This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Los Angeles"

From OWASP
Jump to: navigation, search
(May 20th, 2009 7:00PM (note the time change))
(June 24th, 2009 7:30PM)
Line 18: Line 18:
  
  
== June 24th, 2009 7:30PM ==  
+
== Thursday, August 20th, 2009 7:30PM ==
* <b>Information Warfare: Past, Present and Future</b>
+
* <b>The Software Assurance Maturity Model (SAMM)</b>
 
<br>
 
<br>
Information warfare is the composite use of psychological operations
+
The Software Assurance Maturity Model (SAMM) (http://www.opensamm.org)
(PYOPS), military deception (MILDEC), operational security (OPSEC),
+
is a flexible and prescriptive framework for building security into a
computer network operations (CNO), and electronic warfare (EW) to
+
software development organization. Covering more than typical
control and disrupt information flow. Recently, interest in
+
SDLC-based models for security, SAMM enables organizations to
information war technologies, techniques and policy issues have
+
self-assess their security assurance program and then use recommended
increased, especially in the domain of CNO. Increased scrutiny over
+
roadmaps to improve in a way that's aligned to the specific risks
network operations is both legitimate and valid, as global commerce
+
facing the organization. Beyond that, SAMM enables creation of
and military powers are integrated and dependent on the Internet for
+
scorecards for an organization's effectiveness at secure software
critical operations. This presentation will describe the five domains
+
development throughout the typical governance, development, and
of information warfare, the past use of information warfare in the
+
deployment business functions. Scorecards also enable management
Gulf war and recent Cyber attacks on the Eastern European countries of
+
within an organization to demonstrate quantitative improvements
Georgia and Estonia. Information will be presented on possible new
+
through iterations of building a security assurance program. This
directions of information warfare.
+
workshop will introduce the SAMM framework and walk through useful
 +
activities such as assessing an assurance program, mapping an existing
 +
organization to a recommended roadmap, and iteratively building an
 +
assurance program. Time allowing, additional case studies will also be
 +
discussed. SAMM is an open and free project and has recently been added
 +
under the Open Web Application Security Project (OWASP) Foundation.
 
<br><br>
 
<br><br>
<b>Mikhael Felker</b>, CISSP-ISSEP has worked in a variety of roles including
+
 
instructor, engineer, and researcher. He is currently employed by The
+
<B>Pravir Chandra</b> is Director of Strategic Services at Fortify Software
Aerospace Corporation in the Information Assurance Technology
+
and works with clients on software security assurance programs.
Department, supporting Information Assurance (IA) for satellite
+
Pravir is recognized for his expertise in software security, code
systems.  He is also an Instructor within the Computer & Information
+
analysis, and his ability to strategically apply technical knowledge.
Systems Division at UCLA Extension, teaching a course in networking.
+
Prior to Fortify, he was a Principal Consultant affiliated with
Actively involved in the Los Angeles security community, he is the
+
Cigital and led large software security programs at Fortune 500
Education Director for Los Angeles Chapter of Information Systems
+
companies.  Pravir Co-Founded Secure Software, Inc. and was Chief
Security Association (ISSA), member and speaker of Information Systems
+
Security Architect prior to its acquisition by Fortify.  He recently
Audit and Control Association (ISACA), and former Defense Sector
+
created and led the Open Software Assurance Maturity Model (OpenSAMM)
Coordinator for InfraGard.  Mikhael has published articles in IEEE
+
project with the OWASP Foundation, leads the OWASP CLASP project, and
Security & Privacy, the ISSA Journal, Information Systems Control
+
also serves as member of the OWASP Global Projects Committee. Pravir
Journal, and SecurityFocus.  He is a recipient of the Scholarship for
+
is author of the book Network Security with OpenSSL.
Service Program (SFS) Fellowship, sponsored by the National Science
 
Foundation and Department of Homeland Security (DHS).  Mikhael
 
completed his graduate work at Carnegie Mellon University with a
 
Master's in Information Security Policy & Management and Bachelor's at
 
UCLA in Computer Science. He holds over 10 certifications in IT and
 
Security.
 
 
<br><br>
 
<br><br>
  

Revision as of 17:55, 27 June 2009

OWASP Los Angeles

Welcome to the Los Angeles chapter homepage. The chapter leader is Cassio Goldschmidt


Participation

OWASP Foundation (Overview Slides) is a professional association of global members and is open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.

Sponsorship/Membership

Btn donate SM.gif to this chapter or become a local chapter supporter. Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member? Join Now BlueIcon.JPG


<paypal>LosAngeles</paypal>

Local News

Upcoming Chapter Meetings


   Meeting Location
   Symantec Corporation
   900 Corporate Pointe
   Culver City, CA 90230
   Laguna Conference Room



Thursday, August 20th, 2009 7:30PM

  • The Software Assurance Maturity Model (SAMM)


The Software Assurance Maturity Model (SAMM) (http://www.opensamm.org) is a flexible and prescriptive framework for building security into a software development organization. Covering more than typical SDLC-based models for security, SAMM enables organizations to self-assess their security assurance program and then use recommended roadmaps to improve in a way that's aligned to the specific risks facing the organization. Beyond that, SAMM enables creation of scorecards for an organization's effectiveness at secure software development throughout the typical governance, development, and deployment business functions. Scorecards also enable management within an organization to demonstrate quantitative improvements through iterations of building a security assurance program. This workshop will introduce the SAMM framework and walk through useful activities such as assessing an assurance program, mapping an existing organization to a recommended roadmap, and iteratively building an assurance program. Time allowing, additional case studies will also be discussed. SAMM is an open and free project and has recently been added under the Open Web Application Security Project (OWASP) Foundation.

Pravir Chandra is Director of Strategic Services at Fortify Software and works with clients on software security assurance programs. Pravir is recognized for his expertise in software security, code analysis, and his ability to strategically apply technical knowledge. Prior to Fortify, he was a Principal Consultant affiliated with Cigital and led large software security programs at Fortune 500 companies. Pravir Co-Founded Secure Software, Inc. and was Chief Security Architect prior to its acquisition by Fortify. He recently created and led the Open Software Assurance Maturity Model (OpenSAMM) project with the OWASP Foundation, leads the OWASP CLASP project, and also serves as member of the OWASP Global Projects Committee. Pravir is author of the book Network Security with OpenSSL.

Would you like to speak at an OWASP Los Angeles Meeting?

Call for Papers (CFP) is NOW OPEN ~ to submit educational topic for upcoming meeting please submit your BIO and talk abstract via email to Cassio Goldschmidt. When accepted it will be required to use the following powerpoint OWASP Template


This page provides a list of previous presentations conducted at the Los Angeles Chapter.


Los Angeles Chapter Leader