This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Atlanta Georgia"

From OWASP
Jump to: navigation, search
Line 37: Line 37:
 
== '''Future Meetings'''  ==
 
== '''Future Meetings'''  ==
  
===October 2010 Meeting===
+
===November 2010 Meeting===
'''WHAT::''' October Chapter Meeting - Rapid development of web security tools using SpiderSense
+
'''WHAT::''' November Chapter Meeting
  
'''WHEN::''' October 13th 2010 - 7-9PM
+
'''WHEN::''' TBD
  
'''WHERE::'''  Room # 053, College of Computing, Georgia Tech | [http://www.cc.gatech.edu/about/directions#ccb Maps and Directions]
+
'''WHERE::'''  TBD
  
  
'''WHO::''' '''Steve Millar, GTRI'''
+
'''WHO::''' TBD
 
 
Steve Millar is a Senior Research Engineer with the Georgia Tech
 
Research Institute (GTRI).  He is interested in .NET and all
 
things on the web. So, building web tools is a passion that he simply cannot ignore.
 
Steve is interested in building a high-performance framework for rapidly
 
constructing any kind of web tool that can be imagined by humans.  He is
 
also keenly interested in building a thriving community around this code and
 
overall concept.  In a former life, Steve was the lead architect and SW
 
development manager for HP's WebInspect product line where he spent a lot of
 
time obsessing over how to automate web security tasks inside a large,
 
complex, multi-threaded application.  Hopefully he learned enough to help
 
make this simpler for less obsessed people.  Steve also thinks it is strange
 
to refer to himself in the third person.
 
 
 
  
  
 
'''ABSTRACT:: '''  
 
'''ABSTRACT:: '''  
  
Web Security tools are everywhere and they come in multiple flavors from
+
TBD
freely downloadable binaries to open source libraries to commercial
 
application suites.  Unfortunately, they never seem to do exactly what you
 
need and they are not always easy to extend or configure.  Wouldn't it be
 
nice if the tools were inter-operable, easy to construct (think Lego blocks)
 
and high-performance?  Something more useful than just a few Python scripts
 
and a prayer.  Georgia Tech's Cyber Technology and Information Security Lab
 
is on a mission to provide such a tool framework.
 
 
 
 
 
SpiderSense is a .NET code library and suite of tools that enables rapid
 
development of web security tools and data mining applications.  The core
 
pillars of SpiderSense are a high performance web crawler, a modular and
 
extensible analysis engine and pluggable content parsers.  These modules can
 
be combined quickly and flexibly to create data gathering and discovery
 
tools.  SpiderSense also enables the crafting of non-standard HTTP payloads
 
that can be used in automated penetration testing and web-based
 
exploitation.  The framework also uses a plug-in analysis model to allow
 
experimentation with a broad range of analysis algorithms.  If you can do it
 
with HTTP then you can do it with SpiderSense.
 
 
 
 
 
We will show just a few slides to outline the problem then quickly
 
dive into SpiderSense starting with demonstrations of a few tools and
 
finishing with a discussion of architecture, community and the development
 
roadmap.  Hopefully we can get some good brain-storms to occur around the
 
topics of cool features and ways for the community to contribute.  The
 
speaker also wants to walk away with some great ideas about possible
 
extensibility points from the audience.  Bring your thinking cap and your
 
good ideas about web tools and we'll roll up our sleeves and talk code!
 
  
  
Line 103: Line 60:
  
 
== Past Meetings  ==
 
== Past Meetings  ==
 +
 +
[[Atlanta Member Meeting 10.13.10 | Oct 2010 - Rapid Development of Web Security Tools using SpiderSense]]
  
 
[[Atlanta Member Meeting 09.15.10 | Sep 2010 - Search Engine Hacking]]
 
[[Atlanta Member Meeting 09.15.10 | Sep 2010 - Search Engine Hacking]]

Revision as of 02:55, 14 October 2010

OWASP Atlanta

Welcome to the Atlanta chapter homepage. Chapter Lead is Tony UcedaVelez (Tony UV).

OwaspAtl.png


Participation

OWASP Foundation (Overview Slides) is a professional association of global members and is open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.

Sponsorship/Membership

Btn donate SM.gif to this chapter or become a local chapter supporter. Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member? Join Now BlueIcon.JPG


Local News

Our next meeting would be on 13th October where Steve Millar will present Rapid development of web security tools using SpiderSense. For more information, click on the Chapter Meetings tab.


On behalf of the chapter, I would like to solicit your financial support of chapter via a tax deductible membership for a great non-profit organization which aims to elevate web application security. Please note that other chapters have the luxury to charge their members for attending some of their meetings. We hope that you find historical and future meetings to be of value and show support via a member based contribution. To contribute to OWASP-Atlanta, go here: <paypal>Atlanta Georgia</paypal>

Staying in Touch

New OWASP Atlanta Linkedin Group. For those addicted to LinkedIn, we have a group you can further feed your addiction. The OWASP Atlanta Chapter. http://www.linkedin.com/groups?home=&gid=1811960&trk=anet_ug_hm

Register for the OWASP Atlanta Mailing List by signing up here: http://lists.owasp.org/mailman/listinfo/owasp-atlanta


OWASP Atlanta Supporters

Thanks to the following list of official sponsors and supportive organizations for their financial contributions and resource support.

  • Georgia Tech Information Security Center: GTISC logo2.jpg
  • Fortify: Fortify.jpg

2009 OWASP Atlanta Member Survey

The Atlanta OWASP Member Survey has come and gone. Thanks to all those that responded. A subset of the results is shown below in the form of top ranking security topics that members wish to see in 2009. More detailed results will be provided and discussed briefly during our first meeting, April 2nd, 2009. Owasp surv.jpg


Chapter Meetings

Future Meetings

November 2010 Meeting

WHAT:: November Chapter Meeting

WHEN:: TBD

WHERE:: TBD


WHO:: TBD


ABSTRACT::

TBD


RSVP:: http://tr.im/owasp_meeting

COST: Free to everyone


Past Meetings

Oct 2010 - Rapid Development of Web Security Tools using SpiderSense

Sep 2010 - Search Engine Hacking

Aug 2010 - OWASP Guided Tour & Using the O2 Platform

Jun 2010 - Security Six Flags Outing

May 2010 - Clubbing WebApps with Botnets

Mar 2010 - Panel on Static & Dynamic Analysis for Web Apps

Feb 2010 - Embedded Malicious JavaScript

Feb 2010 - DNS Security

Jan 2010 - Owasp Top 10

Oct 2009 - Security Religions & Risk Windows (Jeremiah Grossman)

Sept 2009 - Securing WebServices

Aug 2009 - ISSA Event

June 2009 - OWASP LIVE CD Workshop

Apr 2009 - Filter Evasion Techniques (Workshop)

Apr 2009 - Chapter Rebirth meeting

Atlanta ISACA OWASP Meeting 03.27.09

Atlanta Leadership Meeting 03.05.09

Atlanta Leadership Meeting 02.26.09

Atlanta OWASP May 2007 Meeting

Atlanta OWASP December 06 Social

Atlanta OWASP April Meeting

Chapter Meeting March 29th 2006

October 26th Meeting

April 27th, Chapter meeting a SUCCESS!

March 30th, 2005

February Meeting

June 2005

Atlanta Georgia OWASP Chapter Leaders

  • Tony UcedaVelez - Chapter Lead
  • Charles Burke - Meeting Chairperson
  • Shauvik Roy Choudhary - Marketing Chairperson