Copyright © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License. The OWASP Foundation OWASP OWASP (Membership) and new OWASP Projects Sebastien Deleersnyder CISSP Feb, 2006

OWASP 2 Agenda  Introduction  OWASP  Belgium Chapter  New OWASP Projects

OWASP 3 Agenda  Introduction  OWASP  Belgium Chapter  New OWASP Projects

OWASP 4 Introduction  Sponsors this evening:  K.U.Leuven sponsors venue  BeeWare sponsors Pizza & Drinks  Call for additional sponsors  Chapter meeting places & catering  Support for local projects  OWASP cannot recommend the use of products, services, or recommend specific companies

OWASP 5 Introduction Program for this evening:  18h h40: Sebastien Deleersnyder OWASP (Membership) & new OWASP Projects  18h h30: Philippe Bogaerts WebScarab demonstration  19h h45: Web Application Firewalls: Panel Discussion

OWASP 6 Agenda  Introduction  OWASP  Belgium Chapter  New OWASP Projects

OWASP 7  Open Web Application Security Project  OWASP is dedicated to finding and fighting the causes of insecure software  Non-profit, volunteer driven organization  All members are volunteers  All work is donated by sponsors

OWASP 8 OWASP?  Provide free resources to the community  Publications, Articles, Standards, e.g.  OWASP Top 10  OWASP Guide  Testing Guide  Testing and Training Software, e.g.  WebGoat  WebScarab .NET Projects  Local Chapters, Mailing Lists & Conferences  Dual license model:  Open Source Licenses  Commercial License for Members

OWASP 9 OWASP Membership  Using OWASP material?  Join us and become member!  Enable OWASP to continue to provide unbiased:  Tools  Documentation  Conferences  Mailing Lists  …

OWASP 10 Agenda  Introduction  OWASP  Belgium Chapter  New OWASP Projects

OWASP 11 Belgium Chapter - What do we have to offer?  Quarterly Meetings  Mailing List  Presentations & Groups  Open forum for discussion  Meet fellow InfoSec professionals  Create (Web)AppSec awareness in Belgium  Local projects?

OWASP 12 Belgium Chapter – House Rules  Free & open to everyone  Language  English preferred  Native language: no problem!  No vendor pitches or $ales presentations  Respect for different opinions  No flaming (including M$ bashing)  1 CISSP CPE for each hour of OWASP chapter meeting  Sign Sheet & I’ll scan: you claim CPE credits

OWASP 13 OWASP Local Chapter Meetings 2006  Next Meetings:  Monday May 8th Brussels  Thursday Sep 14th Antwerp  Tuesday Nov Brussels  Program:  Short OWASP intro  Presentation on introduction topic  Panel, workshop, round-table, … on more advanced topic  Topics:  Call for input!

OWASP 14 Agenda  Introduction  OWASP  Belgium Chapter  New OWASP Projects

OWASP 15 New OWASP Projects  OWASP Site Generator    WASS, or Web Application Security Standards project   SEASA, Scoping and Evaluating Application Security Assessments  See Metrics Mailing List:  Terminology input needed  Metrics Project Reactivation?  Top ?  Testing Project?

OWASP 16 OWASP Conference  Europe OWASP conference in Belgium!  KUL  May 29: training course Web Application Security / Web Services Security  May 30-31: Conference – 2 tracks  Speaker, paper & sponsoring input appreciated!

OWASP 17 That’s it…  Any Questions? Thank you!

OWASP 18 Subscribe to BE Chapter mailing list  Keep up to date!  Post your (Web)AppSec questions  Contribute to discussions!