Summit 2011 Working Sessions/Session068

Global Summit 2011 Home Page
Global Summit 2011 Tracks

Enterprise Web Defense Roundtable
Please see/use the 'discussion' page for more details about this Working Session
Working Sessions Operational Rules - Please see here the general frame of rules.

WORKING SESSION IDENTIFICATION
Short Work Session Description	How are enterprises defending web applications. Discussion of best practices, effective methods, and new ideas to enhance web application defense.
Related Projects (if any)
Email Contacts & Roles	Chair Michael Coates @ Chris Lyon @	Operational Manager	Mailing list Subscription Page

WORKING SESSION SPECIFICS
Objectives	What techniques are effective for scaling web security within a large company? Strategies for developer education that work? Automated defenses - what techniques are currently in use? Benefits/considerations for using security bounty programs and public hacking initiatives. What can OWASP build or develop to assist with enterprise wide application security?
Venue/Date&Time/Model	Venue/Room OWASP Global Summit Portugal 2011	Date & Time	Discussion Model participants and attendees

WORKING SESSION OPERATIONAL RESOURCES
Projector, whiteboards, markers, Internet connectivity, power

WORKING SESSION ADDITIONAL DETAILS

WORKING SESSION OUTCOMES / DELIVERABLES
Proposed by Working Group	Approved by OWASP Board
A white paper detailing specific recommendations for Enterprise Web Security.	After the Board Meeting - fill in here.
A plan for building an ecosystem specifically targeting enterprise web security. What does it take to scientifically advance the state of the art?	After the Board Meeting - fill in here.
	After the Board Meeting - fill in here.
	After the Board Meeting - fill in here.
	After the Board Meeting - fill in here.
	After the Board Meeting - fill in here.
	After the Board Meeting - fill in here.
	After the Board Meeting - fill in here.

Working Session Participants

(Add you name by clicking "edit" on the tab on the upper left side of this page)

WORKING SESSION PARTICIPANTS
Name	Company	Notes & reason for participating, issues to be discussed/addressed
Colin Watson @		1. AppSensor equivalent for application-aware configuration monitoring (file integrity, file additions, database integrity, config settings, patching, etc)? 2. Application surface/entry point definition language?
Dinis Cruz @
Chris Schmidt @	Aspect Security
Justin Clarke @	Gotham Digital Science
Matthias Rohr @	SEC Consult
Matteo Meucci @
Mateo Martinez @