Revision as of 19:00, 7 March 2011

Meeting Details

Dial-In: 1-866-534-4754 (code: 192341)

When: Monday, March 7th @ 21:00 GMT (based on member availability)

Agenda

• Confirmation of new committee members (all)
• Board update (Jason)
• Proposed 2011 Budget (Jason)
• Project Hosting Update (Chris)
• Project Lifecycle Process Update (Justin/Brad)
• Current Project Status Overview (Paulo)
  • Number of new projects since previous announcement
    • OWASP Application Security Skills Assessment
    • OWASP Common Vulnerability List (replaced by Common Numbering Project)
    • Common Numbering Project
    • OWASP HTTP Post Tool
    • OWASP Forward Exploit Tool Project
    • OWASP Java XML Templates Project
    • OWASP ASIDE Project
    • OWASP Secure Password Project
    • OWASP Secure the Flag Competition Project
    • OWASP Security Baseline Project
    • OWASP ESAPI Objective - C Project
    • OWASP Academy Portal Project
    • OWASP Exams Project
    • OWASP Portuguese Language Project
    • OWASP Browser Security ACID Tests Project
    • OWASP Web Browser Testing System Project
    • OWASP Myth Breakers Project
    • Software Security Assurance Process
    • OWASP Web Service Attack Community Project
  • Number of new releases set up since previous announcement
    • ModSecurity 2.0.10
  • Number of adopted projects since previous announcement
    • OWASP LAPSE Project
    • OWASP Java Project
  • Number of reviewed releases since previous announcement
    • OWASP Zed Attack Proxy Project - Release ZAP 1.1.0
  • Projects ready to be set up
    • Enhancing Security Options Framework (ESOP Framework) - Amber Marfatia
    • Mantra -Security Framework to OWASP, Yashartha Chaturvedi
    • German Language Project, German Chapter
    • Java HTML Sanitization, Jim Manico
    • Java Encoder Project, Jim Manico
  • Projects' Releases requiring review
    • http://www.owasp.org/index.php/OWASP_Secure_Web_Application_Framework_Manifesto,
    • http://www.owasp.org/index.php/GPC_Project_Assessment/OWASP_Vicnum,
    • http://www.owasp.org/index.php/GPC_Project_Assessment/OWASP_Content_Validation_using_Java_Annotations
    • http://www.owasp.org/index.php/GPC_Project_Assessment/OWASP_Top_Ten
    • http://www.owasp.org/index.php/Category:OWASP_AppSensor_Project,
    • http://www.owasp.org/index.php/OWASP_O2_Platform,
    • http://www.owasp.org/index.php/Category:OWASP_Webslayer_Project,
    • http://www.owasp.org/index.php/Category:OWASP_EnDe#tab=Project_Details,
    • http://www.owasp.org/index.php/Projects/OWASP_Fiddler_Addons_for_Security_Testing_Project,
    • http://www.owasp.org/index.php/OWASP_HTTP_Post_Tool,
    • http://www.owasp.org/index.php/Category:Software_Assurance_Maturity_Model
    • http://www.owasp.org/index.php/Projects/OWASP_Zed_Attack_Proxy_Project/Releases/ZAP_1.2.0,
    • OWASP Reviews Dashboard
  • Projects with new leader/need to be re-set up
    • OWASP .NET Project - Daniel Brzozowski
    • WebScarab-NG - Daniel Brzozowski
    • College Chapter Program Project - Martin Knobloch
  • Project in need of reorganization
    • ESAPI
    • CSRF ecosystem, Sheridan
  • Projects in adoption process
    • OWASP Application Security Assessment Standards Project | Volunteers: Bithika & Matteo Michelini (waiting for data)
  • Other tasks to do
    • Top 10/Upload redesigned content and new covers (Lulu)
  • Other issues
    • How shoud we label projects like OWASP Live CD 2007 Project? Deprecated? Inactive? or else?
    • What should we do with ESAPI PHP? Let's put in on for adoption?
  • Outstanding requests from project leaders
    • None except the above