Difference between revisions of "OWASP EU Summit 2008--PRESS"

The outcomes will promote OWASP documents in the market and to be part of it will make the difference for your company, your career and your personal contribution for the security community.

The working session for OWASP Tools will address standards for Tool development at OWASP. This is will include standards for documentation, supporting tools via Books, How-Tos, Webcasts, Podcasts. We will also dive deep into the OWASP Project Assessment.

This session is for toolmakers who want to make better tools.

Are we protecting .NET/Mono developers? Is there adequate security guidance and vulnerability research for technology platforms, frameworks, community software, including:

• ASP.NET Data Services
• ASP.NET MVC
• Sharepoint
• Silverlight
• Community Server
• Wikipedia Search (Mono)
• DekiWiki (Mono)

There is plenty of knowledge available inside the OWASP community, spread via the wiki, Conferences, chapter meetings and not to forget the books.

Another important way to distribute the available knowledge is though education!

The Summit Working Session on Education will cover important aspects such as:

• How to improve knowledge transfer from OWASP projects towards the community,
• How to create training material (lessons, classes, courses) from OWASP project material?
• How to set up an OWASP education baseline,
• How to setup an OWASP Boot Camp,
• How to connect to organisation to promote OWASP education content: e.g. universities, other non-profit (or profit?) education organisations,
• How to organize the OWASP / Conference trainings to make them the best in the world?
• Can we integrate this into OWASP certification projects?
• How to setup an OWASP Boot Camp?

This working session is the ideal opportunity to build further on the shoulders of giants and spread OWASP's solutions through the education project!

Governments, businesses and people rely on the Internet - the Internet has almost become something we cannot live without. But the Internet suffers from one terrible flaw: it's insecure. It's insecure because we've rushed into creating a global network of computers without making sure we knew what we were doing. The Open Web Application Security Project (OWASP) is a global open community dedicated to enabling organisations to develop, purchase, and maintain applications that can be trusted. All of the OWASP tools, documents, forums, and chapters are free and open to anyone interested in improving application security.

There are people and groups working in this area who are doing battle for all of us every day, yet many are unknown outside their own specialist areas. The proposed OWASP Awards could be used to thank and recognise outstanding contributions, identify those who are raising security awareness and highlight those supporting security initiatives such as promoting better practices.

Flash security is hot. Just look at the hysteria around 'ClickJacking'.There are 2 Flash related security trainings at the summit covering Flash Security: Flash Player Security and Auditing Flash Applications. These courses and the OWASP Flash Security project aim to share a knowledge base in order to raise awareness around the subject of Flash applications security.

The courses provide an overview of the Flash Player security model and common architectures for Flash deployment. The course is targeted at people who need to understand the fundamentals of Flash Player security and how it will affect their website such as CSOs, web designers, Flash authors, web-site auditors and web architects. The goal of the course is to provide the student with the enough information to architect and audit a secure Flash deployment.