CRSAppSecEU2017

This is a work in progress page about our plans for the CRS at AppSecEU 2017.

• Conference website: https://2017.appsec.eu/
• Training dates: 8th, 9th & 10th of May 2017
• Conference dates: 11th & 12th of May 2017

Training

We offer a free Apache / ModSecurity / CRS training course based on Christian's course material at https://netnea.com/cms/apache-tutorials

• CFT Application: Christian
• Teacher: Christian
• Support: Chaim - Always willing to help :)
• Call for Trainings: https://2017.appsec.eu/program/call-for-trainings
• Status: Has been submitted on January 2: https://easychair.org/conferences/submission.cgi?a=13528833;submission=3078201

Conference Papers / Presentation

• Call for Papers: https://2017.appsec.eu/program/call-for-papers
• Deadline: January 9, 2017

• Paper #1: Introducing the OWASP ModSecurity Core Rule Set 3.0
  • Presenter: Christian Folini (Chaim can help if needed)
  • Status: Submitted January 8th: https://easychair.org/conferences/submission.cgi?a=13528833;submission=3088094
• Paper #2: Testing FTW! A Modern, Open Source Approach to testing WAFs
  • Presenter: Chaim Sanders, Zach Allen and Christian Peron
  • Status: Submitted January 8th: https://easychair.org/conferences/submission.cgi?submission=3086175;a=13576385
• Paper #3: On the use of client side WAFs - it’s no WAFing matter
  • Presenter: Chaim Sanders
  • Status: Submitted January 8th: https://easychair.org/conferences/submission.cgi?submission=3086166;a=13576385
• Paper #4: A Core Rule Set War Report
  • Presenter: Christian Folini
  • Status: Submitted January 8th: https://easychair.org/conferences/submission.cgi?a=13528833;submission=3088131

Conference Activities

• Call for Activities: https://2017.appsec.eu/program/call-for-activities
• Deadline: none

CRS Summit

Inviting the Community and all Commercial Suppliers using / interested in CRS rules, maybe evening of May 10

• Head of CRS Summit: Christian
• Status: FIXME
• Date / Time / Location: FIXME

CRS Hackathon

Hacking away together for a day. Maybe May 10.

• Head of CRS Hackathon: FIXME
• Status: FIXME
• Date / Time / Location: FIXME

CRS Installation Party

Helping people get started with the CRS, probably 1/2 day during the conference

• Head of Installation Party
• Status: FIXME
• Date / Time / Location: FIXME

Hack CRS

Offer a prize to break execute an attack against a website protected with CRS throughout the conference

• Head of Development: Chaim
• Status: FIXME
• Date / Time / Location: FIXME