WASPY Awards 2015

Web Application Security People of the Year Awards 2015

Timeline

June 19 - Call for Nominees Opens! Submit your Nominee.
June 29 & July 13 - Email reminders will be sent
July 26 - Paid Membership Deadline - Not Sure if You Are a Current Member? Click Here
July 29 - Call for Nominees Closes Submit your Nominee. - CLOSED
July 30 - Announcement of Nominees Per Category
August 6- Deadline For Nominee Profile Picture and Bio to be Submitted
Aug 11 - Voting Opens
Aug 31 - Voting Closes
Sept 1 - Winners are Notified
Sept 1 - Announcement of Winners
Sept 24 - Award Ceremony at AppSecUSA 2015 12:30pm during lunch in the Atrium in San Francisco, CA

Rules

1. Board members may not be nominated
2. Employees & Contractors may not be nominated
3. You MUST be a paid or honorary member to vote. Your membership need to be on file by July 26, 2015.
4. All nominees will remain anonymous until July 30, 2015
5. Anyone can nominate an "unsung hero" who has contributed in some way to OWASP who they feel best fits each category description
6. Only one person per category may be nominated.
Remember the purpose of these awards is to recognize the "unsung hero's" out there that are barely recognized for their contributions to the OWASP Foundation.

Categories

1. Open/Leading - Everything at OWASP is radically transparent – from our finances to our code. This award goes to a member of the OWASP community who has supported the OWASP mission of transparency through their influence, management, and leadership in the community. This might be a chapter or project leader or may be someone who has worked within the community.
2. Integrity/Learning - OWASP is an honest and truthful, vendor neutral, global community. This award goes to an individual who recognizes the benefits of the power of the collective community within OWASP, who challenges the status quo, and generates an excitement in the learning community.
3. Innovation/Sharing - OWASP encourages and supports innovation and experiments for solutions to software security challenges. This award goes to an individual who has inspired and encouraged others in the arena of software security with innovative and cutting edge solutions to software security challenges.
4. Global/Growing - Around the world, OWASP encourages and supports innovation and experiments for solutions to software security challenges. This award goes to an individual who truly represents the OWASP Global scope and recognizes the importance of growth. The nominee reaches out beyond the OWASP circle to raise awareness of software security in locations outside of the OWASP comfort zone.

Purpose of the Awards and the Nominees

Each year there are many individuals who do amazing work, dedicating countless hours to share, improve, and strengthen the OWASP mission. Some of these individuals are well known to the community while others are not.

The purpose of these awards is to bring recognition to those who "fly under the radar". These are the individuals who work everyday to improve the cyber-security world, yet seem to go unrecognized.

This year, community members were able to nominate 1 individual per category (there are 4 categories) from each of our 7 regions. - who you feel best fits these descriptions so that, as a community, we can recognize them for their contributions. We are tying in the WASPY Awards to help identify and recognize individuals who demonstrate our core values and annual report theme of Leading - Learning - Sharing - Growing. We value your input and consideration for nominations in the categories below.

Categories:

• Open/Leading - Everything at OWASP is radically transparent – from our finances to our code. This award goes to a member of the OWASP community who has supported the OWASP mission of transparency through their influence, management, and leadership in the community. This might be a chapter or project leader or may be someone who has worked within the community.

Name	Region	Citation
Johanna Curiel	Caribbean	Johanna pretty much leads the project task force. She puts so much time and effort into her role that some people actually think she is a full time OWASP employee, but she is actually just a volunteer. She has been working as project review lead for over a year and positively changed projects in positive ways.
Eoin Keary	Europe	Eoin has in the last 10 years: Lead the OWASP testing guide, Lead the OWASP code review guide, Founded the Irish chapter of OWASP with over 300 on the mail list. Eoin was the first board member to be democratically re-elected. He served two terms. Eoin has trained 100s of developers for free at many events including Lascon, RSA (USA), RSA (EU), OWASP EU tour, OWASP Dublin (3 times). Eoin open-sourced his training material in an editable format for other people to develop their training classes. Eoin has contributed to the OWASP CISO guide and was the original author of the OWASP CISO survey. He also started the OWASP live cd.
Konstantinos Papapanagiotou	Europe	Kostas has been pivotal in the success of the Google Summer of Code initiatives at OWASP. He led the mentors and students groups growing our participation from 4 students to 16 in 2014. He also helped this year in putting together a proposal for the first Sumer Code Sprint run entirely by OWASP which attracted 8 students from around the world to work on various projects.
Seba Deleersnyder	Europe	Seba has supported the OWASP mission through his activity: OpenSAMM project, OpenSAMM Summit, organizing events and helping chapter leaders in Europe with questions or issues regarding funds or sponsorships that needed to be transferred to the Europe account. I believe he is a great candidate for this category.
Ian Williams	Europe	Ian has been a devoted and dedicated proponent of OWASP and specifically the OWASP Birmingham chapter. This chapter started with only 6 attendees yet at its last meeting this had grown to a good 50. He has on a number of occasions put his hand in his own pocket to fund a chapter meeting and never complains about all the additional hours and work that he has to do to make these events the success they are. I am honored to be a co leader of this chapter with Ian (although Ian is without doubt more of a leader than me)
Mateo Martinez	Latin America	Mateo is the OWASP Uruguay chapter leader and one of the most active leaders in Latin America. His enthusiasm, ideas and vision for OWASP in the region are inspiring for other leaders. He has been actively involved organising educational activities with universities in Uruguay via chapter events and the Latam Tour. His local chapter team is a role model to follow where all responsibilities are shared among members and everyone has an equal voice.
Richard Greenberg	United States	Brought awareness and the security disciplines together and demonstrated the power of OWASP to the Southern California area.
Kyle Smith	United States	Kyle is finishing up his last year as OWASP Austin Chapter leader. He has proven to be a strong leader and has worked very hard to provide opportunities for learning and growth to our chapter.
Jeremiah Grossman	United States	Jeremiah leads WhiteHat Security and is extremely passionate / dedicated to web application security.

• Integrity/Learning - OWASP is an honest and truthful, vendor neutral, global community. This award goes to an individual who recognizes the benefits of the power of the collective community within OWASP, who challenges the status quo, and generates an excitement in the learning community.

Name	Region	Citation
John Patrick Lita	Asia/Pacific/Middle East	He has scheduled several large sharing events that included a wide varied of participants. And could deliver the OWASP message across boundaries.
Spyros Gasteratos	Europe	Spyros is heavily involved in the academic community and is always interested to collaborate in OWASP activities. He leads the Hackademic project which helps improve the knowledge of web application security and led the Winter Code Sprint during 2014 that brought students to work on OWASP projects during the winter recess.
OWASP Student Chapters Program Leaders (Antonis Manaras & Mateo Martinez)	Europe	I believe they did a great job in extending application security into colleges and universities. Now, OWASP has Student Chapters all over the world and this program helps them, providing a platform to discuss and learn about application security.
Pedro Peralta	United States	Pedro demonstrates character as a stand up guy for many of the youth in information security who are trying to get into the field which is already challenging enough as it is. Pedro's exceptional leadership in initiatives to reach out to students of all levels of IT and Security is tremendous in that he has started security groups to challenge students to gather, and most importantly develop bonds amongst other members which is the foundation of a community. Pedro has offered ongoing guidance and mentorship to many who asked this of him, thus going above and beyond, His ability to communicate to all levels of people throughout the walks of life shows he is worldly and mature enough show others paths to success.
Johanna Curiel	Caribbean

• Innovation/Sharing - OWASP encourages and supports innovation and experiments for solutions to software security challenges. This award goes to an individual who has inspired and encouraged others in the arena of software security with innovative and cutting edge solutions to software security challenges.

Name	Region	Citation
Munir Njiru	Africa
Mario Heiderich	Europe	For his excellent work on DOMPurify. This is not an OWASP project, but it is open source and free, and thus I think OWASP should recognise his effort.
Abraham Aranguren	Europe	Abraham is the OWTF project leader and is always full of energy when it comes to innovation and knowledge sharing among students and peers. He goes into great lengths to recognise the work from the volunteers.
Mark Denihan	Europe	Mark leads the security shepherd project. He has devoted a lot of time and effort both developing the project and promoting security awareness via countless talks and training events.
Glenn & Riccardo Ten Cate	Europe	The brothers Glenn and Riccardo Ten Cate have developed what the industry is looking for and what is to the very core value of OWASP, the Security Knowledge Framework (short SKF): https://www.owasp.org/index.php/OWASP_Security_Knowledge_Framework. This, they have done not being aware of OWASP back than, in their spare time, just as they saw the need of it. When they heard about OWASP, they did not hesitate, they donated their work (the fully working framework), linked it to the ASVS (where they came up and submitted +30 new controls!). The SKF project is fully working and proven. Glenn and Riccardo did share not only the framework, but all documentation, tutorials, all they have. Why? As they say themselves, because! With the SKF, Riccardo and Glenn have created what the community has been looking for ever since. A tool that teaches developers in understanding security problems and helps to solve those. Not with a static guide, but with a dynamic and to be "tailored to their needs" dynamic application. In pre-development, developers can choose the functionality required for the application they work on and get solutions with extended code examples (already in PHP and C#). In post-develpment, the develpers find (ASVS linked) requirements to verify them to be implemented to mitigate the risks. This is one of the flag ship projects to come!
Fiona Collins	Europe	From giving talks and classes at APPSECEU and promoting appsec throughout Ireland, She has done a great job, and with Cork, having a small chapter she has grown it massively. especially with the budget, the organisation has been fantastic. Just look at the OWASP page as an example. https://www.owasp.org/index.php/Cork
Diego Ademir	Latin America	Diego is the Bucaramanga chapter leader in Colombia and works at the Universidad Pontificia Bolivariana. He always helps to spread awareness about OWASP in the Latin American region by broadcasting the Latam Tour talks through the regional educational network RENATA.
Jeremy Long	United States	For his continued work on OWASP Dependency Check Jeremy is the Dependency Check project leader and has done an amazing job at addressing a core issue in today's web applications. His project is highly regarded among the security industry.

• Global/Growing - Around the world, OWASP encourages and supports innovation and experiments for solutions to software security challenges. This award goes to an individual who truly represents the OWASP Global scope and recognizes the importance of growth. The nominee reaches out beyond the OWASP circle to raise awareness of software security in locations outside of the OWASP comfort zone.

Name	Region	Citation
Munir Njiru	Africa
John Patrick Lita	Asia/Pacific/Middle East	John Patrick Lita has organised and delivered a whole range of outreach activities that make him a shining example for all chapters.
Mohd Fazil Azran	Asia/Pacific/Middle East	He has done a good job at running the OWASP Malaysia chapter, with outreach through local government and joint events with over a hundred participants. Well done!
Seba Deleersnyder	Europe	Seba is at the forefront of the OWASP community bringing chapters together and organising activities such as the OpenSAMM Summit in Dublin which brought leaders from various industries and chapters together. He is also actively involved in the OWASP pan-european conference to be held in Rome in 2016.
Mark Denihan	Europe	Mark leads the security shepherd project. He has devoted a lot of time and effort both developing the project and promoting security awareness via countless talks and training events.
Jason Alexander	Europe	Jason has been instrumental in starting most of the recent UK OWASP Chapters. He started off with the Leeds chapter, then helped start the Manchester, Birmingham and Bristol ones, while also supporting the Newcastle and East Midlands chapters! No idea how many new members he's brought to OWASP, but through his efforts a lot more UK folk will have been able to attend local OWASP meetings.
John Vargas	Latin America	John Vargas is one of the key players in OWASP Latin American community. He is the Peru chapter leader and is always willing to help a fellow volunteer. Also, he is actively involved each year in the logistics of the regional Latam Tour and this year he invited the OAS (Organisation of American States) to deliver a keynote at his conference.
Pedro Peralta	United States	Pedro demonstrates character as a stand up guy for many of the youth in information security who are trying to get into the field which is already challenging enough as it is. Pedro's exceptional leadership in initiatives to reach out to students of all levels of IT and Security is tremendous in that he has started security groups to challenge students to gather, and most importantly develop bonds amongst other members which is the foundation of a community. Pedro has offered ongoing guidance and mentorship to many who asked this of him, thus going above and beyond, His ability to communicate to all levels of people throughout the walks of life shows he is worldly and mature enough show others paths to success.
Jeff Kowlaski	United States	Jeff Kowalski stepped forward to sponsor the Denver OWASP Chapter, changing it from a 2-times-per-year sparsely attended chapter to a once-per-quarter 75+ standing room only event. Jeff personally championed the local sponsorship opportunity within Solutions II, and the result is that Solutions II has paid for a nice location and a catered dinner at least once quarterly. Furthermore, because Jeff is well-connected within the Denver ITSec community, he has been able to encourage leaders of some of Denver's larger organizations to sponsor contests such as "Bring a Developer to OWASP" so that Before Jeff got involved, the Denver Chapter's future wasn't clear. Attendance was down and morale was pretty low. Jeff got involved and the Chapter is experiencing record attendance and great word-of-mouth marketing.
Jerry Hoff	United States	Jerry is an individual who is passionate about the OWASP community. His active involvement at various levels ranging from projects to chapter activities and willingness to help fellow volunteers is second to none. In addition, he looks at the bigger picture on how to position OWASP as a global reference in application security.

Honorable Mention Although they do not qualify per the 2015 WASPY Rules, Kate Hartmann and Josh Sokol were also nominated.

Kate was nominated in the Open/Leading category. "Kate is always the person I look to for advice. She is always obliging and happy to help with all queries relationship my to OWASP and its members. The Dublin-Ireland chapter has succeeded based on the large amount of knowledge she possesses."

Josh was nominated in the Global/Growing category. "Josh has dedicated much of his time to seeing OWASP and OWASP projects grow. From serving as a local Chapter leader, to founding LASCON, to serving on international OWASP Boards, Josh has proven worthy of such an honor."

Results

Cumulative Turnout: 425 (19.3%) of 2199 electors voted in this election.
Average Turnout: 20.9 electors voted per day.

Open/Leading Category for the European Region
Eoin Keary 146 (45.1%)
Ian Williams 62 (19.1%)
Seba Deleersnyder 60 (18.5%)
Konstantinos Papapanagiotou 56 (17.3%)

VOTER SUMMARY
Total 425
Abstain 101 (23.8%)

Open/Leading Category for the United States Region
Jeremiah Grossman 140 (45.5%)
Kyle Smith 95 (30.8%)
Richard Greenberg 73 (23.7%)

VOTER SUMMARY
Total 425
Abstain 117 (27.5%)

Open/Leading Category for the Latin American Region
Mateo Martinez 260 (100.0%)

VOTER SUMMARY
Total 425
Abstain 165 (38.8%)

Open/Leading Category for the Caribbean Region
Johanna Curiel 254 (100.0%)

VOTER SUMMARY
Total 425
Abstain 171 (40.2%)

Integrity/Learning Category for the European Region
OWASP Student Chapters Program Leaders (Antonis Manaras & Mateo Martinez) 177 (64.8%)
Spyros Gasteratos 96 (35.2%)

VOTER SUMMARY
Total 425
Abstain 152 (35.8%)

Integrity/Learning Category for the United States Region
Pedro Peralta 233 (100.0%)

VOTER SUMMARY
Total 425
Abstain 192 (45.2%)

Integrity/Learning Category for the Asia/Pacific/Middle East Region
John Patrick Lita 232 (100.0%)

VOTER SUMMARY
Total 425
Abstain 193 (45.4%)

Integrity/Learning Category for the Caribbean Region
Johanna Curiel 235 (100.0%)

VOTER SUMMARY
Total 425
Abstain 190 (44.7%)

Innovation/Sharing Category for the Africa Region
Munir Njiru 215 (100.0%)

VOTER SUMMARY
Total 425
Abstain 210 (49.4%)

Innovation/Sharing Category for the European Region
Fiona Collins 110 (37.9%)
Glenn & Riccardo ten Cate 62 (21.4%)
Mario Heiderich 60 (20.7%)
Abraham Aranguren 29 (10.0%)
Mark Denihan 29 (10.0%)

VOTER SUMMARY
Total 425
Abstain 135 (31.8%)

Innovation/Sharing Category for the Latin American Region
Diego Ademir 212 (100.0%)

VOTER SUMMARY
Total 425
Abstain 213 (50.1%)

Innovation/Sharing Category for the United States Region
Jeremy Long 245 (100.0%)

VOTER SUMMARY
Total 425
Abstain 180 (42.4%)

Global/Growing for the African Region
Munir Njiru 209 (100.0%)

VOTER SUMMARY
Total 425
Abstain 216 (50.8%)

Global/Growing for the Asia/Pacific/Middle East Region
John Patrick Lita 121 (52.4%)
Mohd Fazil Azran 110 (47.6%)

VOTER SUMMARY
Total 425
Abstain 194 (45.6%)

Global/Growing for the European Region
Jason Alexander 108 (41.7%)
Seba Deleersnyder 87 (33.6%)
Mark Denihan 64 (24.7%)

VOTER SUMMARY
Total 425
Abstain 166 (39.1%)

Global/Growing for the Latin American Region
John Vargas 216 (100.0%)

VOTER SUMMARY
Total 425
Abstain 209 (49.2%)

Global/Growing for the United States Region
Jerry Hoff 105 (38.2%)
Jeff Kowlaski 101 (36.7%)
Pedro Peralta 69 (25.1%)

VOTER SUMMARY
Total 425
Abstain 150 (35.3%)

Eligible Voters

Individuals who were members as of July 26, 2015 are eligible and are listed here. Please take a minute to verify your name is on the list. If you are NOT on the list and believe you should be, then you need to contact us immediately

Sponsorship Opportunities

The support from our sponsors, is what makes these awards truly successful! To learn more about how you can support these awards please see our WASPY Sponsorship Opportunities

Communication

• June 23 - OWASP Blog, Leaders & Community email list, Leaders list, Twitter, Facebook, Google+
• June 26 - Email to the Community, Board and Leaders lists, Twitter, Google+, OWASP Blog Facebook
• July 24 Twitter, Facebook, Google+, Leaders, Community & Board List. OWASP Blog.
• July 27 Twitter, Facebook, Google+, Leaders, Community & Board List OWASP Blog.
• July 29 OWSP Blog, Email to the Leaders, Community & Board List, Facebook, Google+, Twitter