The OWASP Foundation OWASP BeNeLux Day 2012 Welcome! Bart De Win / Sebastien Deleersnyder/ Lieven Desmet/ David Mathy, OWASP Belgium Martin Knobloch / Ferdinand Vroom, OWASP Netherlands Jocelyn Aubert / Andre Adelsbach/ Thierry Zoller, OWASP Luxembourg Steven van der Baan, OWASP CTF Project #owaspbnl12

2 Full Program! Strict timing! we’ll try

kuleuven-guest 3

Capture the Flag! Do you like puzzles? Do you like challenges? Are you a hacker? 4

Thank you!

We need your Feedback! 6

OWASP On the road to nov, BeNeLux

Who is OWASP?

OWASP's DNA

OWASP by the numbers

88+ Government & Industry Citations!

30,000+ participants mailing lists

250,000+ unique visitors per month

800,000+ page views (per month)

15,000+ downloads per month

2081 Members Individual Paid & Honorary Memberships

193+ Active Chapters

$591, Budget for 2012

113+ Active Projects

55+ Paid Corporate Memberships

53+ Academic Supporters

4 Global AppSec Conferences per year

11 Years of community service

3 Full-Time Employees

Kate Hartmann Operations Director Improving Foundation, Committee, Operational Governance Coordinating Travel Programs Formulating and Executing Committee and Foundation Budgets Establishing OWASP EU Developing HR Policies Improving Membership Benefits and Process Initiating Global Training Program Increasing University Participation Improving Quarterly Newsletter

Sarah Baso Conference Director Liaise between Conferences Committee, Board, and Staff regarding conference finances, logistical issues, and potential opportunities Facilitate relationships between OWASP volunteers and OWASP tasks Identify and Manage community outreach opportunities Develop standardize processes for conference planners Maintain all historical information conferences Attends Conferences to provide logistical on site support Work with Event planners closely to educate them on budgeting, outreach, planning, and other areas of events to continuously raise the financial stability and quality of OWASP

Sarah Baso Conference Director Collaborate to identify and secure conference sponsorships with: o Work with Membership and Business Liaison (Kelly) Co-develop and implement marketing strategy for the foundation. o Work with outside marketing firm and owasp community Coordinate ordering and distribution of OWASP merchandise globally Draft contracts with third parties for handling finances and logistics related to international events.

Samantha Groves Project Manager Manages OWASP's 113+ Active Projects. o Project Support, Project Review, and New project setup o Maintains archive of OWASP's 108 Inactive Projects Design and development of project processes Creating the OWASP Project's communications portal Development of the OWASP Project Lifecycle and Processes Development of OWASP Projects Marketing Standard Offerings Identifying, writing, and submitting grant funding proposals. o $25K raised for OWASP Projects in 2012 o Thank you to Eoin Keary, Kate Hartman, and all who helped raise funds.

Samantha Groves Project Manager Manages the Open Source Showcase (OSS) Develop the showcase with staff and volunteers Bring the OSS to every AppSec Global Conference in 2013.

2 Part-Time Employees

Alison Shrader OWASP Accounting Paying all OWASP bills Invoicing for Accounts Receivable Reconciling all accounts monthly Posting monthly financials for Board Meetings Bookkeeping for all local chapters Bookkeeping for all OWASP EU Donation Scoreboard

Kelly Santalucia OWASP Membership Responsible for committee meeting minutes Follow up with committee members o Committee deliverables and initiatives o Editing and updating committee wiki page o Editing and proofing committee documents Facilitating meetings, calls, and working relationships Improving integrity of Membership database Other various administrative tasks as assigned by Committee Chair and/or Operations Director

Kelly Santalucia OWASP Membership Establishes and maintains a close relationship with Corporate Members Works with other non-for profit organizations to form an affiliate partnership with to collaborate on initiatives of mutual concern Manage all OWASP memberships Works closely with the GMC in running the 2012 Board Election Head of the first ever 2012 WASPY Award

NEWS Extra! Extra! Read all about it.

2012 Strategic Goals

2012 Project Re-Boot OWASP Application Security Guide For CISOs - Selected for Reboot OWASP Development Guide - Selected for Reboot Zed Attack Proxy - Selected for Reboot OWASP WebGoat OWASP AppSensor OWASP Mobile Project - Selected for Reboot OWASP Portuguese Language Project OWASP_Application_Testing_guide_v4 OWASP ESAPI OWASP Eliminate Vulnerable Code Project OWASP_Code_Review_Guide_Reboot

2012 Foundation Accomplishments Pushed Association Strategic Goals 2012: o Build the OWASP platform o Expand communication channels o Grow the OWASP community o Financial stability 2012 Foundation Global Budget Aligned Committee Goals Website Migrated to "The Cloud" Hired OWASP Project Manager 2013 Strategic Planning OWASP Board Election, 3 Seats

Other Accomplishments? Confirmed Member Linkedin Group Marketing of OWASP Foundation Monthly Security Blitz April - SQL Injection May - Cross Site Scripting June - Access Control July - Mobile Security August - Threat Modeling

OWASP Community Highlights OWASP AppSec DC Regional Conference OWASP AppSec AsiaPac Global Conference Google Summer of Code: o OWASP Zed Attack Proxy o OWASP AppSensor o OWASP Hackademic OWASP Global AppSec Europe - Athens, Greece Global AppSec North America - Austin, Texas, USA Global AppSec Latin America - Montevideo, Uruguay 2012 V2 Chapter Handbook Published Numerous Cheat Sheet Updates & Podcasts

OWASP “Ops Team” Kate Hartmann - Operations Director Sarah Baso - Conference Director Samantha Groves - Project Manager Alison Shrader - OWASP Accounting Kelly Santalucia - OWASP Membership

Officer Election Results

2011 Election Results 771 of 1670 (46.2%) electors voted in this ballot. Michael Coates52431% Dave Wichers % Sebastien Deleersnyder42325% Christian Heinrich %

828 of 2106 (39.3%) electors voted in this ballot Election Results Jim Manico % Tom Brennan % Eoin Keary % Matt Tesauro % Justin Derry %

Board Member Roles *Michael Coats - Chair *Sebastien Deleersnyder - Vice Chair Eoin Keary - Secretary *Dave Wichers - Treasurer Tom Brennan - Board Member Jim Manico - Board Member

Mark your calendars!

OWASP AppSec APAC 2013 Feb. 19, Feb. 22, 2013 Jeju, South Korea

Global AppSec EMEA 2013 Aug. 20, Aug. 23, 2013 Hamburg, Germany

Global AppSec North America Nov New York City, New York

But first

Enjoy BeNeLux OWASP Day 2012! #owaspbnl12