UW Bothell

OWASP UW Bothell

Welcome to the UW Bothell chapter homepage. The Bothell campus of the University of Washington is located just North of Seattle. Students in the Master of Science in Cyber Security Engineering (MS CSE) program have chartered this OWASP Chapter to provide an educational resource for the community. We emphasize collaboration with other technology and security organizations.

Information about upcoming meetings and events will appear in the "News" section below.

The chapter leads are Tyler Laws and Brendan Sweeney .

Our faculty advisor is Geetha Thamilarasu PhD.

For more information about UW Bothell and the University of Washington system: http://www.uwb.edu/cybersecurity

Participation

OWASP Foundation (Overview Slides) is a professional association of global members and is open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.

Sponsorship/Membership

to this chapter or become a local chapter supporter. Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member?

Local News

Meeting Location    The Bothell campus of the University of Washington is located near 
 the North end of Lake Washington, at the intersection of Highway 522 and Interstate 405. 
 Multiple bus routes converge on campus, parking requires payment. 
 Everyone is welcome to join us at our chapter meetings.

Upcoming Events:

Joint ACM, OWASP, UWB Gray Hats Team Citizen Four Moving Screening Please join us May 14, 2015 from 3:30pm in Discovery Hall, room 162. CITIZENFOUR is a real life thriller, unfolding by the minute, giving audiences unprecedented access to filmmaker Laura Poitras and journalist Glenn Greenwald’s encounters with Edward Snowden in Hong Kong, as he hands over classified documents providing evidence of mass indiscriminate and illegal invasions of privacy by the National Security Agency (NSA). The student groups ACM, OWASP, and Gray Hats are co-hosting this event open to all UW students, faculty, staff, and guests. Come to hear about our organizations and become a new member, then stay to learn the details of Edward Snowden's battle against government surveillance!

Previous Events:

How to Start a Successful Cyber Security Business: 12 May, 2015 Please join us May 12, 2015 from 4-5 pm in Discovery Hall, room 162. OWASP will be hosting Rick Kam, founder and president of ID Experts. He will be visiting our campus to present his entrepreneurship experience in cyber security. He will talk about what happens when an entity experiences a cyber attack and breaches regulated data. He will also discuss how cyber risks are creating many new career opportunities in cyber security, privacy, and compliance. Rick Kam brings 28 years of business experience including a long management career with IBM Corporation. Under his leadership, ID Experts has grown to become a leading provider of data breach protection, response, and identity theft protection services. Rick has also chaired the Public Health Information (PHI) Project, a working group made up of members from the ANSI IDSP that focus on fraud and risk mitigation associated with the Financial Services Roundatable, BITS, and Internet Security Alliance. The working group developed an industry leading white paper: “The Financial Impact of Breached Protected Health Information – A Business Case for Enhanced PHI Security.” This event is an excellent opportunity to learn about cyber security entrepreneurship and the current cyber security landscape. Rick will also be available to answer questions at the end. This event is open to everyone. We hope to see you there!

Application Security Testing in the Real World: 10 Apr, 2015 Mike de Libreo, accomplished developer and security specialist, and one of the Seattle OWASP chapter leaders, presents an introduction to application security testing in the business world and some of the most useful tools. Presentation Slides: File:Security testing real world.pptx Links to the Demo Vulnerabilities Investigated in the Lab: Gravity Forms - blind SQLi Wordpress SEO - blind SQLi Inboundio-marketing - remote shell upload Ab-google-map-travel - persistent XSS Bonus: the first twenty attendees are entered in a free raffle for OWASP swag!!! In this hands-on lab we will go over tools and techniques for application security testing that will help testers and developers find issues and exploit them. You will be guided through the lab using a pre-configured workstation as an "attacker" and targeting a vulnerable website (e.g. Wordpress with known vulnerable plugins). We will also discuss techniques to improve your bug hunting besides the usual "vulnerable web app" approach. Please join us in the Network Security Lab, UW1-321, on April 10th from 4pm to 5:30pm. Presented by OWASP and the Gray Hats team.

Tour Microsoft's Cybercrime Center (DCU): 1 Apr, 2015 Tour the innovative Cybercrime Center on the Microsoft Campus. Learn about the extent of cybercrime and what's being done to stop it. This 45 minute tour will be lead by the center's staff who have in depth knowledge of the current state of the art. News Story

Hacking for Defense: 27 Feb, 2015 Presentation Audio File: Presentation Slides: File:OWASP-UWB hacking-for-defense-2015-02-27 slides.pdf The next chapter event, in cooperation with the UWB Gray Hats team, is 4pm - 5:30pm Friday, February 27. Ever wondered if your website was secure? Want to know how to test it? Join us as David L. Morse presents an introduction to stress-testing your website! We'll play with hacking tools specifically designed to identify the most commonly attacked vulnerabilities - using the results to "harden" our website. We'll have a brief overview and then hands-on excercises. No experience needed! We'll meet on campus in building UW1, Room 321 - the network security lab.