1. Jeff Williams OWASP Chair jeff.williams@owasp.org
OWASP Overview
Jeff Williams
OWASP Chair

2. Innocent Code

3. OWASP’s Mission
OWASP’s is dedicated to finding and fighting the causes of insecure software

4. The Market for Lemons

5. Widespread lack of understanding
OWASP Goals
Widespread lack of understanding
Establish application security knowledgebase
Time lag for securing new technologies
Constructive security research
Assist companies to produce secure code
Process, tools, guidance, standards

6. MediaWiki
Community platform
Anyone can create an account and edit
Strong review process

7. New Projects
Honeycomb project
Java security project underway
Ajax project – just starting with new leader
Metrics project – new leader
Validation project – new leader
Testing guide II – alpha draft available
Code review project – alpha draft available
Summer of Code?

8. Project Honeycomb Principle Principle Principle Attack Attack Attack
Vulnerability
Threat
Attack
Countermeasure
Vulnerability
Countermeasure
Countermeasure
Countermeasure

9. OWASP AppSec Conference Series
Mike Howard is going to do the keynote at OWASP AppSec Seattle 2006