This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "OWASP EU Summit 2008 work in progress"

From OWASP
Jump to: navigation, search
(EVENT AGENDA)
(EVENT AGENDA)
Line 4: Line 4:
 
  | colspan="5" align="center" style="background:#4058A0; color:white" | Agenda for Monday, November 3rd, 2008
 
  | colspan="5" align="center" style="background:#4058A0; color:white" | Agenda for Monday, November 3rd, 2008
 
  |-
 
  |-
  | style="width:10%; background:#7B8ABD" | 13:00  
+
  | style="width:10%; background:#7B8ABD" align="center"| 13:00  
 
  | colspan="4" style="width:90%; background:#B36B00" align="center" | Lunch
 
  | colspan="4" style="width:90%; background:#B36B00" align="center" | Lunch
 
  |-
 
  |-
 
  | colspan="5" align="center" style="background:#c0e0e0" | Training Sessions
 
  | colspan="5" align="center" style="background:#c0e0e0" | Training Sessions
 
  |-
 
  |-
  | style="width:10%; background:#7B8ABD" | 15:00 to 17:00  
+
  | style="width:10%; background:#7B8ABD" align="center"| 15:00 - 17:00  
 
  | style="width:33%; background:#c0e0e0" align="center" |  Securing WebGoat with ModSecurity<br>Stephen Craig Evans
 
  | style="width:33%; background:#c0e0e0" align="center" |  Securing WebGoat with ModSecurity<br>Stephen Craig Evans
 
  | style="width:33%; background:#c0e0e0" align="center" |  WebSec Apps for Managers and Executives<br>Mano Paul
 
  | style="width:33%; background:#c0e0e0" align="center" |  WebSec Apps for Managers and Executives<br>Mano Paul
 
  | style="width:34%; background:#c0e0e0" align="center" |  OWASP Testing Guide<br>Matteo Meucci
 
  | style="width:34%; background:#c0e0e0" align="center" |  OWASP Testing Guide<br>Matteo Meucci
 
  |-
 
  |-
  | style="width:10%; background:#7B8ABD" | 19:00  
+
  | style="width:10%; background:#7B8ABD" align="center" | 19:00  
 
  | colspan="4" style="width:90%; background:#FFFF00" align="center" | Summit Briefing<br>Dinis Cruz and Summit Organization Team
 
  | colspan="4" style="width:90%; background:#FFFF00" align="center" | Summit Briefing<br>Dinis Cruz and Summit Organization Team
 
  |-
 
  |-
  | style="width:10%; background:#7B8ABD" | 20:00  
+
  | style="width:10%; background:#7B8ABD" align="center" | 20:00  
 
  | colspan="4" style="width:90%; background:#B36B00" align="center" | OWASPers Dinner
 
  | colspan="4" style="width:90%; background:#B36B00" align="center" | OWASPers Dinner
 
  |-
 
  |-
Line 26: Line 26:
 
  | colspan="5" align="center" style="background:#4058A0; color:white" | Agenda for Tuesday, November 4th, 2008
 
  | colspan="5" align="center" style="background:#4058A0; color:white" | Agenda for Tuesday, November 4th, 2008
 
  |-
 
  |-
  | style="width:10%; background:#7B8ABD" | 08:00  
+
  | style="width:10%; background:#7B8ABD" align="center" | 08:00  
 
  | colspan="4" style="width:80%; background:#FFBFEF" align="center" | Registration
 
  | colspan="4" style="width:80%; background:#FFBFEF" align="center" | Registration
 
  |-
 
  |-
  | style="width:10%; background:#7B8ABD" | 09:00  
+
  | style="width:10%; background:#7B8ABD" align="center"| 09:00  
 
  | colspan="4" style="width:80%; background:#FFFF00" align="center" | Summit Keynote<br>Dinis Cruz and Summit Organization Team
 
  | colspan="4" style="width:80%; background:#FFFF00" align="center" | Summit Keynote<br>Dinis Cruz and Summit Organization Team
 
  |-
 
  |-
Line 36: Line 36:
 
  | colspan="2" style="width:45%; background:#80FF80" align="center" |  Tools   
 
  | colspan="2" style="width:45%; background:#80FF80" align="center" |  Tools   
 
  |-
 
  |-
  | style="background:#7B8ABD" | 09:30  
+
  | style="background:#7B8ABD" align="center" | 09:30  
 
  | colspan="2" style="background:#80FF80" align="center" | OWASP Testing Guide<br>Matteo Meucci
 
  | colspan="2" style="background:#80FF80" align="center" | OWASP Testing Guide<br>Matteo Meucci
 
  | colspan="2" style="background:#80FF80" align="center" | OWASP JSP Testing Tool<br>Jason Li
 
  | colspan="2" style="background:#80FF80" align="center" | OWASP JSP Testing Tool<br>Jason Li
 
  |-
 
  |-
  | style="background:#7B8ABD" | 09:45  
+
  | style="background:#7B8ABD" align="center" | 09:45  
 
  | colspan="2" style="background:#80FF80" align="center" | [https://www.owasp.org/index.php/Image:Code_Review_Eoin.pptx OWASP Code Review Guide]<br>Eoin Keary
 
  | colspan="2" style="background:#80FF80" align="center" | [https://www.owasp.org/index.php/Image:Code_Review_Eoin.pptx OWASP Code Review Guide]<br>Eoin Keary
 
  | colspan="2" style="background:#80FF80 " align="center" |  [https://www.owasp.org/index.php/Image:OWASP_EU_Summit_2008_The_Owasp_Orizon_Project.ppt OWASP Orizon Project]<br>Paolo Perego (a.k.a. thesp0nge)
 
  | colspan="2" style="background:#80FF80 " align="center" |  [https://www.owasp.org/index.php/Image:OWASP_EU_Summit_2008_The_Owasp_Orizon_Project.ppt OWASP Orizon Project]<br>Paolo Perego (a.k.a. thesp0nge)
 
  |-
 
  |-
  | style="background:#7B8ABD" | 10:00  
+
  | style="background:#7B8ABD" align="center" | 10:00  
 
  | colspan="2" style="background:#80FF80" align="center" | OWASP Application Security Desk Reference (ADSR)<br>Leonardo Cavallari Militelli
 
  | colspan="2" style="background:#80FF80" align="center" | OWASP Application Security Desk Reference (ADSR)<br>Leonardo Cavallari Militelli
 
  | colspan="2" style="background:#80FF80 " align="center" | OWASP Live CD<br>Matt Tesauro
 
  | colspan="2" style="background:#80FF80 " align="center" | OWASP Live CD<br>Matt Tesauro
 
  |-
 
  |-
  | style="background:#7B8ABD" | 10:15  
+
  | style="background:#7B8ABD" align="center" | 10:15  
 
  | colspan="2" style="background:#80FF80" align="center" | OWASP Spanish Project<br>Juan Carlos Calderon
 
  | colspan="2" style="background:#80FF80" align="center" | OWASP Spanish Project<br>Juan Carlos Calderon
 
  | colspan="2" style="background:#80FF80 " align="center" | [https://www.owasp.org/index.php/Image:OWASP_EU_Summit_2008_WebScarab_treasures.ppt WebScarab-NG]<br>Rogan Dawes
 
  | colspan="2" style="background:#80FF80 " align="center" | [https://www.owasp.org/index.php/Image:OWASP_EU_Summit_2008_WebScarab_treasures.ppt WebScarab-NG]<br>Rogan Dawes
 
  |-
 
  |-
  | style="background:#7B8ABD" | 10:30  
+
  | style="background:#7B8ABD" align="center"| 10:30  
 
  | colspan="5" style="background:#B36B00" align="center" | Coffee Break
 
  | colspan="5" style="background:#B36B00" align="center" | Coffee Break
 
  |-
 
  |-
  | style="background:#7B8ABD" | 10:45  
+
  | style="background:#7B8ABD" align="center"| 10:45  
 
  | colspan="2" style="background:#80FF80" align="center" | .NET ESAPI<br>Alex Smolen
 
  | colspan="2" style="background:#80FF80" align="center" | .NET ESAPI<br>Alex Smolen
 
  | colspan="2" style="background:#80FF80" align="center" | JBroFuzz<br>Yiannis
 
  | colspan="2" style="background:#80FF80" align="center" | JBroFuzz<br>Yiannis
Line 68: Line 68:
 
  | colspan="4" style="width:80%; background:#B36B00" align="center" | Working Sessions  
 
  | colspan="4" style="width:80%; background:#B36B00" align="center" | Working Sessions  
 
  |-
 
  |-
  | style="width:10%; background:#7B8ABD" | 11:15 - 13:00
+
  | style="width:10%; background:#7B8ABD" align="center" | 11:15 - 13:00
 
  | style="width:30%; background:#c0e0e0" align="center" |  Documentation Projects/Guides Integration and Unified 4.0 Version<br>Chair: Eduardo Neves
 
  | style="width:30%; background:#c0e0e0" align="center" |  Documentation Projects/Guides Integration and Unified 4.0 Version<br>Chair: Eduardo Neves
 
  | style="width:30%; background:#c0e0e0" align="center" |  Browser Security<br>Chair: Arshan Dabirsiaghi<br>Secretary:  Kuai Hinojosa
 
  | style="width:30%; background:#c0e0e0" align="center" |  Browser Security<br>Chair: Arshan Dabirsiaghi<br>Secretary:  Kuai Hinojosa
 
  | style="width:30%; background:#c0e0e0" align="center" |  Tools Projects<br>Chair: Matt Tesauro
 
  | style="width:30%; background:#c0e0e0" align="center" |  Tools Projects<br>Chair: Matt Tesauro
 
  |-
 
  |-
  | style="background:#7B8ABD" | 13:00
+
  | style="background:#7B8ABD" align="center" | 13:00
 
  | colspan="4" style="background:#FFFF00" align="center" | Lunch
 
  | colspan="4" style="background:#FFFF00" align="center" | Lunch
 
  |-
 
  |-
  | style="background:#7B8ABD" | 14:00   
+
  | style="background:#7B8ABD" align="center"| 14:00   
 
  | colspan="4" style="background:#B36B00" align="center" | Training Sessions
 
  | colspan="4" style="background:#B36B00" align="center" | Training Sessions
 
  |-
 
  |-
Line 84: Line 84:
 
  | style="background:#c0e0e0" align="center" | Offensive WebApp Hacking<br>Marco Slaviero
 
  | style="background:#c0e0e0" align="center" | Offensive WebApp Hacking<br>Marco Slaviero
 
  |-
 
  |-
  | style="background:#7B8ABD" | 16:00  
+
  | style="background:#7B8ABD" align="center" | 16:00  
 
  | colspan="4" style="background:#B36B00" align="center" | Coffee Break
 
  | colspan="4" style="background:#B36B00" align="center" | Coffee Break
 
  |-
 
  |-
Line 90: Line 90:
 
  | colspan="4" style="background:#7B8ABD" align="center" | Working Sessions
 
  | colspan="4" style="background:#7B8ABD" align="center" | Working Sessions
 
  |-
 
  |-
  | style="background:#7B8ABD" | 16:30  
+
  | style="background:#7B8ABD" align="center" | 16:30  
 
  | colspan="4" style="background:#7B8ABD " align="center" |  ESAPI<br>Chair: Jeff Williams<br>Secretary: Arshan Dabirsiaghi
 
  | colspan="4" style="background:#7B8ABD " align="center" |  ESAPI<br>Chair: Jeff Williams<br>Secretary: Arshan Dabirsiaghi
 
  |-
 
  |-
  | style="background:#7B8ABD" | 18:30  
+
  | style="background:#7B8ABD" align="center" | 18:30  
 
  | colspan="2" style="background:#7B8ABD" align="center" | ASDR<br>Chair:  Leonardo Cavallari
 
  | colspan="2" style="background:#7B8ABD" align="center" | ASDR<br>Chair:  Leonardo Cavallari
 
  | style="background:#7B8ABD " align="center" | .NET Project<br>Chair:  Dinis Cruz
 
  | style="background:#7B8ABD " align="center" | .NET Project<br>Chair:  Dinis Cruz
Line 103: Line 103:
 
  | colspan="5" align="center" style="background:#4058A0; color:white" | Agenda for Wednesday, November 5th, 2008
 
  | colspan="5" align="center" style="background:#4058A0; color:white" | Agenda for Wednesday, November 5th, 2008
 
  |-
 
  |-
  | style="width:10%; background:#7B8ABD" | 09:15 || colspan="4" style="width:80%; background:#FFFF00" align="center" | Daily Briefing:   
+
  | style="width:10%; background:#7B8ABD" align="center"| 09:15  
 +
| colspan="4" style="width:80%; background:#FFFF00" align="center" | Daily Briefing:   
 
Dinis Cruz
 
Dinis Cruz
 
  |-
 
  |-
  | style="width:10%; background:#7B8ABD" |  || colspan="2" style="width:30%; background:#80FF80" align="center" |  Standards and Education  
+
  | style="width:10%; background:#7B8ABD" |   
 +
| colspan="2" style="width:30%; background:#80FF80" align="center" |  Standards and Education  
 
(Room 1)  
 
(Room 1)  
 
  | colspan="2" style="width:30%; background:#80FF80" align="center" |  Tools  
 
  | colspan="2" style="width:30%; background:#80FF80" align="center" |  Tools  
 
(Room 2)   
 
(Room 2)   
 
  |-
 
  |-
  | style="background:#7B8ABD" | 10:00|| colspan="2" style="background:#80FF80" align="center" | [http://www.owasp.org/index.php/Category:OWASP_Positive_Security_Project '''OWASP Positive Security (SoC 08)''']
+
  | style="background:#7B8ABD" align="center" | 10:00
 +
| colspan="2" style="background:#80FF80" align="center" | [http://www.owasp.org/index.php/Category:OWASP_Positive_Security_Project '''OWASP Positive Security (SoC 08)''']
 
Eduardo Vianna de Camargo Neves
 
Eduardo Vianna de Camargo Neves
 
| colspan="2" style="background:#80FF80" align="center" | [https://www.owasp.org/index.php/Image:OWASP_EU_Summit_2008_AcCoRuTe.pptx OWASP Access Control Rules Tester Project]
 
| colspan="2" style="background:#80FF80" align="center" | [https://www.owasp.org/index.php/Image:OWASP_EU_Summit_2008_AcCoRuTe.pptx OWASP Access Control Rules Tester Project]
 
Andrew Petukhov
 
Andrew Petukhov
 
  |-
 
  |-
  | style="background:#7B8ABD" | 10:15 || colspan="2" style="background:#80FF80" align="center" | [http://www.owasp.org/index.php/Category:OWASP_Education_Project '''OWASP Education''']  
+
  | style="background:#7B8ABD" align="center" | 10:15  
 +
| colspan="2" style="background:#80FF80" align="center" | [http://www.owasp.org/index.php/Category:OWASP_Education_Project '''OWASP Education''']  
 
Sebastien Deleersnyder, Martin Knobloch
 
Sebastien Deleersnyder, Martin Knobloch
 
  | colspan="2" style="background:#80FF80 " align="center" | [https://www.owasp.org/index.php/Image:Teachable_static_analysis_workbench.pptx OWASP Teachable Static Analysis Workbench]  
 
  | colspan="2" style="background:#80FF80 " align="center" | [https://www.owasp.org/index.php/Image:Teachable_static_analysis_workbench.pptx OWASP Teachable Static Analysis Workbench]  
 
Dmitry Kozlov
 
Dmitry Kozlov
 
  |-
 
  |-
  | style="background:#7B8ABD" | 10:30 || colspan="2" style="background:#80FF80" align="center" | OWASP Internationalization Guidelines
+
  | style="background:#7B8ABD" align="center" | 10:30  
 +
| colspan="2" style="background:#80FF80" align="center" | OWASP Internationalization Guidelines
 
Juan Carlos Calderon
 
Juan Carlos Calderon
 
  | colspan="2" style="background:#80FF80 " align="center" | [http://www.owasp.org/index.php/Category:OWASP_AppSensor_Project OWASP AppSensor]
 
  | colspan="2" style="background:#80FF80 " align="center" | [http://www.owasp.org/index.php/Category:OWASP_AppSensor_Project OWASP AppSensor]
 
Michael Coates
 
Michael Coates
 
  |-
 
  |-
  | style="background:#7B8ABD" | 10:45 || colspan="2" style="background:#80FF80" align="center" | [https://www.owasp.org/index.php/Image:PASSWD.ppt PASSWD:Metrics and Vulnerabilities]
+
  | style="background:#7B8ABD" align="center" | 10:45  
 +
| colspan="2" style="background:#80FF80" align="center" | [https://www.owasp.org/index.php/Image:PASSWD.ppt PASSWD:Metrics and Vulnerabilities]
 
Lucilla Mancini  
 
Lucilla Mancini  
 
  | colspan="2" style="background:#80FF80 " align="center" | OWASP Backend Security Project
 
  | colspan="2" style="background:#80FF80 " align="center" | OWASP Backend Security Project
 
Carlo Pelliccioni
 
Carlo Pelliccioni
 
  |-
 
  |-
  | style="background:#7B8ABD" | 11:00 || colspan="2" style="background:#80FF80" align="center" | OWASP Open Review Project
+
  | style="background:#7B8ABD" align="center" | 11:00  
 +
| colspan="2" style="background:#80FF80" align="center" | OWASP Open Review Project
 
Dan Cornell
 
Dan Cornell
 
  | colspan="2" style="background:#80FF80 " align="center" | [https://www.owasp.org/index.php/Image:Site_generator.pptx OWASP Application Security Tool Benchmarking Environment and Site Generator Refresh Project]
 
  | colspan="2" style="background:#80FF80 " align="center" | [https://www.owasp.org/index.php/Image:Site_generator.pptx OWASP Application Security Tool Benchmarking Environment and Site Generator Refresh Project]
 
Dmitry Kozlov
 
Dmitry Kozlov
|-
+
|-
  | style="background:#7B8ABD" | 11:15 || colspan="4" style="background:#80FF80" align="center" | OWASP Global Committee Elections
+
  | style="background:#7B8ABD" align="center" | 11:15  
 +
| colspan="4" style="background:#80FF80" align="center" | OWASP Global Committee Elections
 
(Room 1)
 
(Room 1)
|-
+
|-
  | style="background:#7B8ABD" | 11:30 || colspan="4" style="background:#B36B00" align="center" | Coffee Break
+
  | style="background:#7B8ABD" align="center" | 11:30  
|-
+
| colspan="4" style="background:#B36B00" align="center" | Coffee Break
  | style="background:#7B8ABD" | || colspan="4" style="background:#7B8ABD" align="center" | Working Sessions
+
|-
|-
+
  | style="background:#7B8ABD" |  
  | style="background:#7B8ABD" | 12:45 || style="background:#7B8ABD" align="center" | [[OWASP Working Session Education Project|OWASP Working Session Education Project]]<br>Chair: Sebastien Deleersnyder<br>(Room 1)
+
| colspan="4" style="background:#7B8ABD" align="center" | Working Sessions
 +
|-
 +
  | style="background:#7B8ABD" align="center" | 12:45  
 +
| style="background:#7B8ABD" align="center" | [[OWASP Working Session Education Project|OWASP Working Session Education Project]]<br>Chair: Sebastien Deleersnyder<br>(Room 1)
 
  | style="background:#7B8ABD" align="center" | ''Testing Guide''
 
  | style="background:#7B8ABD" align="center" | ''Testing Guide''
 
Chair:  Matteo Meucci
 
Chair:  Matteo Meucci
Line 151: Line 162:
 
Secretary:  Kuai Hinojosa
 
Secretary:  Kuai Hinojosa
 
(Room 3)
 
(Room 3)
|-
+
|-
  | style="background:#7B8ABD" | 14:45 || colspan="4" style="background:#B36B00" align="center" | Lunch During Working Sessions
+
  | style="background:#7B8ABD" align="center" | 14:45  
|-
+
| colspan="4" style="background:#B36B00" align="center" | Lunch During Working Sessions
  | style="background:#7B8ABD" | 15:00 || colspan="4" style="background:#c0e0e0" align="center" | Training Sessions
+
|-
|-
+
  | style="background:#7B8ABD" align="center" | 15:00  
| style="background:#7B8ABD" | 15:00|| style="background:#c0e0e0" align="center" | Flash Player Security
+
| colspan="4" style="background:#c0e0e0" align="center" | Training Sessions
 +
|-
 +
| style="background:#7B8ABD" align="center" | 15:00
 +
| style="background:#c0e0e0" align="center" | Flash Player Security
 
Peleus Uhley
 
Peleus Uhley
 
(Room 1)
 
(Room 1)
| style="background:#c0e0e0" align="center" | OWASP Top 10
+
| style="background:#c0e0e0" align="center" | OWASP Top 10
 
Sebastien Deleersnyder and Martin Knobloch
 
Sebastien Deleersnyder and Martin Knobloch
 
(Room 2)
 
(Room 2)
| style="background:#c0e0e0" align="center" | [https://www.owasp.org/index.php/Image:OWASP_EU_Summit_2008_WebScarab_treasures.ppt Uncovering WebScarab's Secret Treasures]
+
| style="background:#c0e0e0" align="center" | [https://www.owasp.org/index.php/Image:OWASP_EU_Summit_2008_WebScarab_treasures.ppt Uncovering WebScarab's Secret Treasures]
 
Rogan Dawes
 
Rogan Dawes
 
(Sala Bella Vista)
 
(Sala Bella Vista)
| style="background:#c0e0e0" align="center" | [http://www.owasp.org/index.php/Image:Hacking_the_Owasp_Orizon.ppt Hacking the Orizon]
+
| style="background:#c0e0e0" align="center" | [http://www.owasp.org/index.php/Image:Hacking_the_Owasp_Orizon.ppt Hacking the Orizon]
 
Paolo Perego
 
Paolo Perego
 
(Room 3)
 
(Room 3)
 
  |-
 
  |-
  | style="background:#7B8ABD" | 17:00 || colspan="4" style="background:#B36B00" align="center" | Coffee Break
+
  | style="background:#7B8ABD" align="center" | 17:00  
 +
| colspan="4" style="background:#B36B00" align="center" | Coffee Break
 
  |-
 
  |-
| style="background:#7B8ABD" |  || colspan="4" style="background:#7B8ABD" align="center" | Working Sessions
+
| style="background:#7B8ABD" |  || colspan="4" style="background:#7B8ABD" align="center" | Working Sessions
 
  |-
 
  |-
  | style="background:#7B8ABD" | 17:30 || style="background:#7B8ABD " align="center" |  Code Review Guide
+
  | style="background:#7B8ABD" align="center" | 17:30  
 +
| style="background:#7B8ABD " align="center" |  Code Review Guide
 
Chair:  Eoin Keary
 
Chair:  Eoin Keary
 
(Room 2)
 
(Room 2)
Line 186: Line 202:
 
(Room 3)
 
(Room 3)
 
  |-
 
  |-
  | style="background:#7B8ABD" | 19:00 || style="background:#7B8ABD " align="center" | OWASP Website
+
  | style="background:#7B8ABD" align="center" | 19:00  
 +
| style="background:#7B8ABD " align="center" | OWASP Website
 
Chair:  Favio Cerull
 
Chair:  Favio Cerull
 
(Room 1)
 
(Room 1)
Line 195: Line 212:
 
Paolo Perego
 
Paolo Perego
 
(Room 3)
 
(Room 3)
|}
+
|}
  
  
Line 201: Line 218:
 
  | colspan="6" align="center" style="background:#4058A0; color:white" | Agenda for Thursday, November 6th, 2008
 
  | colspan="6" align="center" style="background:#4058A0; color:white" | Agenda for Thursday, November 6th, 2008
 
  |-
 
  |-
  | style="width:10%; background:#7B8ABD" | 09:15 || colspan="5" style="width:80%; background:#FFFF00" align="center" | Daily Briefing:   
+
  | style="width:10%; background:#7B8ABD" align="center"| 09:15  
 +
| colspan="5" style="width:80%; background:#FFFF00" align="center" | Daily Briefing:   
 
Dinis Cruz
 
Dinis Cruz
 
  |-
 
  |-
  | style="width:10%; background:#7B8ABD" |  || colspan="2" style="width:30%; background:#80FF80" align="center" |  Technology  
+
  | style="width:10%; background:#7B8ABD" |   
 +
| colspan="2" style="width:30%; background:#80FF80" align="center" |  Technology  
 
  | colspan="3" style="width:30%; background:#80FF80" align="center" |  Tools   
 
  | colspan="3" style="width:30%; background:#80FF80" align="center" |  Tools   
 
  |-
 
  |-
  | style="background:#7B8ABD" | 10:00|| colspan="2" style="background:#80FF80" align="center" | OWASP Classic ASP Security Project
+
  | style="background:#7B8ABD" align="center" | 10:00
 +
| colspan="2" style="background:#80FF80" align="center" | OWASP Classic ASP Security Project
 
Juan Carlos Calderon
 
Juan Carlos Calderon
 
  | colspan="3" style="background:#80FF80" align="center" | OWASP Source Code Review
 
  | colspan="3" style="background:#80FF80" align="center" | OWASP Source Code Review
 
James Walden
 
James Walden
 
  |-
 
  |-
  | style="background:#7B8ABD" | 10:15 || colspan="2" style="background:#80FF80 " align="center" | OWASP Ruby on Rails Security Project
+
  | style="background:#7B8ABD" align="center" | 10:15  
 +
| colspan="2" style="background:#80FF80 " align="center" | OWASP Ruby on Rails Security Project
 
Heiko Webers
 
Heiko Webers
 
  | colspan="3" style="background:#80FF80 " align="center" | OWASP Enigmaform and mod_Openpgp
 
  | colspan="3" style="background:#80FF80 " align="center" | OWASP Enigmaform and mod_Openpgp
 
Arturo Alberto Busleiman (a.k.a. Buanzo)
 
Arturo Alberto Busleiman (a.k.a. Buanzo)
 
  |-
 
  |-
  | style="background:#7B8ABD" | 10:30 || colspan="2" style="background:#80FF80" align="center" | OWASP Webslayer Project
+
  | style="background:#7B8ABD" align="center" | 10:30  
 +
| colspan="2" style="background:#80FF80" align="center" | OWASP Webslayer Project
 
Christian Martorella
 
Christian Martorella
 
  | colspan="3" style="background:#80FF80 " align="center" | OWASP Securing WebGoat using ModSecurity
 
  | colspan="3" style="background:#80FF80 " align="center" | OWASP Securing WebGoat using ModSecurity
 
Stephen Evans and Christian Folini
 
Stephen Evans and Christian Folini
 
  |-
 
  |-
  | style="background:#7B8ABD" | 11:00 || colspan="2" style="background:#80FF80" align="center" | OWASP Skavenger Project
+
  | style="background:#7B8ABD" align="center" | 11:00  
 +
| colspan="2" style="background:#80FF80" align="center" | OWASP Skavenger Project
 
Matthias Rohr
 
Matthias Rohr
 
  | colspan="3" style="background:#80FF80 " align="center" | OWASP AntiSamy.NET
 
  | colspan="3" style="background:#80FF80 " align="center" | OWASP AntiSamy.NET
 
Marcin Wielgoszewski
 
Marcin Wielgoszewski
 
  |-
 
  |-
  | style="background:#7B8ABD" | 11:15 || colspan="5" style="background:#B36B00" align="center" | Coffee Break
+
  | style="background:#7B8ABD" align="center" | 11:15  
|-
+
| colspan="5" style="background:#B36B00" align="center" | Coffee Break
  | style="background:#7B8ABD" | || colspan="5" style="background:#7B8ABD" align="center" | Working Sessions
+
|-
|-
+
  | style="background:#7B8ABD" |  
  | style="background:#7B8ABD" | 11:30 || style="background:#7B8ABD" align="center" | Top 10
+
| colspan="5" style="background:#7B8ABD" align="center" | Working Sessions
 +
|-
 +
  | style="background:#7B8ABD" align="center" | 11:30  
 +
| style="background:#7B8ABD" align="center" | Top 10
 
2009
 
2009
 
Chair:  Dave Wichers
 
Chair:  Dave Wichers
Line 241: Line 267:
 
  | style="background:#7B8ABD" align="center" | SAMM v2
 
  | style="background:#7B8ABD" align="center" | SAMM v2
 
(Room 3)
 
(Room 3)
| style="background:#7B8ABD" align="center" | Web Site
+
| style="background:#7B8ABD" align="center" | Web Site
 
12:15
 
12:15
 
Executive Room
 
Executive Room
| style="background:#7B8ABD" align="center" | Handling Web MalWare
+
| style="background:#7B8ABD" align="center" | Handling Web MalWare
 
12:15
 
12:15
 
Sala Bella Vista
 
Sala Bella Vista
|-
+
|-
  | style="background:#7B8ABD" | 13:00 || colspan="5" style="background:#B36B00" align="center" | Lunch During Working Sessions
+
  | style="background:#7B8ABD" align="center" | 13:00  
|-
+
| colspan="5" style="background:#B36B00" align="center" | Lunch During Working Sessions
  | style="background:#7B8ABD" | 14:00 || colspan="5" style="background:#c0e0e0" align="center" | Training Sessions
+
|-
|-
+
  | style="background:#7B8ABD" align="center" | 14:00  
| style="background:#7B8ABD" | || style="background:#c0e0e0" align="center" | Ajax Security
+
| colspan="5" style="background:#c0e0e0" align="center" | Training Sessions
 +
|-
 +
| style="background:#7B8ABD" |  
 +
| style="background:#c0e0e0" align="center" | Ajax Security
 
(Room 1)
 
(Room 1)
| colspan="2" style="background:#c0e0e0" align="center" | Auditing Flash Applications
+
| colspan="2" style="background:#c0e0e0" align="center" | Auditing Flash Applications
 
Peleus Uhley
 
Peleus Uhley
 
(Room 2)
 
(Room 2)
| style="background:#c0e0e0" align="center" | WebApp Assessment
+
| style="background:#c0e0e0" align="center" | WebApp Assessment
 
Vicente Aguilera Diaz
 
Vicente Aguilera Diaz
 
(Room 3)
 
(Room 3)
| style="background:#c0e0e0" align="center" | Mod Security
+
| style="background:#c0e0e0" align="center" | Mod Security
 
Lucas C. Ferreira
 
Lucas C. Ferreira
 
(Executive Room)
 
(Executive Room)
 
  |-
 
  |-
  | style="background:#7B8ABD" | 13:00 || colspan="5" style="background:#B36B00" align="center" | Coffee Break
+
  | style="background:#7B8ABD" align="center" | 13:00  
 +
| colspan="5" style="background:#B36B00" align="center" | Coffee Break
 
  |-
 
  |-
| style="background:#7B8ABD" |  || colspan="5" style="background:#7B8ABD" align="center" | Working Sessions
+
| style="background:#7B8ABD" |  || colspan="5" style="background:#7B8ABD" align="center" | Working Sessions
 
  |-
 
  |-
| style="background:#7B8ABD" | 16:30 || colspan="5" style="background:#7B8ABD " align="center" |  Strategic Planning and Business Models compatible with OWASP values
+
| style="background:#7B8ABD" align="center" | 16:30  
 +
| colspan="5" style="background:#7B8ABD " align="center" |  Strategic Planning and Business Models compatible with OWASP values
 
Chair:  Jeff Williams, Dinis Cruz, Dave Wichers, Sebastien Deleersnyder, and Tom Brennan
 
Chair:  Jeff Williams, Dinis Cruz, Dave Wichers, Sebastien Deleersnyder, and Tom Brennan
 
Secretary:  Kate Hartmann and Paulo Combra
 
Secretary:  Kate Hartmann and Paulo Combra
 
  |-
 
  |-
  | style="background:#7B8ABD" | 18:30 || style="background:#7B8ABD " align="center" |  2-Way Internationalization
+
  | style="background:#7B8ABD" align="center" | 18:30  
 +
| style="background:#7B8ABD " align="center" |  2-Way Internationalization
 
Chair:  Juan Carlos Calderon and Sebastien Deleersnyder
 
Chair:  Juan Carlos Calderon and Sebastien Deleersnyder
 
(Room 1)
 
(Room 1)
Line 288: Line 320:
 
(Executive Room)
 
(Executive Room)
 
  |-
 
  |-
  | style="background:#7B8ABD" | 20:00 || colspan="5" style="background:#B36B00 " align="center" | Gala Dinner - Restaurante de Real
+
  | style="background:#7B8ABD" align="center" | 20:00  
 +
| colspan="5" style="background:#B36B00 " align="center" | Gala Dinner - Restaurante de Real
 
  |-
 
  |-
  | style="background:#7B8ABD " | 22:00 || colspan="5" style="background:#B36B00 " align="center" | OWASP Band - LE CLUB
+
  | style="background:#7B8ABD " align="center" | 22:00  
 +
| colspan="5" style="background:#B36B00 " align="center" | OWASP Band - LE CLUB
 
|}
 
|}
  
Line 297: Line 331:
 
  | colspan="6" align="center" style="background:#4058A0; color:white" | Agenda for Friday, November 7th, 2008
 
  | colspan="6" align="center" style="background:#4058A0; color:white" | Agenda for Friday, November 7th, 2008
 
  |-
 
  |-
  | style="width:10%; background:#7B8ABD" | 10:00 || colspan="6" style="width:80%; background:#FFFF00" align="center" | OWASP AppSec Agenda 2009:  Working Session Outcomes   
+
  | style="width:10%; background:#7B8ABD" align="center" | 10:00  
 +
| colspan="6" style="width:80%; background:#FFFF00" align="center" | OWASP AppSec Agenda 2009:  Working Session Outcomes   
 
Dinis Cruz
 
Dinis Cruz
 
  |-
 
  |-
| style="width:10%; background:#7B8ABD" | 10:15 || colspan="6" style="width:80%; background:#FFFF00" align="center" | Results Presentations  
+
| style="width:10%; background:#7B8ABD" align="center" | 10:15  
|-
+
| colspan="6" style="width:80%; background:#FFFF00" align="center" | Results Presentations  
| style="width:10%; background:#7B8ABD" |  || colspan="6" style="width:80%; background:#C2C2C2" align="center" | Documentation Projects/Guides Integration and Unified 4.0 Version
+
|-
 +
| style="width:10%; background:#7B8ABD" |   
 +
| colspan="6" style="width:80%; background:#C2C2C2" align="center" | Documentation Projects/Guides Integration and Unified 4.0 Version
 
Chair:  Eduardo Neves
 
Chair:  Eduardo Neves
 
  |-
 
  |-
| style="width:10%; background:#7B8ABD" | || colspan="6" style="width:80%; background:#C2C2C2" align="center" | Browser Security
+
| style="width:10%; background:#7B8ABD" |  
 +
| colspan="6" style="width:80%; background:#C2C2C2" align="center" | Browser Security
 
Chair:  Arshan Dabirsiaghi
 
Chair:  Arshan Dabirsiaghi
|-
+
|-
| style="width:10%; background:#7B8ABD" | || colspan="6" style="width:80%; background:#C2C2C2" align="center" | ESAPI
+
| style="width:10%; background:#7B8ABD" |  
 +
| colspan="6" style="width:80%; background:#C2C2C2" align="center" | ESAPI
 
Chair:  Jeff Williams
 
Chair:  Jeff Williams
|-
+
|-
| style="width:10%; background:#7B8ABD" |  || colspan="6" style="width:80%; background:#C2C2C2" align="center" | Tools Projects
+
| style="width:10%; background:#7B8ABD" |   
 +
| colspan="6" style="width:80%; background:#C2C2C2" align="center" | Tools Projects
 
Chair:  Matt Tesauro
 
Chair:  Matt Tesauro
 
  |-
 
  |-
| style="width:10%; background:#7B8ABD" |  || colspan="6" style="width:80%; background:#C2C2C2" align="center" | Code Review Guide
+
| style="width:10%; background:#7B8ABD" |   
 +
| colspan="6" style="width:80%; background:#C2C2C2" align="center" | Code Review Guide
 
Chair:  Eoin Keary
 
Chair:  Eoin Keary
 
  |-
 
  |-
| style="width:10%; background:#7B8ABD" |  || colspan="6" style="width:80%; background:#C2C2C2" align="center" | OWASP Certification
+
| style="width:10%; background:#7B8ABD" |   
 +
| colspan="6" style="width:80%; background:#C2C2C2" align="center" | OWASP Certification
 
Chair:  Tom Brennan
 
Chair:  Tom Brennan
 
  |-
 
  |-
| style="width:10%; background:#7B8ABD" |  || colspan="6" style="width:80%; background:#C2C2C2" align="center" | Software Assurance Maturity Model
+
| style="width:10%; background:#7B8ABD" |   
 +
| colspan="6" style="width:80%; background:#C2C2C2" align="center" | Software Assurance Maturity Model
 
Chair:  Pravir Chandra
 
Chair:  Pravir Chandra
|-
+
|-
| style="width:10%; background:#7B8ABD" |  || colspan="6" style="width:80%; background:#C2C2C2" align="center" | Top 10 2009
+
| style="width:10%; background:#7B8ABD" |   
 +
| colspan="6" style="width:80%; background:#C2C2C2" align="center" | Top 10 2009
 
Chair:  Dave Wichers
 
Chair:  Dave Wichers
|-
+
|-
| style="width:10%; background:#7B8ABD" |  || colspan="6" style="width:80%; background:#C2C2C2" align="center" | Intra Governmental Affairs
+
| style="width:10%; background:#7B8ABD" |   
 +
| colspan="6" style="width:80%; background:#C2C2C2" align="center" | Intra Governmental Affairs
 
Chair:  David Campbell
 
Chair:  David Campbell
|-
+
|-
| style="width:10%; background:#7B8ABD" |  || colspan="6" style="width:80%; background:#C2C2C2" align="center" | Best Practices for Chapter Leaders
+
| style="width:10%; background:#7B8ABD" |   
 +
| colspan="6" style="width:80%; background:#C2C2C2" align="center" | Best Practices for Chapter Leaders
 
Chair:  Georg Hess
 
Chair:  Georg Hess
|-
+
|-
| style="width:10%; background:#7B8ABD" | 11:15 || colspan="6" style="width:80%; background:#B36B00" align="center" | Coffee Break and vote break (put your dots on the wall)
+
| style="width:10%; background:#7B8ABD" align="center" | 11:15  
|-
+
| colspan="6" style="width:80%; background:#B36B00" align="center" | Coffee Break and vote break (put your dots on the wall)
| style="width:10%; background:#7B8ABD" | 11:30 || colspan="6" style="width:80%; background:#C2C2C2" align="center" | Live CD & DVD
+
|-
 +
| style="width:10%; background:#7B8ABD" align="center" | 11:30  
 +
| colspan="6" style="width:80%; background:#C2C2C2" align="center" | Live CD & DVD
 
Chair:  Matt Tesauro
 
Chair:  Matt Tesauro
|-
+
|-
| style="width:10%; background:#7B8ABD" |  || colspan="6" style="width:80%; background:#C2C2C2" align="center" | ADSR
+
| style="width:10%; background:#7B8ABD" |   
 +
| colspan="6" style="width:80%; background:#C2C2C2" align="center" | ADSR
 
Chair:  Leonardo Cavallari
 
Chair:  Leonardo Cavallari
|-
+
|-
| style="width:10%; background:#7B8ABD" |  || colspan="6" style="width:80%; background:#C2C2C2" align="center" | Education Project
+
| style="width:10%; background:#7B8ABD" |   
 +
| colspan="6" style="width:80%; background:#C2C2C2" align="center" | Education Project
 
Chair:  Sebastien Deleersnyder
 
Chair:  Sebastien Deleersnyder
|-
+
|-
| style="width:10%; background:#7B8ABD" |  || colspan="6" style="width:80%; background:#C2C2C2" align="center" | Web Application Framework Security
+
| style="width:10%; background:#7B8ABD" |   
 +
| colspan="6" style="width:80%; background:#C2C2C2" align="center" | Web Application Framework Security
 
Chair:  Arshan Dabirsiaghi
 
Chair:  Arshan Dabirsiaghi
|-
+
|-
| style="width:10%; background:#7B8ABD" |  || colspan="6" style="width:80%; background:#C2C2C2" align="center" | Testing Guide
+
| style="width:10%; background:#7B8ABD" |   
 +
| colspan="6" style="width:80%; background:#C2C2C2" align="center" | Testing Guide
 
Chair:  Matteo Meucci
 
Chair:  Matteo Meucci
|-
+
|-
| style="width:10%; background:#7B8ABD" |  || colspan="6" style="width:80%; background:#C2C2C2" align="center" | OWASP Censorship
+
| style="width:10%; background:#7B8ABD" |   
 +
| colspan="6" style="width:80%; background:#C2C2C2" align="center" | OWASP Censorship
 
Chair:  Tom Brennan
 
Chair:  Tom Brennan
|-
+
|-
| style="width:10%; background:#7B8ABD" |  || colspan="6" style="width:80%; background:#C2C2C2" align="center" | EU Funding for OWASP Projects
+
| style="width:10%; background:#7B8ABD" |   
 +
| colspan="6" style="width:80%; background:#C2C2C2" align="center" | EU Funding for OWASP Projects
 
Chair:  Carlos Serrao
 
Chair:  Carlos Serrao
|-
+
|-
| style="width:10%; background:#7B8ABD" |  || colspan="6" style="width:80%; background:#C2C2C2" align="center" | OWASP Website
+
| style="width:10%; background:#7B8ABD" |   
 +
| colspan="6" style="width:80%; background:#C2C2C2" align="center" | OWASP Website
 
Chair:  Fabio Cerull
 
Chair:  Fabio Cerull
|-
+
|-
| style="width:10%; background:#7B8ABD" |  || colspan="6" style="width:80%; background:#C2C2C2" align="center" | OWASP Orizon
+
| style="width:10%; background:#7B8ABD" |   
 +
| colspan="6" style="width:80%; background:#C2C2C2" align="center" | OWASP Orizon
 
Chair:  Paolo Perego
 
Chair:  Paolo Perego
|-
+
|-
| style="width:10%; background:#7B8ABD" |  || colspan="6" style="width:80%; background:#C2C2C2" align="center" | Handling Web MalWare
+
| style="width:10%; background:#7B8ABD" |   
|-
+
| colspan="6" style="width:80%; background:#C2C2C2" align="center" | Handling Web MalWare
| style="width:10%; background:#7B8ABD" |  || colspan="6" style="width:80%; background:#C2C2C2" align="center" | 2-Way Internationalization
+
|-
 +
| style="width:10%; background:#7B8ABD" |   
 +
| colspan="6" style="width:80%; background:#C2C2C2" align="center" | 2-Way Internationalization
 
Chair:  Juan Carlos Calderon
 
Chair:  Juan Carlos Calderon
|-
+
|-
| style="width:10%; background:#7B8ABD" |  || colspan="6" style="width:80%; background:#C2C2C2" align="center" | Portuguese Public & Private Organizations
+
| style="width:10%; background:#7B8ABD" |   
 +
| colspan="6" style="width:80%; background:#C2C2C2" align="center" | Portuguese Public & Private Organizations
 
Chair:  Carlos Serrao
 
Chair:  Carlos Serrao
|-
+
|-
| style="width:10%; background:#7B8ABD" | 12:45 || colspan="6" style="width:80%; background:#C2C2C2" align="center" | Winter of Code 2009
+
| style="width:10%; background:#7B8ABD" align="center" | 12:45  
 +
| colspan="6" style="width:80%; background:#C2C2C2" align="center" | Winter of Code 2009
 
Chair:  Dinis Cruz and Sebastien Deleersnyder
 
Chair:  Dinis Cruz and Sebastien Deleersnyder
 
Secretary:  Paulo Combra
 
Secretary:  Paulo Combra
|-
+
|-
| style="width:10%; background:#7B8ABD" | 13:00 || colspan="6" style="width:80%; background:#B36B00" align="center" | Lunch - During Winter of Code
+
| style="width:10%; background:#7B8ABD" align="center" | 13:00  
|-
+
| colspan="6" style="width:80%; background:#B36B00" align="center" | Lunch - During Winter of Code
| style="width:10%; background:#7B8ABD" | 14:00 || colspan="6" style="width:80%; background:#FFFF00" align="center" | Board Meeting
+
|-
|-
+
| style="width:10%; background:#7B8ABD" align="center"| 14:00  
| style="width:10%; background:#7B8ABD" | 17:00 || colspan="6" style="width:80%; background:#FFFF00" align="center" | Announcement of Summit Procedings
+
| colspan="6" style="width:80%; background:#FFFF00" align="center" | Board Meeting
|}
+
|-
 +
| style="width:10%; background:#7B8ABD" align="center" | 17:00  
 +
| colspan="6" style="width:80%; background:#FFFF00" align="center" | Announcement of Summit Procedings
 +
|}

Revision as of 12:08, 27 November 2008

EVENT AGENDA

Agenda for Monday, November 3rd, 2008
13:00 Lunch
Training Sessions
15:00 - 17:00 Securing WebGoat with ModSecurity
Stephen Craig Evans
WebSec Apps for Managers and Executives
Mano Paul
OWASP Testing Guide
Matteo Meucci
19:00 Summit Briefing
Dinis Cruz and Summit Organization Team
20:00 OWASPers Dinner


Agenda for Tuesday, November 4th, 2008
08:00 Registration
09:00 Summit Keynote
Dinis Cruz and Summit Organization Team
Documents Tools
09:30 OWASP Testing Guide
Matteo Meucci
OWASP JSP Testing Tool
Jason Li
09:45 OWASP Code Review Guide
Eoin Keary
OWASP Orizon Project
Paolo Perego (a.k.a. thesp0nge)
10:00 OWASP Application Security Desk Reference (ADSR)
Leonardo Cavallari Militelli
OWASP Live CD
Matt Tesauro
10:15 OWASP Spanish Project
Juan Carlos Calderon
WebScarab-NG
Rogan Dawes
10:30 Coffee Break
10:45 .NET ESAPI
Alex Smolen
JBroFuzz
Yiannis


Working Sessions Briefing
Dinis Cruz
Working Sessions
11:15 - 13:00 Documentation Projects/Guides Integration and Unified 4.0 Version
Chair: Eduardo Neves
Browser Security
Chair: Arshan Dabirsiaghi
Secretary: Kuai Hinojosa
Tools Projects
Chair: Matt Tesauro
13:00 Lunch
14:00 Training Sessions
The Art and Science of Threat Modeling Web Applications>br>Mano Paul Web Server Hardening SELinux
Pavol Luptak
Offensive WebApp Hacking
Marco Slaviero
16:00 Coffee Break
Working Sessions
16:30 ESAPI
Chair: Jeff Williams
Secretary: Arshan Dabirsiaghi
18:30 ASDR
Chair: Leonardo Cavallari
.NET Project
Chair: Dinis Cruz


Agenda for Wednesday, November 5th, 2008
09:15 Daily Briefing:

Dinis Cruz

Standards and Education

(Room 1)

Tools

(Room 2)

10:00 OWASP Positive Security (SoC 08)

Eduardo Vianna de Camargo Neves

OWASP Access Control Rules Tester Project

Andrew Petukhov

10:15 OWASP Education

Sebastien Deleersnyder, Martin Knobloch

OWASP Teachable Static Analysis Workbench

Dmitry Kozlov

10:30 OWASP Internationalization Guidelines

Juan Carlos Calderon

OWASP AppSensor

Michael Coates

10:45 PASSWD:Metrics and Vulnerabilities

Lucilla Mancini

OWASP Backend Security Project

Carlo Pelliccioni

11:00 OWASP Open Review Project

Dan Cornell

OWASP Application Security Tool Benchmarking Environment and Site Generator Refresh Project

Dmitry Kozlov

11:15 OWASP Global Committee Elections

(Room 1)

11:30 Coffee Break
Working Sessions
12:45 OWASP Working Session Education Project
Chair: Sebastien Deleersnyder
(Room 1)
Testing Guide

Chair: Matteo Meucci (Room 2)

Web Application Framework Security

Chair: Arshan Dabirsiaghi Secretary: Kuai Hinojosa (Room 3)

14:45 Lunch During Working Sessions
15:00 Training Sessions
15:00 Flash Player Security

Peleus Uhley (Room 1)

OWASP Top 10

Sebastien Deleersnyder and Martin Knobloch (Room 2)

Uncovering WebScarab's Secret Treasures

Rogan Dawes (Sala Bella Vista)

Hacking the Orizon

Paolo Perego (Room 3)

17:00 Coffee Break
Working Sessions
17:30 Code Review Guide

Chair: Eoin Keary (Room 2)

EU Funding for OWASP Projects

Chair: Carlos Serrao (Sala Bella Vista)

OWASP Certification

Chair: Tom Brennan (Room 1)

Software Assurance Maturity Model

Chair: Pravir Chandra (Room 3)

19:00 OWASP Website

Chair: Favio Cerull (Room 1)

Metrics & Vulnerabilities

Chair: Lucilla Mancini (Room 2)

OWASP Orizon

Paolo Perego (Room 3)


Agenda for Thursday, November 6th, 2008
09:15 Daily Briefing:

Dinis Cruz

Technology Tools
10:00 OWASP Classic ASP Security Project

Juan Carlos Calderon

OWASP Source Code Review

James Walden

10:15 OWASP Ruby on Rails Security Project

Heiko Webers

OWASP Enigmaform and mod_Openpgp

Arturo Alberto Busleiman (a.k.a. Buanzo)

10:30 OWASP Webslayer Project

Christian Martorella

OWASP Securing WebGoat using ModSecurity

Stephen Evans and Christian Folini

11:00 OWASP Skavenger Project

Matthias Rohr

OWASP AntiSamy.NET

Marcin Wielgoszewski

11:15 Coffee Break
Working Sessions
11:30 Top 10

2009 Chair: Dave Wichers Secretary: Jeff Williams (Room 1)

Intra Governmental Affairs

Chair: David Campbell (Room 2)

SAMM v2

(Room 3)

Web Site

12:15 Executive Room

Handling Web MalWare

12:15 Sala Bella Vista

13:00 Lunch During Working Sessions
14:00 Training Sessions
Ajax Security

(Room 1)

Auditing Flash Applications

Peleus Uhley (Room 2)

WebApp Assessment

Vicente Aguilera Diaz (Room 3)

Mod Security

Lucas C. Ferreira (Executive Room)

13:00 Coffee Break
Working Sessions
16:30 Strategic Planning and Business Models compatible with OWASP values

Chair: Jeff Williams, Dinis Cruz, Dave Wichers, Sebastien Deleersnyder, and Tom Brennan Secretary: Kate Hartmann and Paulo Combra

18:30 2-Way Internationalization

Chair: Juan Carlos Calderon and Sebastien Deleersnyder (Room 1)

Best Practices for Chapter Leaders

Chair: Georg Hess (Room 2)

Portuguese Public & Private Organizations

Chair: Carlos Serrao (Room 3)

Live CD & DVD

Chair: Matt Tesauro (Sala Bella Vista)

OWASP Awards

Chair: Colin Watson (Executive Room)

20:00 Gala Dinner - Restaurante de Real
22:00 OWASP Band - LE CLUB


Agenda for Friday, November 7th, 2008
10:00 OWASP AppSec Agenda 2009: Working Session Outcomes

Dinis Cruz

10:15 Results Presentations
Documentation Projects/Guides Integration and Unified 4.0 Version

Chair: Eduardo Neves

Browser Security

Chair: Arshan Dabirsiaghi

ESAPI

Chair: Jeff Williams

Tools Projects

Chair: Matt Tesauro

Code Review Guide

Chair: Eoin Keary

OWASP Certification

Chair: Tom Brennan

Software Assurance Maturity Model

Chair: Pravir Chandra

Top 10 2009

Chair: Dave Wichers

Intra Governmental Affairs

Chair: David Campbell

Best Practices for Chapter Leaders

Chair: Georg Hess

11:15 Coffee Break and vote break (put your dots on the wall)
11:30 Live CD & DVD

Chair: Matt Tesauro

ADSR

Chair: Leonardo Cavallari

Education Project

Chair: Sebastien Deleersnyder

Web Application Framework Security

Chair: Arshan Dabirsiaghi

Testing Guide

Chair: Matteo Meucci

OWASP Censorship

Chair: Tom Brennan

EU Funding for OWASP Projects

Chair: Carlos Serrao

OWASP Website

Chair: Fabio Cerull

OWASP Orizon

Chair: Paolo Perego

Handling Web MalWare
2-Way Internationalization

Chair: Juan Carlos Calderon

Portuguese Public & Private Organizations

Chair: Carlos Serrao

12:45 Winter of Code 2009

Chair: Dinis Cruz and Sebastien Deleersnyder Secretary: Paulo Combra

13:00 Lunch - During Winter of Code
14:00 Board Meeting
17:00 Announcement of Summit Procedings