1. OWASP Global Projects Committee
Committee Update Slides May 19, 2009 1

2. Global Projects Committee
Dinis Cruz, Paulo Coimbra, Jason Li, Matt Tesauro, Leo Cavallari, Pravir Chandra, Brad Causey
New Committee Member: Brad Causey
Meeting weekly on Monday at 10 PM GMT
Organizing and documenting the “rules of engagement” for OWASP projects and the Season of Code
Launching the next Season of Code 2 2

3. Announced at AppSec EU 2009 in Poland Provisional budget of $90,000
OWASP Season of Code 2009
Announced at AppSec EU 2009 in Poland
Provisional budget of $90,000
Focus: Improving quality in for key areas
OWASP Education Pack
Enterprise usability of OWASP Projects
Additional Source of Funding
Marketing and PR
Any project proposals are welcome including joint proposals up to 20K 3 3

4. Global Committees assist with areas: Education Committee
OWASP Season of Code 2009
Global Committees assist with areas:
Education Committee
OWASP Education Pack
Projects Committee
Enterprise usability of OWASP Projects
Membership & Chapters Committee
Additional Sources of Funding
Industry and Conference Committee
Marketing and PR
Projects will be assessed with Criteria v2 4 4

5. 16 Projects launched recently < 6 months
Date
Project
Leader
Source Code Flaws Top 10
Paolo Perego
Yasca
Michael Scovetta
Wapiti
Nicolas Surribas
Use of Web Application Firewalls
Germany Chapter
Anti-Malware
Giorgio Fedon
Vicnum
Mordecai Kraushar
OWASP Proxy
Rogan Dawes
ModSecurity Core Rule Set Project
Ryan Barnett 5 5

6. Web Application Scanner Specification Corey LeBleu
Date
Project
Leader
Web Application Scanner Specification
Corey LeBleu
Web App Security Metric using Attack Patterns
Raja Krovi
Learn About Encoding
Federico Casani
Software Assurance Maturity Model
Pravir Chandra
Mutillidae
Adrian Crenshaw
Joomla Vulnerability Scanner
Aung Khant
CRM
Tom Brennan
PCI
Trey Ford

7. hypothetical 9 new OWASP Projects – work in progress
Leader
IntelliPass - Behaviour based Password Lockout System
Anurag Agarwal
Malware Link Scanner
Aung Khant
Web Input Vector Extractor Teaser (wivet) v3
Bedirhan Urgun
Web Application Harvesting
Esteban Ribičić
Forensic Analysis Project
Evgueni Tchijevski
Application Security Survey Project
Frederik
Security Vulnerability Contextualization Framework
Rafal
International Security Challenge
Sarb
N-Stealth Scanner
Thiago Zaninotti 7 7