Difference between revisions of "Boulder"

Revision as of 20:12, 26 July 2007

OWASP Boulder

Welcome to the Boulder chapter homepage. The chapter leader is Andy Lewis

Participation

OWASP Foundation (Overview Slides) is a professional association of global members and is open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.

Sponsorship/Membership

to this chapter or become a local chapter supporter. Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member?

Local News

Boulder OWASP News - July 26th, 2007

Al B., Lance R., and Andy L. are getting speakers, places, and sponsors lined up for Sep-Nov. The gameplan is to have meetings on the 3rd Thursday of each month HOWEVER the FIRST meeting's timing is being scheduled around a very special speaker (hint: what's the opposite of Black Hat?). The goal is very simple: understand how one of the OWASP Top 10 is a REAL PROBLEM and (more importantly) understand how to CODE BETTER and/or TEST BETTER.

Still need a place that can seat 30+ for the first meeting the 3rd or 4th week of Sept. Still need a sponsor for dinner.

Likely schedule:

6-6:30 eat, socialize 6:30-6:35 chapter business 6:35 - introduce speaker

Each speaker will be encouraged to cover:

- demonstration of the threat ( "look!  I got EVERYONE'S credit card #!")
- overview/sample of vulnerable code, preferably in PHP, Java, or .Net env.
- some details regarding how to correct the code
- some thoughts as to how to test for the problem and/or "immunize" against it during a typical SDLC
- additional tools and references

7:35'ish - Q & A after Q & A - adjourn to less formal environment

Thanks! Andy

PS if you're going to Blackhat/DefCon be sure to catch David Byrne's presentation regarding anti-DNS pinning!

Boulder OWASP News - June 21st, 2007

While we're getting our act together with the Boulder Chapter I encourage you to attend tonight's Denver OWASP meeting.

http://www.owasp.org/index.php/Denver

At this time Boulder OWASP is looking for help with the following:

1. Meeting place

2. Corporate sponsor(s)

3. Topics of interest.

Thanks! Andy

OWASP Moves to MediaWiki Portal - 11:36, 20 May 2006 (EDT)

OWASP is pleased to announce the arrival of OWASP 2.0!

OWASP 2.0 utilizes the MediaWiki portal to manage and provide the latest OWASP related information. Enjoy!