Orlando

Meeting Registration
Please register for our meetings at http://regonline.com/owasp-orlando

OWASP Orlando Chapter Meetings
Q2 2012 Meeting May 15

The theme for Q2 is Mobile Security

5:45 - 6:00 Arrive

6:00 - 6:15 Welcome and Opening Remarks / Appsec Trivia

6:15 - 7:00 "Practical Android Security" - Jack Mannino
 * Building secure Android applications can be achieved with a mix of common sense, leveraging platform security features, and following secure development best practices. This presentation will focus on security “quick wins” during development and will cover techniques that can reduce the overall attack surface within Android applications.

7:00 - 7:15 Break

7:15 - 8:00 "Application Firewalling in the Age of Mobile: New Considerations" - Stephen Mak
 * With mobile application development on a rapid rise, it is important to understand the security risks associated with externally published APIs. This talk will discuss the similarities and differences of risks posed by browser-based web applications and mobile applications.

8:00 - ? After event social gathering - TBD


 * Jack Mannino is the CEO of nVisium Security, an application security firm located within the Washington DC area. At nVisium, he helps to ensure that large corporations, government agencies, and software startups have the tools they need to build and maintain successful application security initiatives. He is an active Android security researcher, and has a keen interest in identifying security issues and trends on a large scale. Jack is the leader and founder of the OWASP Mobile Security Project. He also serves as a board member on the OWASP Northern Virginia chapter. Jack is also the lead developer for the OWASP GoatDroid Project, which is a collection of vulnerable Android applications used for training and education.
 * Stephen Mak is the Product Manager for the Layer 7 SecureSpan Gateway, and has over 10 years product management experience in the enterprise application software industry.

Refreshments will be provided at the event and have been donated by Fishnet Security.

University of Central Florida has graciously agreed to provide meeting space at the Medical College campus.

College of Medicine 6850 Lake Nona Blvd. Orlando, FL 32827


 * Meeting Date: May 15, 2012 6:00 - 8:00 PM
 * Meeting Location: UCF College of Medicine
 * Google maps link: http://goo.gl/ztZTF

UCF College of Medicine Directions

Park in the lot labeled on the map P3 and enter through the front of the COM building. This is a "U" shaped building facing Lake Nona Blvd. Once you enter the front doors, go down the hall to the left and you will see OWASP members directing folks to the meeting room on the right hand side. If you have questions please email me at my address listed on this page.

Meeting History
Inaugural Meeting October 19, 2011 6:30 PM at Seasons 52

We will be holding our first meeting on October 19 for an informal gathering of those interested in the OWASP mission. This is a chance to get to know the other members of the chapter and engage in the initial dialogue that will drive the direction of the group. We want to know what kinds of technologies you use or are interested in learning about, the challenges you are facing in your daily work and get a sense for the types of content you want to see at future meetings. I will bring some copies of various OWASP guides and possibly some other OWASP shwag to this initial meeting. We will be covering the OWASP mission, culture, and a high level view of OWASP projects. The format for this meeting will largely be discussion oriented. This is not currently a sponsored event, but we do have interested parties asking about sponsorship opportunities so this may change.

Q1 2012 Meeting February 22

5:45 - 6:00 Arrive

6:00 - 6:15 Welcome and Opening Remarks / Appsec Trivia

6:15 - 7:00 "OWASP Where are we... Where are we going in 2012" - Tom Brennan

7:00 - 7:15 Break

7:15 - 8:00 "XSS Defense" - Jim Manico
 * This talk will discuss the past methods used for cross-site scripting (XSS) defense that were only partially effective. Learning from these lessons, we will also discuss present day defensive methodologies that are effective, but place an undue burden on the developer. We will then finish with a discussion of future XSS defense mythologies that shift the burden of XSS defense from the developer to various frameworks. These include auto-escaping template technologies, browser-based defenses such as Content Security Policy, and Javascript sandboxes such as the Google CAJA project and JSReg.

8:00 - ? After event social gathering - Cariera's


 * Tom Brennan is a Director at Spiderlabs/Trustwave, an OWASP Global Board Member and Chapter Leader for OWASP NY/NJ Metro.
 * Jim Manico is the VP of Security Architecture for WhiteHat Security, a web security firm. Jim is a participant and project manager of the OWASP Developer Cheatsheet series. He is also the producer and host of the OWASP Podcast Series.

Refreshments donated by Security Innovation.

University of Central Florida provided meeting space at the Medical College campus.

Presentation Archive
XSS Past Present and Future v2 - Jim Manico Orlando Q1 2012

Access Control Pitfalls - Jim Manico Orlando Q1 2012 (Optional 2nd talk not delivered at chapter meeting)

[https://www.owasp.org/images/6/60/2012Whereweare..Wherearewegoing.pptx OWASP Where are we... Where are we going in 2012] - Tom Brennan Orlando Q1 2012

Chapter Information
OWASP Orlando is newly formed as of August 2011. The first meeting was held on October 19, 2011 and was designed largely as a social event to bring new members together. After this initial informal meeting we are continuing with quarterly meetings focused on content that attendees can apply within their own environments for minimal or no-cost to their organizations. We do not tolerate vendor-centric presentations but do encourage vendors to present as long as they can keep their marketing attempts to a minimum and focus on the underlying issues and technology. Typically we have 2 speakers with topics designed to meet the needs of the Builder, Breaker and Defender communities. As of April 2012 have continued to meet this commitment. Keep watching this space for announcements about upcoming events. If you are interested in being a speaker or taking a more active leadership role within the chapter, please contact the chapter leaders at the link above. Everyone is welcome to join us at our chapter meetings. We track membership based on participation at the mailing list linked on this page and this will be the primary means of communication for the chapter. We also have a Linkedin group at http://goo.gl/BB9fu

Supporters

 * For information on becoming a supporter and associated benefits

Organizational Supporters

Chapter Supporters

Single Meeting Supporters




 * Become a Single Meeting Supporter

Academic Supporters