This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Marco Morana"
Marco-cincy (talk | contribs) |
Marco-cincy (talk | contribs) |
||
| Line 1: | Line 1: | ||
OWASP Bio - <br> | OWASP Bio - <br> | ||
Marco Morana serves the OWASP organization by leading the [http://www.owasp.org/index.php/Cincinnati USA Cincinnati chapter] and by contributing writing the [http://www.owasp.org/index.php/Application_Threat_Modeling application threat modeling methodology] of the [http://www.lulu.com/items/volume_64/5678000/5678680/13/print/5678680.pdf OWAASP secure coding guide] and the [http://www.owasp.org/index.php/Testing_Guide_Introduction introduction to the security testing methodology] and [http://www.owasp.org/index.php/How_to_value_the_real_risk_AoC value the real risk section] of the [http://www.owasp.org/index.php/Testing_Guide OWASP security testing guide]. Marco has been also one of the reviewers of the [http://www.owasp.org/index.php/Category:OWASP_Source_Code_Review_OWASP_Projects_Project OWASP Source Code Review Project] and is currently reviewing [http://www.owasp.org/index.php/Category:OWASP_Security_Analysis_of_Core_J2EE_Design_Patterns_Project OWASP Security Analysis of Core J2EE Design Patterns Project]. Marco has presented on the topic of software and application security at several OWASP organized conferences in [http://www.slideshare.net/marco_morana/rochester-security-summit-presentation USA] and [http://www.owasp.org/index.php?title=Italy_OWASP_Day_2&setlang=es overseas] as well as at [http://www.slideshare.net/marco_morana/secure-code-reviews-presentation CSI] and [http://www.slideshare.net/marco_morana/software-security-business-case-presentation Blackhat]. | Marco Morana serves the OWASP organization by leading the [http://www.owasp.org/index.php/Cincinnati USA Cincinnati chapter] and by contributing writing the [http://www.owasp.org/index.php/Application_Threat_Modeling application threat modeling methodology] of the [http://www.lulu.com/items/volume_64/5678000/5678680/13/print/5678680.pdf OWAASP secure coding guide] and the [http://www.owasp.org/index.php/Testing_Guide_Introduction introduction to the security testing methodology] and [http://www.owasp.org/index.php/How_to_value_the_real_risk_AoC value the real risk section] of the [http://www.owasp.org/index.php/Testing_Guide OWASP security testing guide]. Marco has been also one of the reviewers of the [http://www.owasp.org/index.php/Category:OWASP_Source_Code_Review_OWASP_Projects_Project OWASP Source Code Review Project] and is currently reviewing [http://www.owasp.org/index.php/Category:OWASP_Security_Analysis_of_Core_J2EE_Design_Patterns_Project OWASP Security Analysis of Core J2EE Design Patterns Project]. Marco has presented on the topic of software and application security at several OWASP organized conferences in [http://www.slideshare.net/marco_morana/rochester-security-summit-presentation USA] and [http://www.owasp.org/index.php?title=Italy_OWASP_Day_2&setlang=es overseas] as well as at [http://www.slideshare.net/marco_morana/secure-code-reviews-presentation CSI] and [http://www.slideshare.net/marco_morana/software-security-business-case-presentation Blackhat]. | ||
| − | Besides contributing to OWASP, Marco works as Technology Information Security Officer for a large financial organization in North America with responsibilities in the definition of the | + | Besides contributing to OWASP, Marco works as Technology Information Security Officer for a large financial organization in North America with responsibilities in the definition of the software security coding standards, management of security assessments during the SDLC, threat modeling and design reviews of web and mobile applications and training of software developers, project managers and architects on different topics related to application security. Marco research work on application and software security is widely published on several magazines such as [http://issuu.com/insecure/docs/insecure-17 In-secure magazine],[http://www.darkreading.com/ Secure Enterprise], [http://www.issa.org/Members/Journals-Archive/2006.html ISSA Journal] and the [http://portal.acm.org/citation.cfm?id=349060 C/C++ Users journal]. Marco's work is referred in [http://iac.dtic.mil/iatac/download/security.pdf DHS Software Security Assurance] Marco is currently working on co-authoring a book on [http://www.slideshare.net/marco_morana/application-threat-modeling-presentation Application Threat Modeling]. Marco’s ideas and strategies for writing secure software are posted on his blog: http://securesoftware.blogspot.com |
Revision as of 22:23, 22 August 2009
OWASP Bio -
Marco Morana serves the OWASP organization by leading the USA Cincinnati chapter and by contributing writing the application threat modeling methodology of the OWAASP secure coding guide and the introduction to the security testing methodology and value the real risk section of the OWASP security testing guide. Marco has been also one of the reviewers of the OWASP Source Code Review Project and is currently reviewing OWASP Security Analysis of Core J2EE Design Patterns Project. Marco has presented on the topic of software and application security at several OWASP organized conferences in USA and overseas as well as at CSI and Blackhat.
Besides contributing to OWASP, Marco works as Technology Information Security Officer for a large financial organization in North America with responsibilities in the definition of the software security coding standards, management of security assessments during the SDLC, threat modeling and design reviews of web and mobile applications and training of software developers, project managers and architects on different topics related to application security. Marco research work on application and software security is widely published on several magazines such as In-secure magazine,Secure Enterprise, ISSA Journal and the C/C++ Users journal. Marco's work is referred in DHS Software Security Assurance Marco is currently working on co-authoring a book on Application Threat Modeling. Marco’s ideas and strategies for writing secure software are posted on his blog: http://securesoftware.blogspot.com
