The OWASP Foundation OWASP Belgium Chapter OWASP Update 6-Jun-2013 Seba Deleersnyder BE Board

2 Agenda Introduction OWASP Near You

Introduction

OWASP World OWASP is a worldwide free and open community focused on improving the security of application software. Our mission is to make application security visible so that people and organizations can make informed decisions about application security risks. OWASP is a worldwide free and open community focused on improving the security of application software. Our mission is to make application security visible so that people and organizations can make informed decisions about application security risks. Everyone is free to participate in OWASP and all of our materials are available under a free and open software license. The OWASP Foundation is a 501c3 not-for-profit charitable organization that ensures the ongoing availability and support for our work. Everyone is free to participate in OWASP and all of our materials are available under a free and open software license. The OWASP Foundation is a 501c3 not-for-profit charitable organization that ensures the ongoing availability and support for our work.

5 Location / co hosting OWASP supporter Sponsors Belgium 2012/2013 OWASP cannot recommend the use of products, services, or recommend specific companies Thank you

OWASP Europe Tour Cambrige - 13th May (Monday) Midlands - 15th May (Wednesday) London - 3rd June (Monday) Czech - 4th June (Tuesday) Bucharest - 5th June (Wednesday) Belgium - 6th June (Thursday) Denmark - 10th of June (Monday) Barcelona - 13th, 14th June (Thursday, Friday) Finland - 17th June (Monday) Netherlands - June 20th (Thursday) Lisbon - 21st June (Friday) France - 24th June (Monday) Geneva - 25th June (Tuesday) Dublin - 25th, 26th June (Tuesday, Wednesday) Rome - 27,28th June (Thursday, Friday) 6 The OWASP Europe Tour objective is to raise awareness about application security in the European region, so that people and organizations can make informed decisions about true application security risks. Everyone is free to participate in OWASP and all of our materials are available under a free and open software license.

Honeyn3t Ireland opened the CTF competition that will run until the end of the OWASP EU Tour: 7

8 Latest news OWASP Organisation: 2013 Board election: Call for candidates (deadline 16-Aug) 2013 WASPY (Web Application Security People of the Year) Awards (nominate best chapter leader, project leader, community supporter, mission outreach & Innovator) Highlighted OWASP projects: Xenotix XSS Exploit Framework WS Amplification DoS Project Mutillidae 2 Project

9 Program 18h15 OWASP update Seba Deleersnyder, OWASP Belgium Board 18h30 – 19h15 Needles in haystacks, we are not solving the appsec problem & html hacking the browser, CSP is dead Eoin Keary, BCC Risk Advisory Break 19h30 – 20h15 Teaching an Old Dog New Tricks: Securing Development with PMD Justin Clarke, Gotham Digital Science Break 20h30 – 21h15 Vulnerability Prediction in Android Applications Aram Hovsepyan, Ph. D.

OWASP near you

11 Next Belgium chapter meetings Mid October Mid December Suggestions for speakers / venues are most welcome!

Global AppSec EMEA 2013 Aug. 20, Aug. 23, 2013 Hamburg, Germany

Global AppSec North America November 18th - 21th New York City, New York

BeNeLux november 2013 One day of trainings One day conference The Netherlands - Amsterdam 14

15 Subscribe mailing list Keep up to date!

16 Want to support OWASP? Become member, annual donation of: $50 Individual $5000 Corporate Enables the support of OWASP projects, mailing lists, conferences, podcasts, grants and global steering activities…projectsmailing listsconferencespodcasts grants global steering activities eb692a5268d81d15e18c

17 Become a paid member during the first 10 days of June 2013 and receive all the regular benefits of OWASP membership in addition to being entered into a drawing for one of the following donated prizes:regular benefits of OWASP membership 2 OWASP Lifetime Memberships 2 Full Conference Passes for OWASP AppSec Research, August 22-23, 2013 in Hamburg GermanyOWASP AppSec Research 2 Full Conference Passes for OWASP AppSec USA, November 20-21, 2013 in New York CityOWASP AppSec USA 4 Full Conference (Briefing Passes) to Black Hat USA 2013Black Hat USA 2013 EC Council - Rocket City Takedown Con, July 15-16, 2013, Huntsville AlabamaEC Council - Rocket City Takedown Con 1 training class of the attendee choice + 1 full conference pass 2 full conference passes EC Council - Hacker Halted 2013 Angels vs. Demons, September 19-21, 2013 in Atlanta GeorgiaEC Council - Hacker Halted 2013 Angels vs. Demons 1 training class of the attendee choice + 1 full conference pass 2 full conference passes 2 Full Conference Passes for (ISC)2 Secure Asia, Philippines - August 8-9, Full Conference Passes for (ISC)2 Security Congress, Sept 24-27, 2013 in Chicago Illinois(ISC)2 Security Congress 2 Full Conference Passes for (ISC)2 Secure Brazil Starting June 1, 2013 new or renewing OWASP Individual Members will be able to sign up for a 2-year membership for $95 USD or a Lifetime Membership for $500 USD.

18 Volunteer for Outreach/Social Media Volunteer For A Membership Initiative Volunteer For A Project Initiative Volunteer For An Industry Initiative Volunteer For A Chapter Initiative Volunteer For A Conference Initiative Volunteer For an OWASP Governance Initiative Are You a Developer? Volunteer To Provide Technical Assistance Sign up To Volunteer for AppSec USA 2013 START YOUR OWN INITIATIVE

Enjoy! 19