Cambridge

OWASP Cambridge

Welcome to the Cambridge chapter homepage. The chapter leader is Adrian Winckles .

Participation

OWASP Foundation (Overview Slides) is a professional association of global members and is open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.

Sponsorship/Membership

to this chapter or become a local chapter supporter. Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member?

Local News

Application Security Seminar – Cambridge OWASP Chapter Meeting

“The O2 Platform : Exploiting and Fixing Microsoft ASP.net MVC Vulnerabilities” Wednesday 5th December 2012 18:00 – 20:00

Hosted by the Department of Computing & Technology, Anglia Ruskin University, OWASP (Open Web Application Security Project) Cambridge Chapter and IEEE Industrial Electronics Chapter

Guest speaker: Dinis Cruz

The O2 Platform : Exploiting and Fixing Microsoft ASP.net MVC Vulnerabilities. The OWASP O2 platform represents a new paradigm for how to perform, document and distribute Web Application security reviews. O2 is designed to Automate Security Consultants Knowledge and Workflows and to allow non-security experts to access and consume Security Knowledge. O2 can also be a very powerful prototyping and fast-development tool for .NET (see VisualStudio Extension C# REPL - O2 Platform).

In this presentation, it will be explained how the O2 platform can be used to exploit the overposting vulnerability on top of Microsoft MVC framework. This use case is very important considering that the industry is adopting this framework to build the most efficient and standard compliant applications. In addition it will be illustrated how easy it is to leave the door open in applications and allow attackers to change the behaviour of these products.

Dinis Cruz is a Security Consultant based in London (UK) and specialized in: ASP.NET/J2EE Application Security, Application Security audits and .NET Security Curriculum Development.

Agenda

18:00 – 18:15 Welcome from the OWASP Cambridge Chapter Leader, Adrian Winckles, Senior Lecturer in Information Security, Anglia Ruskin University 18:15 – 19:00 “The O2 Platform : Exploiting and Fixing Microsoft ASP.net MVC Vulnerabilities”, Dinis Cruz 19:00 – 19:15 OWASP Summer of Code, Future Development Opportunities Future Chapter Events & Conferences 19:15 – 20:00 Refreshments & Networking (sandwiches, coffee, tea, juice) in LAB006

Registration

To register for this free event, please register online at

http://www.surveymonkey.com/s/S37JMJP

Please note there is no automatic notification or confirmation.

The conference will be held in the Lord Ashcroft Building, Room LAB003 (Breakout Room LAB006 for networking & refreshments).

Please enter through the Helmore Building and ask at reception.

Anglia Ruskin University Cambridge Campus East Road Cambridge CB1 1PT

Get further information on travelling to the university.

http://www.anglia.ac.uk/ruskin/en/home/your_university/anglia_ruskin_campuses/cambridge_campus/find_cambridge.html

Meeting Location

Everyone is welcome to join us at our chapter meetings.