Revision as of 23:20, 31 May 2013

OWASP Global Projects Report

• Project Numbers
  • Active Projects: 154
  • Inactive Projects: 67

• Project Applications
  • VCR Project
  • Windows Binary Executable Files Security Checks
  • Wordpress Security Checklist
  • Simple Host Base Incidence Detection System
  • Chat Application
  • Supporting Legacy Web Applications in the Current Environment

• Projects Under Review
  • OWASP Cheat Sheets Project
  • OWASP Java HTML Sanitizer Project
  • Xenotix XSS Exploit Framework
  • Project reviews are on hold until we can fill the Technical Project Advisor volunteer roles.

Currently Working On

• OWASP Projects at AppSec Conferences 2013
  • Planning continues for the project event modules for AppSec USA 2013.
  • I continue to work with our project summit participating leaders to work out costs and logistics for their attendance.
  • I am in the process of putting together our project leader workshop materials.
  • The workshop will be a 45 - 50 minute interactive presentation for current and potential OWASP Project Leaders.
  • It will take place at the AppSec USA 2013 conference in New York.
  • I will continue to provide support to the local event planning team for AppSec EU, as needed.

• Women in Security: AppSec USA 2013
  • The team has finished a first draft of the Sponsorship Document.
  • The plan is to reach out to different organizations for sponsorship.
  • You can find more information on the AppSec USA website.
  • We are currently attempting to raise $3,000.00 for each winner.
  • We plan on having 2 winners for 2013.
  • The total amount we are requesting is $6,000.00 to cover conference fee, training fee, travel and accommodation for both winners.
  • We are working hard to make this a possibility for our 2 potential winners.

• Determining Active Project Status
  • This is a status update on this initiative.
  • I am reaching out to each leader individually to confirm these pieces of data for all 154 projects.
  • Flagship projects are completed.
  • Labs are completed.
  • Incubator projects are now in the 3rd phase of 4 phases.

• Technical Project Advisory Roles
  • I am currently at the 1st stage of the interview process for each candidate.
  • I have created job descriptions for each role, and I have had those roles posted for over a month.
  • We have had a good amount of candidates apply for each role.
  • I have sent out e-mails asking each candidate to answer 3 questions regarding their interest in these roles.
  • I will reach out to those individuals that respond to my request by next week.

• Marketing Phase 3 Update
  • The marketing deliverables are going smoothly.
  • There is quite a bit of work to be done during this phase as this is where the back and forth approval process takes place.
  • The Ops Team is diligently working on this phase with Sisterworks Publishing and Design Foundry.
  • At the moment, we are working on finalising the copy for each piece of collateral that is scheduled to be designed.
  • Phase 1 Deliverable
  • Phase 2 Deliverable
    • Note: Phase 2 Deliverable has recommendations made by Sisterworks and Design Foundry based on their research.
    • We are not necessarily moving forward with these recommendations towards implementation.
    • Sisterworks and Design Foundry are helping with our branding consistency and collateral design.

• Strategic Goals Presentation
  • Ludovic petit has requested that we put together a presentation that the community can use to communicate our 2013 Strategic Goals.
  • Sarah and I have put together a first draft of the deck.
  • We plan to add to it over the coming weeks to make certain we encompass the thinking behind each goals for this year.
  • 2013 Strategic Goals draft

• Personal Development
  • Seba and I have finished our work on the OWASP section of the European Commission grant proposal.
  • The grant opportunity has the potential to help a hand full of OWASP projects with resources and funds.
  • Seba and I presented our internal proposal to proceed to the Board of Directors last week, and it was approved.
  • The proposal has now been submitted to the European Commission.
  • We expect to hear back from the EU Commission with a decision towards the end of 2013.

• Daily Project based queries and requests
  • This has not changed much since I began the post: questions are very similar in nature.
  • Global AppSec questions.
  • Funding queries.
  • Travel availability.
  • Project based administrative help.
  • Project status information.
  • Several project donations questions.
  • Marketing questions.
  • Grant funding questions.
  • OWASP Social Media Updates.
  • What's happening with projects, questions.

Grants Updates

• OWASP Guidebooks Proposal

1. Amount: $25,000 USD
2. Status: The first payment has been allocated to our project budgets.
3. OWASP Development Guide Plan
4. OWASP Testing Guide Plan
5. OWASP Code Review Guide Plan

• OWASP ESAPI Grant Proposal

1. Amount: $25,000 USD
2. Status: The ESAPI proposal is still being reviewed.

• OWASP ModSecurity CRS Proposal

1. Amount: $30,000 USD
2. Status: The ModSecurity proposal is still being reviewed.

• Google Grants Proposal

1. Amount: $120,000 USD in Adwords Funds
2. Status: We now have a better idea of the initiatives and tasks we must undertake to better leverage this award. We will discuss possible solutions during our Mid-Term (6-12 month) marketing planning.
3. Note: There is no link to show the proposal for this grant. There was a form that was submitted to Google, and we did not receive a record of this form.

• European Commission Grant Proposal

1. Amount: €250,000
2. Status: This proposal has been completed and submitted.

• Total Grant Funds Awarded: $145,000 USD for 2013.