OWASP Project Manager Activity Reports/December 10 2012

OWASP Project Manager Report

Work accomplished since November 12, 2012

• Project Numbers
  • Active Projects: 120
  • Inactive Projects: 66
  • Merged Projects: 42

• New Projects:
  • OWASP SamuraiWTF Project
  • OWASP Press
  • OWASP Security Research and Development Framework

Project Manager Q4 Objectives

1. Identify and initiate 3 grant opportunities.
2. Complete metadata for Salesforce import related to projects.
3. Finalize and launch the Project database communication tool and webpage.
4. Complete the project lifecycle redesign.
5. Complete Version 2 of the Project Handbook.

Currently Working On

• Grant Opportunities Recap & Updates
  • Guidebooks Proposal: We are in the process of submitting DHS required tax paperwork so we can receive payment.
  • Amount: $25,000
  • ESAPI Proposal: This proposal has been submitted, and we are waiting to hear back from Deborah from the DHS.
  • Amount: $25,000
  • Google Grants: This proposal has been submitted. We should hear back from them in January 2013.
  • Amount: $120,000 a year in Google Adwords Money
  • ModSecurity Proposal: I've already started the process for the OWASP ModSecurity Proposal. Ryan and I are currently working towards developing a plan for the project.

• SalesForce Metadata Migration
  • All project data is now in Salesforce.
  • I continue to work with Kate to finish the migration.
  • We are currently working on creating a template e-mail to send to all active project leaders asking them to update their information. (Still seeking help for this)
  • Developed 8 forms to help with future requests: You can find them in the Project Processes Document: Section I.
  • Currently looking into developing the forms in Salesforce, and updating the active project information directly from Project Leaders.

• Projects Communications Restructuring
  • The aim is to make this page live in January 2013.
  • I continue to update this with the relevant data.
  • Working on developing the project handbook, finalising project stage benefits, and finalising project graduation process before finalising updates to this page.

• Project Processes & Lifecycle Development
  • Putting the handbook aside until these are fleshed out and agreed to.
  • I feel it is a much better idea to tackle individually, and them add them to the handbook.
  • Process form development
  • Project Stage Benefits
  • Project Graduation Process
  • Project Graduation Criteria
  • Project Migration Process

• Projects Handbook
  • GPC and I have been working on completing the OWASP Projects Handbook.
  • Currently in the middle of developing a second version of the Handbook that is more relevant to the current state of OWASP Projects.
  • Emphasis on simplification of processes and creating a solid framework that we can later build on if needed.
  • Much of the handbook has been edited and discussed.
  • Areas that are still under development can be found in the Project Processes & Lifecycle Development section of this report.

Important GPC Meeting Outcomes and Discussion Points

1. GPC Meeting: November 16 2012 Project Manager Report
2. GPC Meeting: November 30 2012 Project Manager Report
3. GPC Meeting: December 07 2012 Project Manager Report
4. ModSecurity Proposal grant writing is in progress.
5. SourceForge: They have responded. They decided to decline both options proposed by OWASP, but they have deducted $2500 from the original bill. We are currently processing the new invoice.
6. AppSec APAC 2013: Call for Entries for the Open Source Showcase & OWASP Projects Track will be launched again. Justin, Sam ,and possibly Nishi and Keith will attend.
7. Part-Time Project Support Volunteer Role for Guidebook Projects: The final applicant count was 14 volunteers. I am currently processing the applications, and I will allocate roles come next week.
8. FOSDEM: The application for a stand was submitted this week. If we get the stand, Seba and Martin K. will manage it for OWASP.
9. Nishi: Will touch base with Matt Tesauro regarding the wiki file size requirement.
10. Question for Justin: Have you spoken to James Greenberg from AppSec Labs? Have they come to a decision regarding their license choice, and whether they are choosing to continue as an OWASP Project?
11. Question: Do we have criteria that measures whether a project is active or not?: Answer: OpsTeam is working on creating an e-mail through Salesforce that will ask all current 'Active' project leaders to give us a status update. Additionally, it will give them an opportunity to update their information.
12. Active Project Criteria: We discussed the idea of requiring project leaders to send us an update every six months, or annually. The aim is to make sure a project is still active.
13. Project Update required information would be something along the lines of: Update the wiki with links and announcements, summary of what you have accomplished, summary of your future plans.