Virginia

OWASP Washington VA

Welcome to the Washington VA chapter homepage. The chapter leader is Stan Wisseman

Participation

OWASP Foundation (Overview Slides) is a professional association of global members and is open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.

Sponsorship/Membership

to this chapter or become a local chapter supporter. Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member?

Local News

We were blessed with a couple of good presentations from Cigital on 15 February:

"Add & Edit Cookies Firefox plugin", Ben Walther from Cigital. This plugin allows someone to see what cookies are set in their browser, modify them, delete them, etc. http://benwalther.wordpress.com/2006/11/16/have-your-cookies-and-eat-them-too/

"A Closer Look at Identity Theft Through Peer-to-Peer Networks", Paco Hope from Cigital. File:Identity Theft P2P Networks.pdf

Meeting Times and Location

Our next meeting will be on 15 February, at 6pm. We are moving the meeting to the 3rd Thursday since the 2nd week of February is the RSA conference. The topics will be:

"Add & Edit Cookies Firefox plugin", Ben Walther from Cigital. This plugin allows someone to see what cookies are set in their browser, modify them, delete them, etc. Ben will demonstrate the plugin and cover some common session-related security issues like session stealing, session fixation, and tampering with cookies.

"A Closer Look at Identity Theft Through Peer-to-Peer Networks", Paco Hope from Cigital. Paco will raise awareness of: (a) how p2p networks can disclose information you don't intend, and what that means to you or your employer or your client; (b) how p2p networks can threaten your web app (yep, ties it right back to OWASP); (c) what you should do, if you use p2p networks at all.

We will meet at the Booz Allen building in Herndon in room 2208. You may park in any visitor or non-reserved parking spaces. Enter the building and check in with Booz Allen security at the Lobby Reception Desk and go to the 2nd floor.

Pizza will be provided for a small fee.

---

8 March will have:

TBD topic, Adam Vincent from Layer 7. Prior to joining Layer 7, Adam testing XML firewalls at Mitre and has extensive experience with these types of products.

TBD topic, Bruce Potter from Booz Allen.

Directions

13200 Woodland Park Road Herndon, VA 20171

From Tyson's Corner:

1. Take LEESBURG PIKE / VA-7 WEST 2. Merge onto VA-267 WEST / DULLES TOLL ROAD (Portions Toll) 3. Take the VA-657 Exit (Exit Number 10 towards Herndon / Chantilly) 4. Take the ramp toward CHANTILLY 5. Turn Left onto CENTERVILLE ROAD (at end of ramp) 6. Turn Left onto WOODLAND PARK ROAD (less than 1⁄2 mile) 7. End at 13200 WOODLAND PARK ROAD