maps/d3eqUeT3zQ12]] | |
| − | + | *:Swisscom | |
| − | + | *:Pfingstweidstrasse 51 | |
| − | * Where: [[Image:location.png|20px|link=https://goo.gl/maps/ | + | *:8005 Zürich |
| − | *: | ||
| − | *: | ||
| − | *:8005 | ||
* Who: | * Who: | ||
*:As usual, all of our meetings are open to everyone and free of charge. | *:As usual, all of our meetings are open to everyone and free of charge. | ||
---- | ---- | ||
| − | Please find below the planned dates for the upcoming OWASP Switzerland Meetings: | + | <!--Please find below the planned dates for the upcoming OWASP Switzerland Meetings: |
{| class="wikitable sortable" border="0" | {| class="wikitable sortable" border="0" | ||
| Line 63: | Line 57: | ||
|} | |} | ||
--> | --> | ||
| + | <!-- | ||
There are no planned meetings for 2016 yet. Keep yourself informed and up-to-date by subscribing to our (low-traffic) [https://lists.owasp.org/mailman/listinfo/owasp-switzerland mailinglist]. | There are no planned meetings for 2016 yet. Keep yourself informed and up-to-date by subscribing to our (low-traffic) [https://lists.owasp.org/mailman/listinfo/owasp-switzerland mailinglist]. | ||
| + | --> | ||
= Past Meetings = | = Past Meetings = | ||
Revision as of 07:49, 19 May 2016
Welcome to the Home Page of the OWASP Switzerland Chapter.
- The chapter leader is Sven Vetsch supported by Antonio Fontes. Please contact us with any questions regarding the chapter.
- Please subscribe to the mailing list for meeting announcements and other news related to OWASP in Switzerland.
- You can follow us on Twitter and Facebook
If you're living in the French speaking part of Switzerland, please also visit the OWASP Geneva chapter for more information.
We'd like to invite you to our next OWASP Switzerland meeting. If you want to attend, please make sure to register for the event with your *full name* through register. Space is limited to 30 attendees.
- When: Tuesday, June 7th 2015
- 17:30 | Doors will open
- 18:00 – 18:15 | Update on OWASP
- 18:20 – 19:00 | Talk
- 19:15 – **:** | Dinner
- What: "The Tale of a Fameless but Widespread Vulnerability" by Veit Hailperin (Scip):
- Two key components account for finding vulnerabilities of a certain class: awareness of the vulnerability and ease of finding the vulnerability. Cross-Site Script Inclusion (XSSI) vulnerabilities are not mentioned in the de facto standard for public attention - the OWASP Top 10. Additionally there is no publicly available tool to facilitate finding XSSI. The impact reaches from leaking personal information stored, circumvention of token-based protection to complete compromise of accounts. XSSI vulnerabilities are fairly wide spread and the lack of detection increases the risk of each XSSI. In this talk I am going to demonstrate how to find XSSI, exploit XSSI and also how to protect against XSSI exploitation.
- Where:
- Swisscom
- Pfingstweidstrasse 51
- 8005 Zürich
- Who:
- As usual, all of our meetings are open to everyone and free of charge.
| Date | Info | Speaker | Host | Slides | Event | Topic |
|---|---|---|---|---|---|---|
| 2015-12-15 |  |
 |
|
 |
Chapter Meeting | Top X OAuth 2 Hacks Reliable log data transfer: about syslog, logstash and log data signing |
| 2015-10-14 | |
|
|
|
Chapter Meeting | Application Security Testing by Static Code Analysis |
| 2015-08-19 | |
|
|
Chapter Meeting | BarCamp | |
| 2015-06-17 | |
|
|
|
Chapter Meeting | XSLT Processing Security and Server Side Request Forgeries |
| 2015-04-15 | |
|
|
|
Chapter Meeting | Android apps in sheep's clothing |
| 2015-02-18 | |
|
|
|
Chapter Meeting | Abusing JSONP with Rosetta Flash |
| 2014-12-10 | |
|
|
Chapter Meeting | OWASP Switzerland Fondue | |
| 2014-11-12 | |
|
|
|
Chapter Meeting | Living on the Edge - Advanced ModSecurity to Save Your Ass |
| 2014-08-20 | |
|
|
|
Chapter Meeting | (Client-Side) Flash Security |
| 2014-06-17 | |
|
|
|
Chapter Meeting | XSS and beyond |
| 2014-04-09 | |
|
|
|
Chapter Meeting | SSL/TLS jungle - bringing light into the cipher forest |
| 2014-02-19 | |
|
|
|
Chapter Meeting | S-SDLC – Ready for the Cloud? |
| 2013-12-17 | |
|
|
Chapter Meeting | Annual Review & Outlook | |
| 2013-10-22 | |
|
|
|
Chapter Meeting | Advances in secure (ASP).NET development – Break the hacker's spirit |
| 2013-10-22 | |
|
|
|
Chapter Meeting | Node.js Security |
| 2013-04-09 | |
|
|
Chapter Meeting | Tools (not) to use | |
| 2012-09-19 | |
|
|
Security-Zone | OWASP Top 10 Mobile Risks | |
| 2012-06-12 | |
|
|
Chapter Meeting | Reversing Android Apps | |
| 2012-02-14 | |
|
|
Chapter Meeting | Analysis of the RSA Security Breach | |
| 2011-12-13 | |
|
|
Chapter Meeting | AppSec - Why is it important | |
| 2011-12-13 | |
|
|
Chapter Meeting | Dangers of Firefox Add-On's | |
| 2011-10-11 | |
|
|
Chapter Meeting | Presentation of the OWASP Top 10 & a hands-on session | |
| 2011-08-09 | |
|
|
Chapter Meeting | Foundation of OWASP Switzerland Association | |
| 2011-06-14 | |
|
|
|
Chapter Meeting | Automatic CRL updates for the Apache Web server |
| 2011-06-14 | |
|
|
|
Chapter Meeting | New Standards and upcoming Technologies in Browser Security (Slides by Tobias Gondrom) |
| 2011-05-12 | |
|
|
Swiss Cyber Storm III | Do you know OWASP? | |
| 2011-04-12 | |
|
|
|
Chapter Meeting | ASP.NET & ViewState Security |
| 2010-04-12 | |
|
|
Chapter Meeting | Usability vs. Security | |
| 2010-04-12 | |
|
|
Chapter Meeting | 2-factor authentication for mobile devices: a secure and practical approach | |
| 2009-06-25 | |
 |
|
Chapter Meeting | Benefits of a security API such as ESAPI | |
| 2009-06-25 | |
|
|
Chapter Meeting | Advanced SQL injection exploitation to operating system full control | |
| 2009-04-07 | |
|
|
Chapter Meeting | Open security architecture (www.opensecurityarchitecture.org) | |
| 2009-04-07 | |
|
|
Chapter Meeting | XSRF and JSON hijacking & a hands-on session | |
| 2008-09-08 | |
|
|
Chapter Meeting | Quality of services for web applications (Hands-On Workshop) | |
| 2008-09-08 | |
|
|
Chapter Meeting | XML Security (Hands-On Workshop) | |
| 2008-09-08 | |
|
|
Chapter Meeting | ISC2/Application security | |
| 2008-04-01 | |
|
|
Global OWASP Week | Taking Apache access logs to the next level | |
| 2008-04-01 | |
|
|
Global OWASP Week | Implementing an Application Security Lifecycle programme | |
| 2008-04-01 | |
|
|
Global OWASP Week | WebAppSec the Big Picture | |
| 2007-12-11 | |
|
|
Chapter Meeting | Certified Secure Web | |
| 2007-12-11 | |
|
|
Chapter Meeting | Secure Development Life Cycle | |
| 2007-12-11 | |
|
|
Chapter Meeting | Securing my Assets (Presentation & Demo) | |
| 2007-09-20 | |
|
|
Security-Zone | OWASP Testing Guide | |
| 2007-09-19 | |
|
|
Security-Zone | OWASP Top 10 | |
| 2007-07-24 | |
|
|
Chapter Meeting | OWASP - An Overview | |
| 2007-07-24 | |
|
|
|
Chapter Meeting | Dependability for Java Mobile Code |
| 2007-07-24 | |
|
|
Chapter Meeting | OWASP Top 10 (Demo) | |
| 2007-04-26 | |
|
|
Chapter Meeting | Risk metrics | |
| 2007-02-12 | |
|
|
|
Chapter Meeting | XSS-Worms |
| 2006-11-11 | |
Chapter Meeting | OWASP Switzerland Chapter Kick-Off Meeting |
OWASP Chapter meetings are free and open. Our chapter's meetings are informal and encourage open discussion of all aspects of application security. Anyone in our area interested in application security is welcome to attend. We encourage attendees to give short presentations about specific topics.
Our main topics are:
- Security testing
- Secure development
- Hacking
- Secure Architectures
If you would like to give a presentation (make sure that you have read and understood the speaker agreement), or have any questions about the OWASP Switzerland Chapter, send an email to Sven Vetsch.
Help us to make application security visible and become a supporter of the OWASP or our Chapter in Switzerland. All information about becoming a member/sponsor can be found here.
If your company is interested in supporting us directly, please contact Sven Vetsch to talk about the following sponsoring possibilities.
- Chapter Supporter
- Single Meeting Supporter
- Facility Sponsor
- Organization Supporters (allocating 40% of your annual donation to our Chapter)
Here you can find material related to the OWASP Switzerland Chapter.
OWASP Switzerland bylaws (in German)
Download bylaws
OWASP Switzerland Update Presentation (December 13th 2011)
Download Presentation
<paypal>Switzerland</paypal>
|
|
|
