OWASP Project Manager Activity Reports/December 10 2012

OWASP Project Manager Report

Work accomplished since November 12, 2012

• Project Numbers
  • Active Projects: 120
  • Inactive Projects: 66
  • Merged Projects: 42

• New Projects:
  • OWASP SamuraiWTF Project
  • OWASP Press
  • OWASP Security Research and Development Framework

Project Manager Q4 Objectives

1. Identify and initiate 3 grant opportunities.
2. Complete metadata for Salesforce import related to projects.
3. Finalize and launch the Project database communication tool and webpage.
4. Complete the project lifecycle redesign.
5. Complete Version 2 of the Project Handbook.

Currently Working On

• Grant Opportunities Updates
  • The ESAPI proposal is done and submitted: Thank you Chris Schmidt and Kevin Wall for helping to finalising the document.
  • Deborah, the DHS representative, has confirmed.
  • Submission was held up due to some budget questions raised by Kevin and Chris.
  • We re-evaluated the budget and made some changes.
  • This is for $25,000 from the DHS.
  • The Google Grant process is a little trickier than expected
  • Nevertheless, I am moving forward with the application with help from a Google for Non-Profits representative.
  • I hope to complete the application by this week, if all goes well.
  • I've already started the process for the OWASP ModSecurity Proposal as well.
  • Ryan has responded to my query regarding funding, and he is interested in pursuing the proposal.
  • I am putting together a reply with information on proposal procedure and budget requirements to send Ryan.

• SalesForce Metadata Migration
  • All project data is now in Salesforce.
  • I continue to work with Kate to finish the migration.
  • We are currently working on creating a template e-mail to send to all active project leaders asking them to update their information. (Still seeking help for this)
  • Developed 8 forms to help with future requests: You can find them in the Project Processes Document: Section I.
  • Currently looking into developing the forms in Salesforce, and updating the active project information directly from Project Leaders.

• Projects Communications Restructuring
  • The aim is to make this page live in January 2013.
  • I continue to update this with the relevant data.
  • Working on developing the project handbook, finalising project stage benefits, and finalising project graduation process before finalising updates to this page.

• Project Processes & Lifecycle Development
  • Putting the handbook aside until these are fleshed out and agreed to.
  • I feel it is a much better idea to tackle individually, and them add them to the handbook.
  • Process form development
  • Project Stage Benefits
  • Project Graduation Process
  • Project Graduation Criteria
  • Project Migration Process

• Projects Handbook
  • GPC and I have been working on completing the OWASP Projects Handbook.
  • Currently in the middle of developing a second version of the Handbook that is more relevant to the current state of OWASP Projects.
  • Emphasis on simplification of processes and creating a solid framework that we can later build on if needed.
  • Much of the handbook has been edited and discussed.
  • Areas that are still under development can be found in the Project Processes & Lifecycle Development section of this report.

Important GPC Meeting Outcomes and Discussion Points

1. GPC Meeting: November 16 2012 Project Manager Report
2. GPC Meeting: November 30 2012 Project Manager Report
3. GPC Meeting: December 07 2012 Project Manager Report
4. ModSecurity Proposal grant writing is in progress.
5. SourceForge: They have responded. They decided to decline both options proposed by OWASP, but they have deducted $2500 from the original bill. We are currently processing the new invoice.
6. AppSec APAC 2013: Call for Entries for the Open Source Showcase & OWASP Projects Track will be launched again. Justin, Sam ,and possibly Nishi and Keith will attend.
7. Part-Time Project Support Volunteer Role for Guidebook Projects: The final applicant count was 14 volunteers. I am currently processing the applications, and I will allocate roles come next week.
8. FOSDEM: The application for a stand was submitted this week. If we get the stand, Seba and Martin K. will manage it for OWASP.
9. Nishi: Will touch base with Matt Tesauro regarding the wiki file size requirement.
10. Question for Justin: Have you spoken to James Greenberg from AppSec Labs? Have they come to a decision regarding their license choice, and whether they are choosing to continue as an OWASP Project?
11. Question: Do we have criteria that measures whether a project is active or not?: Answer: OpsTeam is working on creating an e-mail through Salesforce that will ask all current 'Active' project leaders to give us a status update. Additionally, it will give them an opportunity to update their information.
12. Active Project Criteria: We discussed the idea of requiring project leaders to send us an update every six months, or annually. The aim is to make sure a project is still active.
13. Project Update required information would be something along the lines of: Update the wiki with links and announcements, summary of what you have accomplished, summary of your future plans.