Delaware

Delaware Chapter Survey

Do you want to attend local chapter meetings? Thinking about it? Then let your voice be heard by filling out our survey here: http://bit.ly/owaspDEpoll
This will help us figure out what topics to cover, when to meet, where to meet, etc.

OWASP Delaware

Welcome to the official OWASP Delaware chapter homepage.
Click here to join the local chapter mailing list or browse the archives.
It is a low volume mailing list, and the easiest way to stay informed.
Our chapter has a Meetup.com page at http://www.meetup.com/OWASP-Delaware-Chapter/.
The short link is http://bit.ly/owaspDE.
If the meeting advertises food then be sure to RSVP for meetings at the Meetup page so we can plan enough food.
If you don't RSVP you might go hungry. You've been warned.
The chapter leader is David Rhoades. Contact him if you have questions or want to get involved.

Local Security Event - November 2015

Be sure to check out Security BSides Delaware 2015 at Wilmington University in New Castle Delaware this November 13 through 14, 2015.
They will have a Capture the Flag (CTF) event too. There are bound to be some web apps to hack at that event.

Check here for more info: http://www.bsidesdelaware.com/

Meetings

Always check our Meetup page (http://www.meetup.com/OWASP-Delaware-Chapter/) for the most current details

NOTE: We are aiming for the first Tuesday of the month moving forward in 2015. However, that does not always work out. The location is likely to be mostly New Castle, DE at Wilmington University.

Next Meeting

When: Tuesday, June 2, 2015. From 6:00 PM to ~ 8:00 PM.

RSVP: http://www.meetup.com/OWASP-Delaware-Chapter/events/222517845/

Where: 1313 Innovation
1313 Innovation, 1313 N. Market Street, Suite 1150 NW, Wilmington, Delaware;
http://1313innovation.com/

Agenda: Mobile API Security: Exploiting the Unseen

Mobile API security is an often overlooked aspect of information security. Network requests for mobile apps tend to be less visible to the end user when compared to traditional web applications. Capturing and analyzing these web requests can often expose critical vulnerabilities in web services. The presentation will cover an overview of the platform architecture, proxying device requests using an HTTP proxy (including HTTPS), and analyzing the traffic to identify vulnerabilities. Also covered will be real-world case studies, legal implications of research, and disclosure methodologies in working with vendors.

Speaker contact Info:
http://randywestergren.com/
@RandyWestergren

---

Recent Meetings

March 4, 2015. Agenda: Year of the Goat...WebGoat - live demos of v5 and v6

February 3, 2015. Agenda: Why SSL Matters - Live demo

January 6, 2015. Agenda: Hands-on intro to Web Security Dojo (https://dojo.mavensecurity.com)

December 18, 2014

June 19, 2014

July 10, 2014

File Archive

These are presentations given at our chapter meetings.

Meeting slides from March 2015. Year of the Goat...WebGoat
Media:OWASP_Delaware_2015-03-04.pdf

Meeting slides from February 2015.
Media:OWASP_Delaware_2015-02-03.pdf

Meeting slides from January 2015. Hands-on intro to Web Security Dojo.
Media:Slides-WebSecurityDojo.pdf

Meeting slides from December 2014. Media:OWASP Delaware 2015-12-18.pdf </p>
Intro to OWASP WTE project Media:Intro to OWASP WTE.pdf
Presented at the December 2014 meeting by David Rhoades of Maven Security.</p>

Building Robust Application Security Model For Free
Media:Building Robust Application Security Model For Free.pdf
Presented June 19, 2014 & July 10, 2014.
Presented by Pradeep Chhabra - CISSP, CISM, CISA, CRISC Threat Modeling Lead | ITRSM-Information Security Services @ Chase

Delaware chapter intro slides

Media:OWASP Delaware 2014-06-19.pdf

Basic intro to chapter and meeting agenda and things the chapter needs moving forward

Presented June 19, 2014

Participation

OWASP Foundation (Overview Slides) is a professional association of global members and is and open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.

Sponsorship/Membership

to this chapter or become a local chapter supporter.

Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member?