Copyright © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the OWASP License. The OWASP Foundation OWASP OWASP Software Assurance Day 13th Semi-Annual Software Assurance Forum Doug Wilson Mandiant DC Chapter Lead AppSec DC Organizer 9/27/10

2 OWASP Welcome Mission Presenters Schedule Upcoming Events

3 OWASP Why are we here? Introduce OWASP (for new and for old) Guides and Policy Implementation Tools and Techniques Again, Implementation Pertinent Items to take back to the Enterprise

4 OWASP Your Presenters Doug Wilson -- MANDIANT/AppSec DC Jeff Williams -- Aspect Security/OWASP Board Dave Wichers -- Aspect Security/OWASP Board Shakeel Tufail -- Fortify Matt Tesaurao -- Trustwave/OWASP Board Jason Li -- Aspect Security

5 OWASP Schedule ✴ Now-10:30A Intro to OWASP -- Jeff Williams Top Ten and Guides -- Dave Wichers ✴ 10:30A-11:00A Break ✴ 11:00A-1:00P OpenSAMM -- Shakeel Tufail OWASP Live CD -- Matt Tesauro ✴ 1:00P-2:00P Lunch ✴ 2:00P-2:45P OWASP ESAPI -- Jeff Williams ✴ 2:45-3:15 Break ✴ 3:15-? Implementing a DISA STIG -- Jason Li Concluding Remarks -- Doug Wilson

AppSec DC 2010 Two Days of Training Two Days of Talks at the Walter E. Washington Convention Center in Washington DC appsecdc.org