Difference between revisions of "Ottawa"

Revision as of 03:29, 21 December 2010

OWASP Ottawa

Welcome to the Ottawa chapter homepage. The chapter leaders are Mike Sues and Sherif Koussa <paypal>Ottawa</paypal>

Participation

OWASP Foundation (Overview Slides) is a professional association of global members and is open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.

Sponsorship/Membership

to this chapter or become a local chapter supporter. Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member?

Meetings Location

Third Brigade: 40 Hines Rd Suite 200 Ottawa, Ontario, Canada K2K 2M5 Map

RSVP

Please RSVP to [email protected]. Please include name, company and how many attendees.

Next Meeting: Tuesday, January 11th, 2011

Meeting Sponsor:

Meeting schedule:

6:00-6:30 Pizza, wings and pop
6:30-7:30 Main presentation
7:30-8:00 Open discussion and questions

Speaker: Lawrence Dobranski, CISSP-ISSAP, CISM, CSSLP - VoIP Security: VoIP is not data

To manage costs and reduce risks, firms are considering moving to hosted, managed, or self provided VoIP services. Transitioning from traditional voice services to VoIP services introduces new risks, but provides additional services and capabilities. Organizations need to consider these risks and the appropriate mitigation strategies as they make the business decisions regarding VoIP services. VoIP Platforms offer an excellent environment to deliver vertically integrated applications but they have specific risks that must be mitigated. To understand these risks associated with the various flavors of VoIP it is necessary to have a basic understanding of VoIP. Treating VoIP as just another data flow will not expose the unique security requirements and issues associated with this real-time communications system. This presentation will provide an overview of VoIP from a security practitioner perspective, its unique architectural constructs, threat and risk considerations, implications for application development and recommended best practices.

About The Speaker Mr. Lawrence Dobranski is the founder of Catalone IT Security Inc. He is a multi-certified senior security leader, a principal security architect and technologist. He has over 25 years experience in information security, working in industry, professional services, and government. He has acknowledged expertise in information security leadership, architecture, VoIP security, application security, agile security and security in the software lifecycle. He has taught, spoken, lectured, written and blogged extensively on information security.

Lawrence is a part-time faculty member at Algonquin College in Ottawa, Ontario, where he teaches IT Security courses as part of the Computer Studies Department, where he draws on his in depth, hands-on experience, and knowledge of information security.

Lawrence is currently working towards an MBA in Information Security Management (Jones International University) expected in April 2011, and simultaneously, a DSc in Information Assurance (University of Fairfax) expected in January 2014. His DSc research interests are in re-useable software security components as part of product platforms for solutions, services and cloud computing.

Lawrence holds three information security patents.