|Sometimes an open source, community driven, volunteer resourced group like OWASP feels like a bunch of individuals, all working separately without a great deal of coordination. BUT, then the magic of the OWASP curiosity, innovation and 'team-work' kick in, and great things happen. Did you know that OWASP Achieved the following milestones in 2015?
On behalf of the entire Operations team, we look forward to making 2016 an exciting and productive year for OWASP.
Best Regards, Paul Ritchie
OWASP Executive Director
Hacker Earns 50k Miles by Exposing Vulnerability in United Airlines Website - HackRead.com
OWASP Proactive Tips for Coding Securely - DZone.com.
Toolswatch '2015 Best Security Tool' survey: Please vote for your favorite OWASP security tools! - Toolswatch.com
OWASP Projects and activities are often the subject of webcasts and podcasts. Sit back and relax as you watch and listen to these recent episodes.
Mark Miller - OWASP 24/7 Podcast Series
|Claudia Aviles-Casanovas, our Projects Coordinator, has shared her latest Project Task Force Update. The task force is still seeking volunteers to review the OWASP SeraphimDroid Project:|
Maura Van Der Linden has been contracted by Simon Bennetts to help with the new intro document to get users who are new to pen testing started in ZAP.
Thank you to Gabriel Gumbs for the donation: https://www.owasp.org/index.php/OWASP_Application_Security_Program_Quick_Start_Guide_Project
For anyone who wants to help with our Free Training initiative, Gabriel personally welcomes more contributions. Visit: https://www.owasp.org/index.php/Education/Free_Training
Andrew van der Stock has issued a call for translations for the ASVS project! https://github.com/OWASP/ASVS
As such, we've committed v3.0.1 into GitHub and uploaded it to Crowd In: https://crowdin.com/project/owasp-asvs/
You don't HAVE to use Crowd In, but it would be nice to indicate to other native speakers of your language that you are willing to work together. This is a 70 page document, and in all honesty, will take a dedicated person a week or more to translate, so please please please work together rather than apart. You have full access to the original document and the original images.
In the next month or so, Andrew would like to close out all the issues logged in GitHub, so he will give active translators a heads up of any changes to the master document, so again, a good reason to use Crowd In so we know who you are.
If there are any incomprehensible English idiom or phrases in there, please don't hesitate to ask for clarification, because if it's hard to translate, it's almost certainly wrong in English as well. You can reach Andrew at firstname.lastname@example.org
OWASP AppSecEU - CALL for PAPERS
Don't miss the opportunity to present your Paper!
27 June - 1 July 2016
The next OWASP AppSecEU (http://2016.appsec.eu/) will take place at the Marriott Park Hotel in Rome, Italy.
The Open Web Application Security Project is an open-source project for application security.
Don't miss the opportunity to share and discuss your ideas and knowledge with other experts and practitioners. Present your paper now!!
Spread the knowledge of this big opportunity within your chapter and push towards Universities, Research Centers, Industries, asking to present papers in order to make this conference a unique one!!
Topics of interest include, but are not limited to:
The program committee will review your submission based on a descriptive abstract of your intended presentation. Feel free to attach a preliminary version of your presentation if available, or any other supporting materials. Keep in mind: the better your description is, the better our review will be. Please review your proposal thoroughly as accepted abstract and bio submitted will be published 1:1 on our site. If your presentation is accepted for inclusion in the conference program, you are free to submit a white paper describing your work, which will be added to the website.
Call for Presentation:
Regarding sponsorship, please let us know if you are interested in one of the options because we have already received several requests and we would like to sign all the contracts as soon as possible (within 31 Dec. 2015).
Other Global AppSec Events
We are still accepting sponsorships for AppSec Cali 2016 to be held in Santa Monica, California on January 25-27, 2016. Visit the website for details.
AppSecUSA 2016 will be held on 11-14 October 2016 in Washington DC. Mark your calendars!
AppSec Cali 2016, Jan. 25, 2016 - Jan. 27, 2016, Santa Monica, CA
New Zealand Day 2016, February 3, 2016 - February 4, 2016, Auckland, New Zealand
Latam Tour 2016, April 7, 2016 - April 22, 2016, Latin America
CyberSecurity 2016, May 16, 2016 - May 20, 2016, New York, NY, USA
AppSec ASIA 2016, May 19, 2016 - May 22, 2016, Wuhan, China
CodeMash January 5 - 8, 2016 Sandusky, Ohio, USA
BSides Lagos January 22, 2016 Nigeria
SC Congress London, February 10, 2016 ILEC Conference Centre London, UK
Blackhat Asia 2016, March 31 - April 1, 2016 Marina Bay Sands, Singapore. OWASP members receive a $200/USD discount on Briefings with discount code: OWBR0316
SC Congress Toronto, June 1, 2016 - June 2, 2016 Metro Convention Center Toronto, CN
Ads are not endorsements and reflect the messages of the advertiser only. They represent co-marketing arrangements
with other organizations in support of the OWASP Community. CLICK HERE for more information on advertising.
New Student Chapter
Here is a summary of chapter activity in 2015. Thanks to all our new and veteran leaders for making this an outstanding year:
2015 AppSec Summer School in Croatia
Vlatko Kosturjak sent us photos from OWASP Croatia's OWASP Application Security Summer School held in September at Fakultet Organiazacije Informatike (FOI). The program included speakers from industry and academia, who are experts in the field of web application security. The program presented students with practical, industrial problems focusing on attacks against web applications and protect against those attacks. The Summer School is an intensive program that includes 8h lectures and training sessions over 4 days, plus an additional, independent student project. The event was free for all students of FOI, and provided a certificate of completion.
We at the OWASP Global Foundation are looking forward to hearing about more such events in future.
Share your chapter's successes! Submit your stories here