The Open Web Application Security Project (OWASP) is a 501c3 not-for-profit worldwide charitable organization focused on improving the security of application software. Our mission is to make application security visible, so that people and organizations can make informed decisions about true application security risks. Everyone is free to participate in OWASP and all of our materials are available under a free and open software license.
"The Only Constant is Change" - Editorial by Paul Ritchie, OWASP Executive Director
This quote, commonly attributed to Heraclitus, a Greek Philosopher, sums up my first 5 months experience with OWASP. Our goal on the Operations Team is to support the OWASP community regardless of the hurdles and challenges along the way. 'Did you know' we accomplished the following in support of the OWASP mission.
Added Noreen Whysel as Community Manager
Hired Event managers for our AppSec & LATAM events
Completed a much needed Audit of our Finance & Operating procedures
Engaged a new accounting firm, KPMG
Engaged an Association Management company, Virtual Management
Performed our annual Board of Director Elections
Approved the new Committee 2.0 Program for community engagement
Updated the Wiki infrastructure
Sure, these all sound like Operations activities, but that's just one of our goals, to ensure the trains run smoothly so YOU, the OWASP Community can carry the message and activities of OWASP forward. On behalf of the entire Operations team, we look forward to making 2015 an exciting and productive year for OWASP. Paul Ritchie, OWASP Executive Director Return To Top
Do you have an important advancement or opinion on application security? Looking for your 45 minutes of fame? Then you should definitely submit a proposal for papers or research! Call for papers. Submission deadline is January 15, 2015 Call For research. Submission deadline is January 20, 2015 Please check the respective calls for prerequisites and submission instructions.
OWASP encourages any community member interested in hosting an OWASP Global Conference to submit a proposal. Hosting a conference requires both a commitment and a great deal of responsibility. A lot of time, energy and effort are needed during the proposing, planning and implementing phases of hosting a conference. For more information see the How to Host a Conference page. The dates of each OWASP Global AppSec conference (or Tour) vary somewhat each year but ideally, the conference is held:
Latin America (this may be a LATAM Tour instead - Q1)
Europe - Q2
North America - Q3
Asia Pacific (this may be an APAC Tour instead)
To bid for a 2016 OWASP Global AppSec, please complete the OCMS form with the following information before February 27th, 2015.
The proposed city and host chapter.
The name of the intended local organizer and his/her team committed to the task for 2016 along with a brief explanation on why the conference committee wants to organize an OWASP Global AppSec.
Previous conferences or local/regional events experience of the conference committee.
The intended dates for the conference. (Typically includes 2 days of pre-conference training, followed by 2 days of conference talks).
Venue recommendations. If possible, assurance that the following will be available:
Green room, storage room, breakout room, capture the flag area, etc.
A large auditorium. Other lecture rooms near the main auditorium.
Projection facilities in all rooms up to modern standards.
A suitable mixing space near the rooms for registration, breaks and other activities.
A hall near the rooms for sponsor exhibitions.
If possible, attach a tentative floor plan design.
Budget. Please use the form on google docs HERE. (Since many of the categories of expenses are optional, consider this a check list. You can add as many items as you want and you do not need to fill in every box if you do not want it to be included in your event.)
Possible "big name" speakers in AppSec who might be plenary speakers with low travel costs.
Description of the nearby restaurants and accommodation facilities easily accessible from the conference site and reasonably priced.
Anticipated help from volunteers before and at the conference.
Realistic prospects for obtaining sponsorship from outside bodies, e.g., companies, universities, scientific institutes, media, government, etc.
Accessible transport links to the venue.
Local tourist attractions, e.g., historic sites, museums, buildings, galleries, parks, etc.
Any other relevant information.
By submitting an application, you are already demonstrating your commitment to OWASP. We really appreciate every proposal we receive, however not every proposal will be approved. The selection process that will be made by the OWASP operations team with input from previous AppSec organizing teams. Please note that proposal completeness and accuracy are essential, moreover:
Preference will be given to the community that demonstrates more engagement.
Preference will be given to the team that has successful experience organizing local/regional events.
Preference will be given to a location that has not recently hosted a Global AppSec conference.
Geographic coverage will be considered when selecting conference sites.
Application submission begins January 1st. The deadline for applications is February 27th. Applicants will be notifiec by March 13th. Selected sites will have until March 20th to confirm that they will host the 2016 conference. Should you have any questions concerning the proposal process or need assistance with you application, please do not hesitate to contact us. Return To Top
CLICK HERE for information on advertising in the next connector
OWASP Manila - hosts an event in Bulacan State Univerity to promote Cyber Security Awareness and the OWASP Top 10 Chapter Leader - John Patrick Lita Find Manila on Twitter @owaspManila
OWASP New Jersey sponsored New Jersey Institute of Technology's Capstone Showcase. During the event, chapter members mentored a student team in developing a software security project, and then participated on a judging panel to evaluate projects and give awards. New Jersey Chapter Leader - Tom Brennan. Share your chapter's successes! Submit your stories here Return To Top
OWASP Education and Training
Upcoming Training Opportunities
AppSec California - January 26-28, 2015 - Santa Monica, CA