WASPY Awards 2016

Web Application Security People of the Year Awards 2016

Timeline

June 7, 2016 - Call for Nominees Opens! Submit HERE
June 20, 2016 - Paid Membership Deadline. Not sure if you are a member? Check Here
July 28, 2016 - Call for Nominees Closes
July 29, 2016 - Announcement of Nominees per Category to the Community
August 5, 2016 - Deadline for Nominee Profile Picture and Bio to be Submitted
August 8, 2016 - Voting Opens
August 24, 2016 - Voting Closes
August 25, 2016 - Winners are Notified
August 25, 2016 - Announcement of Winners to the Community
October 13/14, 2016 - Award Ceremony at AppSecUSA 2016 in Washington, DC

Purpose of the Awards

Each year there are many individuals who do amazing work, dedicating countless hours to share, improve, and strengthen the OWASP mission. Some of these individuals are well known to the community while others are not.

The purpose of these awards is to bring recognition to those who "FLY UNDER THE RADAR". These are the individuals who are passionate about OWASP, who contribute hours of their own free time to the organization to help improve the cyber-security world, yet seem to go unrecognized.

Community members are able to nominate 1 individual per category (see Categories below) who they feel best fits these descriptions so that, as a community, we can recognize these people for their contributions. We are tying in the WASPY Awards to help identify and recognize individuals who demonstrate our core values and annual report theme of Leading - Learning - Sharing - Growing. We value your input and consideration for nominations in the categories below.

Categories & The Nominees For Each Category

1. Open/Leading - Everything at OWASP is radically transparent – from our finances to our code. This award goes to a member of the OWASP community who has supported the OWASP mission of transparency through their influence, management, and leadership in the community. This might be a chapter or project leader or may be someone who has worked within the community.

Name	Category & Citation
Tony Clarke	Open/Leading Category Tony has been nominated 2 times for this category. Citation 1Tony has recently volunteered in the Dublin (Ireland) chapter and more recently been voted in as chapter leader. From his initial efforts, Tony has completely transformed this stagnant chapter and has already in just a few months re-organised the chapter and opened it up to the many volunteers who want to be involved. Running initiatives such as 'Women in Appsec', Tony has helped increase meeting attendances and the Dublin board now consists of nearly 20 individuals. Tony has embraced the open, transparency and inclusiveness side of owasp and is an inspiration to many. Citation 2
Jeremy Long	Open/Leading Category Jeremy wrote a tool, donated it to OWASP and in 2016 it because on of the OWASP Flagship projects. He is not noisy or gets a lot of attention, but every morning before work - Jeremy works on the OWASP Dependency Check. Dependency-Check is a utility that identifies project dependencies and checks if there are any known, publicly disclosed, vulnerabilities. Currently Java and .NET are supported; additional experimental support has been added for Ruby, Node.js, Python, and limited support for C/C++ build systems (autoconf and cmake). The tool can be part of a solution to the OWASP Top 10 2013 A9 - Using Components with Known Vulnerabilities.
John Patrick Lita	Open/Leading Category An outstanding volunteer doing an amazing job in the Asia region to promote OWASP projects and materials, reaching a big audience through his outreach program on universities, government institutions and schools on the Philippines. OWASP is not very well know in this part of the Globe and by promoting it, he is creating awareness about application security
Owen Pendlebury	Open/Leading Category
Kathy Thaxton	Open/Leading Category Kathy Thaxton has been THE key leader for SnowFROC for many years. As with most regional conferences, everyone involved has a day job and nobody's got a lot of spare time to do what must be done. Kathy has somehow found time whenever she's been asked, and has done the lion's share of the work required to organize SnowFROC. For SnowFROC 2016 we had the usual chaotic first planning meeting where several of us gathered at a pub to see which of us would be able to commit time & to identify potential roles. Everybody left that meeting with action-items. Shortly thereafter, Kathy emailed the rest of us to inform us that she had: drafted a budget,drafted a planning schedule,identified primary & alternate venues,identified primary & competing caterers,reached out to some legendary speakers & gotten tentative commitments,reached out to several vendors & gotten tentative sponsorship commitments, and,identified a good source of volunteers for setup, event day, and tear-down. In other words, Kathy Thaxton had done most of the "heavy lifting" within days of the initial planning meeting! Like previous SnowFROC's, SnowFROC 2016 was attended by Coloradans for the most part, but as with most years we had attendees from Arizona, Utah, Wyoming, and New York. SnowFROC had about 200 attendees, with a mix of ITSec operators, QA/testers, Developers, Auditors, & Managers for all of the above. None of this would have happened without Kathy Thaxton's involvement. Her tact, initiative, cheerfulness, and exceptional organizational skills allowed the rest of the planning committee to focus on things like establishing the curriculum, including a day-long hands-on workshop. Kathy's contribution was so profound and her reputation for organizing a FUN, well-planned, LEARNING event is so great that the local Cloud Security Alliance went out of their way to request her participation on their planning committee for a regional event they're hosting later this year. I attended yesterday's Cloud Security Alliance meeting, and whereas AppSec in the Cloud has been an afterthought at most CSA meetings, it was front-and-center yesterday as the Chapter Leaders asked their members what tracks/topics they'd be most interested in for their upcoming event. That is DEFINITELY reach OUTSIDE of the OWASP community, and again would not have happened without Kathy's stellar achievements at SnowFROCs.
Dhiraj Mishra	Open/Leading Category Handling the OWASP Student Chapter Mumbai, https://www.owasp.org/index.php/Mumbai_Student_Chapter. Being a chapter leader, we have endorse the student towards the security ethic
Tom Brennan	Tom was also nominated for the Open/Leading Category, however since he is a current board member, he is not eligible.
Dhiraj Mishra	Integrity/Learning Category First Bug hunter in OWASP https://www.owasp.org/index.php/About_OWASP/Bug_Bounty/WOF I would really like to thanks BOD , Mr. Tom , Josh , Jim Sir , and Noreen Mam for giving me the opportunity.
John Patrick Lita	Open/Leading Category An outstanding volunteer doing an amazing job in the Asia region to promote OWASP projects and materials, reaching a big audience through his outreach program on universities, government institutions and schools on the Philippines. OWASP is not very well know in this part of the Globe and by promoting it, he is creating awareness about application security
Steve Kosten	Integrity/Learning Category Steve Kosten is the Denver Chapter Leader. For the past year, Steve has built community and fostered AppSec learning within Colorado. Before Steve joined the Denver OWASP Board, the Chapter was averaging 2 meetings per year attended by about 15 people. After 1 year on the board there had been 6 meetings with a high-water mark of 50 attendees. Since Steve has become Chapter Leader, attendance is >75 for the 4+ meetings each year. This is directly attributable to Steve's selection of top-quality speakers and an exceptional partnership with a local vendor who provides venue & catering, all in exchange for a simple "thank you" and round of applause. As a SANS AppSec Instructor, Steve is an AppSec expert who has cheerfully shared his expertise with attendees. Steve is a selfless leader who has profoundly improved the Denver OWASP Chapter and become a highly sought-after resource in this community.
Eoin Keary	Integrity/Learning Category
Owen Pendelbury	Integrity/Learning Category
Dhiraj Mishr	Innovation/Sharing Category I have created and contributed myself towards SQLi WAF ByPassing which is been recommended by many professionals in the InfoSec community.https://www.owasp.org/index.php/SQL_Injection_Bypassing_WAF. I am the contributor in the popular XSS Evasion CheatSheet.https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet and I am trying to contribute more out of it.
John Patrick Lita	Open/Leading Category An outstanding volunteer doing an amazing job in the Asia region to promote OWASP projects and materials, reaching a big audience through his outreach program on universities, government institutions and schools on the Philippines. OWASP is not very well know in this part of the Globe and by promoting it, he is creating awareness about application security
Mark Major	Innovation/Sharing Category Mark Major did a LOT of HARD work to ensure that AppSecUSA was a success in Denver. He has consulted with his Chapter and worked with OWASP to try to take the Chapter to the next level. Specifically, his research into using some of the proceeds from his efforts at AppSecUSA to establish an AppSec HackerSpace is both innovative and well overdue.
Owen Pendelbury	Innovation/Sharing Category
Dhiraj Mishr	Global/Growing Category Handling the OWASP Student Chapter Mumbai , https://www.owasp.org/index.php/Mumbai_Student_Chapter Being a chapter leader , we have endorse the student towards the security ethics
John Patrick Lita	Global/Growing Category An outstanding volunteer doing an amazing job in the Asia region to promote OWASP projects and materials, reaching a big audience through his outreach program on universities, government institutions and schools on the Philippines. OWASP is not very well know in this part of the Globe and by promoting it, he is creating awareness about application security
Kathy Thazton	Global/Growing CategorKathy Thaxton has been THE key leader for SnowFROC for many years. As with most regional conferences, everyone involved has a day job and nobody's got a lot of spare time to do what must be done. Kathy has somehow found time whenever she's been asked, and has done the lion's share of the work required to organize SnowFROC. For SnowFROC 2016 we had the usual chaotic first planning meeting where several of us gathered at a pub to see which of us would be able to commit time & to identify potential roles.Everybody left that meeting with action-items.Shortly thereafter, Kathy emailed the rest of us to inform us that she had: drafted a budget,drafted a planning schedule,identified primary & alternate venues,identified primary & competing caterers,reached out to some legendary speakers & gotten tentative commitments,reached out to several vendors & gotten tentative sponsorship commitments, and,identified a good source of volunteers for setup, event day, and tear-down.In other words, Kathy Thaxton had done most of the "heavy lifting" within days of the initial planning meeting!Like previous SnowFROC's, SnowFROC 2016 was attended by Coloradans for the most part, but as with most years we had attendees from Arizona, Utah, Wyoming, and New York.SnowFROC had about 200 attendees, with a mix of ITSec operators, QA/testers, Developers, Auditors, & Managers for all of the above.None of this would have happened without Kathy Thaxton's involvement. Her tact, initiative, cheerfulness, and exceptional organizational skills allowed the rest of the planning committee to focus on things like establishing the curriculum, including a day-long hands-on workshop.Kathy's contribution was so profound and her reputation for organizing a FUN, well-planned, LEARNING event is so great that the local Cloud Security Alliance went out of their way to request her participation on their planning committee for a regional event they're hosting later this year.I attended yesterday's Cloud Security Alliance meeting, and whereas AppSec in the Cloud has been an afterthought at most CSA meetings, it was front-and-center yesterday as the Chapter Leaders asked their members what tracks/topics they'd be most interested in for their upcoming event.That is DEFINITELY reach OUTSIDE of the OWASP community, and again would not have happened without Kathy's stellar achievements at SnowFROCs. 2. Integrity/Learning - OWASP is an honest and truthful, vendor neutral, global community. This award goes to an individual who recognizes the benefits of the power of the collective community within OWASP, who challenges the status quo, and generates an excitement in the learning community. 3. Innovation/Sharing - OWASP encourages and supports innovation and experiments for solutions to software security challenges. This award goes to an individual who has inspired and encouraged others in the arena of software security with innovative and cutting edge solutions to software security challenges. 4. Global/Growing - Around the world, OWASP encourages and supports innovation and experiments for solutions to software security challenges. This award goes to an individual who truly represents the OWASP Global scope and recognizes the importance of growth. The nominee reaches out beyond the OWASP circle to raise awareness of software security in locations outside of the OWASP comfort zone. Rules Remember the purpose of these awards is to recognize the UNSUNG HEROS out there, that are barely recognized for their contributions to the OWASP Foundation. 1. Board members may not be nominated 2. Employees & Contractors may not be nominated 3. You MUST be a Paid or Honorary member to vote and your membership needs to be on file by June 20, 2016 4. All nominees will remain anonymous until July 11, 2016 5. Anyone can nominate an "unsung hero" who has contributed in some way to OWASP who they feel best fits each category 6. You may only nominate one person per category Eligible Voters Individuals who were members as of June 20, 2016 are eligible and are listed here. Please take a minute to verify your name is on the list. If you are NOT on the list and believe you should be, then you should contact us immediately Sponsorship Opportunities Coming Soon! The support from our sponsors, is what makes these awards truly successful! Communication June 7, 2016 Twitter, Facebook, LinkedIn, Google+, OWASP Blog. Past WASPY Awards 2015 2014 2013 2012