This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Toronto

From OWASP
Revision as of 21:06, 2 January 2008 by Nbhalla (talk | contribs) (Upcoming 22nd January 2008 Meeting)

Jump to: navigation, search

OWASP Toronto

Welcome to the Toronto chapter homepage. The chapter leader is Nish Bhalla


Participation

OWASP Foundation (Overview Slides) is a professional association of global members and is open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.

Sponsorship/Membership

Btn donate SM.gif to this chapter or become a local chapter supporter. Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member? Join Now BlueIcon.JPG


The mailing list archive can be accessed from here.

Upcoming Meetings

Feb 2008 Shannon O'Keefe from SSHA will be speaking on Identity Management

March 2008 Tyler Reguly from nCircle will be speaking on 'Building Your Own Web Spider - Thoughts, Considerations and Problems' (He recently presented this at SecTor.

April 2008 Piyush Chug Security Consultant

May 2008 Jason Lam SANS instructor on Web Application security will be speaking on "Web Application Security"

June 2008 We have a potential Security Consultant speaking in June too.

July - Dec 2008

We are looking for speakers, if you are interested in speaking on security topics please email Nish Bhalla

Upcoming 22nd January 2008 Meeting

The next chapter meeting will be held on Jan 22nd at 20the floor, 79 Wellington Street West, Toronto, ON M5K 1B9 . Directions to the meetings

Topic:
Modern Trends in Network Fingerprinting


Description:

Speaker BIO: Jay Graver and Ryan Poppa are Lead Engineers at nCircle Network Security. They specialize in interrogating Applications and Services over the network. Their years of experience have been focused on the non invasive detection of vulnerabilities.

Current Areas of research include; HTTP server analysis, graph theory, SSL library fingerprinting and unobfuscation techniques.

Based in Toronto Ontario, they hold degrees from University of Guelph and the University of Waterloo. You can find their latest posts at blog.glaciertech.ca & numerophobe.com


OWASP Toronto chapter meetings are open to the public RSVP is requested by sending an email

Meeting, June 21st 2007

The next chapter meeting will be held on June 21st at 20the floor, 79 Wellington Street West, Toronto, ON M5K 1B9 .


Topic:
Application Security At the Enterprise Level


Description:

The benefit of conducting and managing business via the Internet is immeasurable. However, the risk and threat of cyber attacks is real. This often results in direct financial and reputation loss. Organizations traditionally concentrate on general protection measures such as encryption, access control, and network security. However, these general countermeasures have proven to be inadequate in protecting Internet applications.

The cost of securing a flawed application is far more expensive than building it securely the first time around. To remain competitive, organizations must understand and mitigate software security risks when they acquire, outsource, implement or host applications. This pressure stems from customer, business partner, and employee expectations of trust, as well as stringent security and privacy regulations.

This session will highlight the elements of secure software, and explain how organizations can effectively acquire, integrate, outsource, develop, assess, and manage secure software by:


• Aligning software security with business objectives and enterprise security policies
• Identifying threats and mitigating controls
• Integrating security with enterprise processes such as SDLC, PMLC, and quality assurance
• Assessing the security posture of enterprise applications
• Managing application security risks within the enterprise
• Implementing privacy compliant software


Presenter :

Reza Kopaee is a senior manager in Deloitte’s Enterprise Risk services. He leads the web application security and quality practice. Reza assists organizations across various industries in reviewing and building security capabilities into their critical software and the supporting processes.

Sponsorship

Many thanks to Deloitte & Touche LLP. for sponsoring the location and food for these meetings.


Speakers

We are always looking for speakers to present on their topic of choice. If you are interested please contact Nish Bhalla


OWASP Toronto Chapter Committee

The OWASP Toronto Chapter has formed a committee which would help with direction of the chapter. Deloitte & Touches' Application Security Group and Security Compass's Professional Services Group are helping lead this initiative. We are looking for additional members to expand our chapter.


Current Committe Members

Nish Bhalla (Chapter Leader)
Reza Kopaee

Meetings

Everyone is welcome to join us at our chapter meetings. These meetings are held every Second Wednesday of the month. We meet at the conference room at Deloitte & Touche. Beverages and snacks are provided.


Address and Directions to the meeting are:

20th floor, the TLC Room (signs will be provided on the floor)
TD Centre, TD Waterhouse Tower
79 Wellington Rd. W.
Toronto



Directions to the meetings

OWASP Toronto chapter meetings are open to the public RSVP is requested by sending an email

Past Presentations For Download

The past presentations are avaiable for download from here. If you have any comments on the presentations please send them to us.

Basic Web Application Testing Methodology by Nish Bhalla Security Compass

Basic Web Services Security by Rohit Sethi Security Compass

Authentication Security by Hui Zhu

Identity Management Basics by Derek Browne