1. Copyright © 2004 - The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License. The OWASP Foundation OWASP http://www.owasp.org OWASP (Membership) and new OWASP Projects Sebastien Deleersnyder CISSP Feb, 2006 sdl@ascure.com

2. OWASP 2 Agenda  Introduction  OWASP  Belgium Chapter  New OWASP Projects

3. OWASP 3 Agenda  Introduction  OWASP  Belgium Chapter  New OWASP Projects

4. OWASP 4 Introduction  Sponsors this evening:  K.U.Leuven sponsors venue  BeeWare sponsors Pizza & Drinks  Call for additional sponsors  Chapter meeting places & catering  Support for local projects  OWASP cannot recommend the use of products, services, or recommend specific companies

5. OWASP 5 Introduction Program for this evening:  18h20 - 18h40: Sebastien Deleersnyder OWASP (Membership) & new OWASP Projects  18h40 - 19h30: Philippe Bogaerts WebScarab demonstration  19h30 - 20h45: Web Application Firewalls: Panel Discussion

6. OWASP 6 Agenda  Introduction  OWASP  Belgium Chapter  New OWASP Projects

7. OWASP 7  Open Web Application Security Project  OWASP is dedicated to finding and fighting the causes of insecure software  Non-profit, volunteer driven organization  All members are volunteers  All work is donated by sponsors

8. OWASP 8 OWASP?  Provide free resources to the community  Publications, Articles, Standards, e.g.  OWASP Top 10  OWASP Guide  Testing Guide  Testing and Training Software, e.g.  WebGoat  WebScarab .NET Projects  Local Chapters, Mailing Lists & Conferences  Dual license model:  Open Source Licenses  Commercial License for Members

9. OWASP 9 OWASP Membership  Using OWASP material?  Join us and become member!  Enable OWASP to continue to provide unbiased:  Tools  Documentation  Conferences  Mailing Lists  … www.owasp.org/about/membership.html

10. OWASP 10 Agenda  Introduction  OWASP  Belgium Chapter  New OWASP Projects

11. OWASP 11 Belgium Chapter - What do we have to offer?  Quarterly Meetings  Mailing List  Presentations & Groups  Open forum for discussion  Meet fellow InfoSec professionals  Create (Web)AppSec awareness in Belgium  Local projects?

12. OWASP 12 Belgium Chapter – House Rules  Free & open to everyone  Language  English preferred  Native language: no problem!  No vendor pitches or $ales presentations  Respect for different opinions  No flaming (including M$ bashing)  1 CISSP CPE for each hour of OWASP chapter meeting  Sign Sheet & I’ll e-mail scan: you claim CPE credits

13. OWASP 13 OWASP Local Chapter Meetings 2006  Next Meetings:  Monday May 8th 2006 - Brussels  Thursday Sep 14th 2006 - Antwerp  Tuesday Nov 21 2006 - Brussels  Program:  Short OWASP intro  Presentation on introduction topic  Panel, workshop, round-table, … on more advanced topic  Topics:  Call for input!

14. OWASP 14 Agenda  Introduction  OWASP  Belgium Chapter  New OWASP Projects

15. OWASP 15 New OWASP Projects  OWASP Site Generator  http://owasp.net/forums/428/ShowPost.aspx http://owasp.net/forums/428/ShowPost.aspx  http://owasp.net/blogs/dinis_cruz/archive/2006/01/25/431.aspx http://owasp.net/blogs/dinis_cruz/archive/2006/01/25/431.aspx  WASS, or Web Application Security Standards project  http://www.owasp.org/standards/wass.html http://www.owasp.org/standards/wass.html  SEASA, Scoping and Evaluating Application Security Assessments  See Metrics Mailing List: http://lists.sourceforge.net/lists/listinfo/owasp-metrics http://lists.sourceforge.net/lists/listinfo/owasp-metrics  Terminology input needed  Metrics Project Reactivation?  Top10 2006?  Testing Project?

16. OWASP 16 OWASP Conference  Europe OWASP conference in Belgium!  KUL  May 29: training course Web Application Security / Web Services Security  May 30-31: Conference – 2 tracks  Speaker, paper & sponsoring input appreciated!

17. OWASP 17 That’s it…  Any Questions? http://www.owasp.org/local/belgium.html sdl@ascure.com Thank you!

18. OWASP 18 Subscribe to BE Chapter mailing list  Keep up to date!  Post your (Web)AppSec questions  Contribute to discussions!