1. Sebastien Deleersnyder CISSP May, 2006 sdl@ascure.com
OWASP Update
Sebastien Deleersnyder
CISSP
May, 2006

2. Agenda Introduction OWASP Belgium Chapter New OWASP Projects
Get an idea of population?
InfoSec consultants? Developers? Industry? Finance?

3. Agenda
Introduction
OWASP
Belgium Chapter
New OWASP Projects

4. Introduction Sponsor this evening: Call for additional sponsors
Deloitte
Call for additional sponsors
Chapter meeting places & catering
Support for local projects
OWASP cannot recommend the use of products, services, or recommend specific companies

5. Introduction Program for this evening: 18h30 - 18h45: 18h45 - 19h15:
Sebastien Deleersnyder  OWASP Update
18h h15:
Hillar Leoste, Zone-H 2005 Internet Attack Statistics for Belgium
19h h30:
Johan Peeters, Program Director secappdev.org
Can "Agile" Development Produce Secure Applications?

6. Agenda
Introduction
OWASP
Belgium Chapter
New OWASP Projects

7. Open Web Application Security Project
OWASP
Open Web Application Security Project
OWASP is dedicated to finding and fighting the causes of insecure software
Non-profit, volunteer driven organization
All members are volunteers
All work is donated by sponsors

8. OWASP? Provide free resources to the community Dual license model:
Publications, Articles, Standards, e.g.
OWASP Top 10
OWASP Guide
Testing Guide
Testing and Training Software, e.g.
WebGoat
WebScarab
.NET Projects
Local Chapters, Mailing Lists & Conferences
Dual license model:
Open Source Licenses
Commercial License for Members

9. Join us and become member!
OWASP Membership
Using OWASP material?
Join us and become member!
Enable OWASP to continue to provide unbiased:
Tools
Documentation
Conferences
Mailing Lists …

10. Agenda
Introduction
OWASP
Belgium Chapter
New OWASP Projects

11. Belgium Chapter - What do we have to offer?
Quarterly Meetings
Mailing List
Presentations & Groups
Open forum for discussion
Meet fellow InfoSec professionals
Create (Web)AppSec awareness in Belgium
Local projects?

12. Belgium Chapter – House Rules
Free & open to everyone
Language
English preferred
Native language: no problem!
No vendor pitches or $ales presentations
Respect for different opinions
No flaming (including M$ bashing)
1 CISSP CPE for each hour of OWASP chapter meeting
Sign Sheet & I’ll scan: you claim CPE credits

13. OWASP Local Chapter Meetings 2006
Next Meetings:
Thursday Sep 14th Antwerp
Tuesday Nov Brussels
Program:
Short OWASP intro
Presentation on introduction topic
Panel, workshop, round-table, … on more advanced topic
Topics:
Call for input!

14. Agenda
Introduction
OWASP
Belgium Chapter
New OWASP Projects

15. Previous OWASP chapter reference by Ken online
New OWASP Projects
OWASP Site Generator
Testing Project
Previous OWASP chapter reference by Ken online

16. Europe OWASP conference in Belgium!
KUL
May 29: training course Web Application Security / Web Services Security
May 30-31: Conference – 2 tracks

17. That’s it… Any Questions? Thank you!
Thank you!

18. Subscribe to BE Chapter mailing list
Keep up to date!
Post your (Web)AppSec questions
Contribute to discussions!