OWASP Project Manager Activity Reports/March 11 2013

OWASP Project Manager Report

Work accomplished since February 11, 2013

• Project Numbers
  • Active Projects: 129
  • Inactive Projects: 67

• New Incubator Projects
  • O-Saft
  • OWASP Crowdtesting
  • OWASP Focus
  • OWASP 1-Liner
  • OWASP Embedded Application Security
  • OWASP OpenStack Security Project
  • OWASP Desktop Goat and Top 5 Project
  • OWASP Bricks

• Project Announcements
  • OWASP ZAP 2.0.0 is now available for download.
  • Simon is hosting a Google hangout demonstrating many of these features at 17:00 UTC on Friday 8th Feb.
  • Details to be announced via https://twitter.com/zaproxy
  • OWASP AntiSamy Version 1.5 is finally released.

• Projects Under Review
  • OWASP Cheat Sheets Project
  • OWASP Java HTML Sanitizer Project

Project Manager Q1 2013 Objectives

1. Continue grant funding research: Target $150 K in 2013.
2. Finalize and Implement New Project Infrastructure processes.
3. Coordinate OSS and OWASP Track documentation, guidelines, and processes as they apply to Global AppSec Conferences. (Ongoing for 2013)
4. Increase Sales Force use for project management.
5. Complete and Launch Projects page.
6. Finalize the Project Leader Handbook.

Currently Working On

• Grant Opportunities Recap & Updates
  • Guidebooks Proposal: We are still waiting for the first payment.
  • Amount: $25,000
  • ESAPI Proposal: This proposal is still under review.
  • Amount: $25,000
  • Google Grants: We have been awarded this grant. Working on developing strategies to implement/use these funds.
  • Amount: $120,000 a year in Google Adwords Money
  • ModSecurity Proposal: This proposal is now complete, and it has been submitted and accepted by DHS
  • Amount: $30,000
  • OWASP Static Analysis Tools Funding Opportunity: DHS
  • There is a possibility of funding some of our Static Analysis tools.
  • The interested party is a different department within the DHS.
  • I am currently in talks with the DHS representative responsible for these initiatives.

• Total Grant Funds Awarded: $145,000 for 2013 so far.

• New Project Web Page
  • The web page has been launched.
  • It has replaced the OWASP Projects Page
  • I am focusing on updating and maintaing our projects page at least twice a week.

• Projects Handbook 2013
  • The Projects Handbook is now live.
  • Users can download it on the Projects Web Page.

• FOSDEM
  • FOSDEM went very well for the Event team in Brussels.
  • The flyers went down very well.
  • Simon's presentation on ZAP went very well according to attendees.
  • The OWASP representatives at the event mentioned that many developers were not aware of OWASP.
  • It is suggested we attend more events like these for outreach.

• Preparation for London BSides
  • Fabio Cerullo and I had a conversation about flyers and Schwag for this event.
  • We are still in the process of creating, and sourcing items for this.
  • Security BSides London

• Guidebooks Project Management
  • The Guidebooks Projects have now begun their work.
  • We are using a collaborative Gantt chart tool to manage our work flow.
  • Start Date: February 4th 2013
  • End Date: June 4th 2013

Important Projects Division Outcomes and Discussion Points

1. GPC Meeting: January 18 2013 Project Manager Report
2. GPC Meeting: January 25 2013 Project Manager Report
3. GPC Meeting: February 01 2013 Project Manager Report
4. GPC Meeting: February 08 2013 Project Manager Report
5. GPC members have decided to meet once every month to discuss project related issues/initiatives.
6. I have scheduled the call, and all of the community is welcomed and encouraged to join in.
7. I will add the meeting time and details to the Global OWASP Calendar.
8. Meeting Date: March 08, 2013.
9. I continue to developing a template, visual branding, and review criteria to meet this need as I feel it is a very important distinction to make between our projects.