Germany

OWASP Germany

Welcome to the Germany chapter homepage. The chapter leaders are Thomas Schreiber and Georg Heß. Chapter Board members are: Holger Heimann and Boris Hemkemeier.

Participation

OWASP Foundation (Overview Slides) is a professional association of global members and is open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.

Sponsorship/Membership

to this chapter or become a local chapter supporter. Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member?

Next OWASP German Chapter Meeting

The next chapter meeting has not been announced yet

Date: tbc
Location: tbc
Agenda: tbc

Past Events

OWASP German Chapter Meeting - February 20th in Darmstadt

Date: February 20th, 2007, 11:00-16:15
Location: Darmstadt, CAST (http://www.cast-forum.de)
Fraunhoferstr. 5 (vormals Rundeturmstr. 6) - EG Room 072 - Anfahrt

The next chapter meeting will be hosted at CAST in Darmstadt.
This time the focus is on technical presentations and discussion.

Agenda Technical presentation slots will consist of 20-30 minute presentation and 15 minute discussion.

• 1. (11:00 - 11:15) Welcome, Introduction and Administrativia
• 2. (11:15 - 11:30) Vorstellung von CAST (Dr. Heinemann)
• 3. (11:30 - 11:45) Short OWASP organisation introduction and update (Tobias Gondrom)
• 4. (11:45 - 12:30) First technical presentation "Best Practices beim Einsatz einer Web Application Firewall 1.0" (Slides: PDF) (Alexander Meisel)
• 5. (12:30 - 13:15) Break
• 6. (13:15 - 14:00) Second technical presentation "Defending against Web Application DoS Attacks" (Maximilian Dermann)
• 7. (14:00 - 14:45) 20-Minutes Talks (15 Min Presentation + 5-10 Min Discuss)
  • "Input validation in ASP.NET -- tips, tricks & pitfalls" (Boris Hemkemeier)
  • "Managing of extremely large Web Application Firewall Installations" (Slides: PDF) (Alexander Meisel)
• 8. (14:45 - 15:00) Coffee Break
• 9. (15:00 - 15:45) Fourth technical presentation "Secure Coding and Development Guidelines (part of CLASP)" (Tobias)
• 10. (15:45 - 16:00) Wrap-up and outlook

Chapter Meeting on September 7th 2007 in Frankfurt/Main

After two years of absence the German Chapter has been restarted. The chapter meeting was on September 7th 2007, 15:00 - 18:00.

This first chapter meeting had as its main goal the re-initiation of the German chapter and to start work on projects. Talks and presentations are secondary and will receive more focus at subsequent meetings.

Read meeting notes/minutes here

comments

If you want to participate in the work of the German OWASP chapter or offer to submit work to it and cannot attend the meeting, please contact Tobias or send an email to our chapter mailing list (now working!).

Press Relations

Press Relations of the OWASP German Chapter are currently directed exclusively towards the local press. We therefore do not provide english translations. .

• Press relations

Local News

• 10 September 2008: Best Practices: Web Application Firewalls wiki pages
• 17 July 2008: OWASP Germany released Best Practices: Use of Web Application Firewalls (English)
• 18 March 2008: OWASP Germany released Best Practices: Einsatz von Web Application Firewalls (German)
• 07 September 2007: Chapter meeting in Frankfurt
• 18 July 2007: scheduled chapter meeting on September 7th 2007
• 02 Mar 2007: German Federal Office for Information Security aka Bundesamt für Sicherheit in der Informationstechnik (BSI) has released the Indigo Security (engl: 'Indigo Security').

• 23 Feb 2007: German Federal Office for Information Security aka Bundesamt für Sicherheit in der Informationstechnik (BSI) has released the Apache Tomcat Sicherheitsuntersuchung (engl: 'Apache Tomcat Security Assessment').

• 06 Sept 2006: German Federal Office for Information Security aka Bundesamt für Sicherheit in der Informationstechnik (BSI) has released the Maßnahmenkatalog und Best Practices für die Sicherheit von Webanwendungen (engl: 'Measures and Best Practices for Web Application Security').

OWASP Moves to MediaWiki Portal - 11:05, 20 May 2006 (EDT)

OWASP is pleased to announce the arrival of OWASP 2.0!

OWASP 2.0 utilizes the MediaWiki portal to manage and provide the latest OWASP related information. Enjoy!