Benelux Training

COURSE
Part of the BeNeLux OWASP Day 2010
Overview & Goal
Apart from OWASP's Top 10, most OWASP Projects are not widely used and understood. In most cases this is not due to lack of quality and usefulness of those Document & Tool projects, but due to a lack of understanding of where they fit in an Enterprise's security ecosystem or in the Web Application Development Life-cycle. This course aims to change that by providing a selection of mature and enterprise ready projects together with practical examples of how to use them. If you are interested in participating in the hands on portion of the course, please bring a laptop.
Date	Venue & Directions
December 1, 2010	Hogeschool Fontys Building R5 Rachelsmolen 1, 5612 AM Eindhoven, The Netherlands How to get here:
Price & Registration
This Course is FREE for OWASP Members. Registration is mandatory. If you are not an OWASP member as of yet please consider becoming one - $50/USD 12 month term for individual supporters. Register Now OWASP Membership (sign now)

COURSE'S MODULES DETAILS
Time	Module	Trainer	Presentation	Overview & Goal
10h30 (30m)	Welcome Coffee
11h00 (30m)	Guided tour of OWASP Projects	Sebastien Deleersnyder	Tour of OWASP’s projects	See details and Trainer's notes
11h30 (60m)	OWASP Top 10	Sebastien Deleersnyder	OWASP Top 10 - Issues and Remedies	See details and Trainer's notes
12h30 (30m)	Lunch Break
13h30 (45m)	Threat Risk Modeling	Martin Knobloch	Threat Modeling – how to do it	See details and Trainer's notes
14h15 (45m)	OWASP Testing Guide	Martin Knobloch	Application Security Using the Testing Guide	See details and Trainer's notes
15h00 (45m)	Web Application Firewalls (WAF) Explained	Philippe Bogaerts	Web Application Firewalls (WAF) Explained	See details and Trainer's notes
14h45 (15m)	Coffee Break
16h00 (60m)	OWASP WebGoat Project	Martin Knobloch	WebGoat - Do it Yourself - QuickStart	See details and Trainer's notes
17h00 (60m)	OWASP Software Assurance Maturity Model	Sebastien Deleersnyder	Software Assurance Maturity Model & Secure Development Lifecycle	See details and Trainer's notes