Jeff Williams OWASP Chair jeff.williams@owasp.org OWASP Overview Jeff Williams OWASP Chair jeff.williams@owasp.org

Innocent Code

OWASP’s Mission OWASP’s is dedicated to finding and fighting the causes of insecure software

The Market for Lemons http://en.wikipedia.org/wiki/The_Market_for_Lemons

Widespread lack of understanding OWASP Goals Widespread lack of understanding Establish application security knowledgebase Time lag for securing new technologies Constructive security research Assist companies to produce secure code Process, tools, guidance, standards

MediaWiki Community platform Anyone can create an account and edit Strong review process

New Projects Honeycomb project Java security project underway Ajax project – just starting with new leader Metrics project – new leader Validation project – new leader Testing guide II – alpha draft available Code review project – alpha draft available Summer of Code?

Project Honeycomb Principle Principle Principle Attack Attack Attack Vulnerability Threat Attack Countermeasure Vulnerability Countermeasure Countermeasure Countermeasure

OWASP AppSec Conference Series Mike Howard is going to do the keynote at OWASP AppSec Seattle 2006