OWASP Newsletter 15

OWASP Newsletter #15 (xx-March-2008)
Welcome to the 15th edition of the OWASP Newsletter, featuring the OWASP NYC AppSec 2008 Conference, OWASP Week 2008, and the OWASP Guide 3.0 Development Resumes.

As always, if you have any content to add to the next edition, please feel free to add it directly to its WIKI page OWASP Newsletter 16.

Alison McNamee OWASP Operations Director Tel: 410-440-5430 eMail: Alison.mcnamee@owasp.org

Featured Item: OWASP NYC AppSec 2008 Conference
The OWASP NYC AppSec 2008 Conference will take place on October 7th-10th. At this event, there will be two days of Multi-track Seminars, Capture the Flag, two days of Hands-On Training and a Vendor Exhibit. The conference will be held downtown New York City with the capacity for up to 1,000 attendees register early! Registration for training and attendees will open up on April 1st, 2008. For full details on the event, to submit a talk or for more information on sponsorship opportunities click here.

Featured Item: OWASP Week 2008
Following the success of OWASP Day in 2007, this year we have decided to have the first ever OWASP Week! This will take place between March 30th and April 4th. To see what chapters are participating, please go to OWASP_Week_April_08.

New Pages

 * .Net_Project_Wishlist
 * .NET_Project_ReOrg_Alpha
 * Germany/press
 * OWASP_Board_Meetings_3-6-08
 * Not-For-Profit_Status
 * OWASP_Request_for_Proposal_List
 * OWASP_Week_April_08
 * OWASP_Board_Meetings_March_Agenda
 * OWASP_Board_Meetings_2-7-08
 * Ajax_Frameworks
 * OWASP_Summer_0f_Code_2008_:_Selection_Assessment_SoC_08_Application_2
 * OWASP_Summer_0f_Code_2008_:_Selection_Assessment_SoC_08_Application_1
 * OWASP_Summer_0f_Code_2008_:_Selection_Assessment_Type

New Chapter Pages

 * Qatar
 * Spain/Meetings
 * Boulderchaptermeetings2008.html
 * Boulderchaptermeetings2007.html
 * Mexico City/es

Updated Pages

 * Testing_for_Cross_site_scripting
 * CSRF_Guard_2x_Roadmap
 * Talk:Declarative_Access_Control_in_Java
 * OWASP JBroFuzz
 * JSP JSTL
 * Preventing LDAP Injection in Java
 * Password length & complexity
 * OWASP Project Assessment
 * OWASP_NYC_AppSec_2008_Conference
 * OWASP Enterprise Security API
 * Italy_OWASP_Day_2
 * OWASP_Summer_of_Code_2008_Applications
 * Ajax_Literature_Review
 * OWASP_Grants
 * Reviews_of_security_podcasts
 * OWASP_Foundation
 * OWASP_Spring_Of_Code_2007_-_Payments
 * OWASP_Backend_Security_Project
 * Category_talk:OWASP_Testing_Project
 * OWASP_Summer_of_Code_2008_Press_Release
 * OWASP_Spring_Of_Code_2007_-_Projects
 * Web_Application_Firewall
 * OWASP_Summer_0f_Code_2008_:_Selection
 * OWASP Video
 * OWASP_Java_Table_of_Contents

Updated chapter pages:

 * Boise
 * Belgium
 * Austin
 * London
 * Cleveland
 * Mexico City
 * Boulder
 * Virginia (Northern Virginia)
 * Denver
 * Memphis
 * Eugene
 * Belgium
 * Chennai
 * Rochester
 * Belgium
 * Turkey
 * Italy
 * Latvia
 * Helsinki
 * Minneapolis St Paul
 * Cincinnati
 * Suncoast
 * Sacramento
 * Buffalo
 * Spain
 * Columbus
 * Switzerland
 * Washington DC
 * NYNYMetro
 * Netherlands
 * Egypt

New Documents & Presentations from chapters

 * Robert Hansen's talk on Logic Attacks and Inefficiencie of Robotic Detection at MSP

For a complete list of chapter presentations see the online table of presentations.

OWASP references in the Media

 * Top 10 Reasons Web Sites get Hacked
 * Do Outsourcing Firms write secure code?
 * OWASP Talk PHP Code Analysis Real World Examples
 * OWASP Summer of Code
 * AntiSamy 1.1 is out!
 * Economics of Industry Certifications
 * Conference 2008 at NY
 * Web Testing and Reporting Best Practices
 * XSS and CSRF Attacks
 * Email Encryption
 * OWASP Australia 2008
 * Software Vendors and OWASP
 * February OWASP Top 10 - Exploits
 * Exposing ECM Security Vulnerabilities
 * Res timing file enumeration without javascript in ie7.0
 * FOSDEM
 * About OWASP
 * Why many popular website are risky

Application Security News Feed

 * TBD