Minneapolis St Paul

OWASP Minneapolis/St. Paul

Welcome to the Minneapolis/St. Paul chapter homepage. The chapter leader is Robert Sullivan

Participation

OWASP Foundation (Overview Slides) is a professional association of global members and is open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.

Sponsorship/Membership

to this chapter or become a local chapter supporter. Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member?

Local News

Next meeting: Tuesday, August 8, 6:00pm at Metro State University, MPLS

Agenda June 20

6:00pm - Food, Introduction and optional sign-in for CISSP credits.

6:10pm - Metropolitan State University programs

6:15pm - Open Source Security Testing Tools, (Tim McGuire, see below)

7:00pm - Fortify, a commercial source code analysis tool (Joe Teff, see below)

7:30pm - Report on AppSec Europe 2006 (Gunnar Peterson)

7:45pm - What's new in WebGoat 4.0 (Bob Sullivan)

Location:

Metro State,Management Education Center, 1300 Harmon Place June 20th.Room M.1500 or M.1700 look for the event titled: "Open Web Security Meeting"

Directions:

Directions:[1]

Link to building location: [2]

Rooms are on first floor of the Management Education Center. They are really nice rooms with very comfortable chairs. Street parking is free after 6 pm. If you get there early it's just a $.25 for a half hour. There is also a ramp which is $5.00.

Food:

Lorna will bring pizza and pop.

Open Source Tools Presentation

Tim McGuire – Consultant
Will present: Selected open source web application security testing tools.

Tim will demonstrate these tools:

1. Using Gforge, a fat target for security scanning. It uses CVS module, file uploads, email and SOAP.
2. Using Wikto, a Web Server Assesment Tool
3. Using and customizing WSFuzzer, a penetration testing tool that audits HTTP based SOAP targets.
4. Using Oedipus, a web application scanner written in Ruby.
5. Using and customizing Rats, a source code scanner.
6. Using and customizing spike proxy, a HTTP proxy for finding security flaws in web sites.

Fortify, a commercial source code analysis tool

Joe Teff, Wells Fargo

Fortify Source Code Analysis Suite is a set of industry-proven tools that enables you to find, track, and fix security vulnerabilities in your software applications. Fortify is built to work with your development and audit tools and processes. Joe will demonstrate how to use the tool to find source code vulnerabilities.

Thanks to the folks at Metropolitan State U for the room and Integral Business solutions for the food.