Switzerland

= Welcome =



Welcome to the Home Page of the OWASP Switzerland Chapter.


 * The chapter leader is [mailto:sven.vetsch__AT__owasp.org Sven Vetsch] supported by [mailto:antonio.fontes__AT__owasp.org Antonio Fontes]. Please contact us with any questions regarding the chapter.
 * Please subscribe to the mailing list for meeting announcements and other news related to OWASP in Switzerland.
 * You can follow us on Twitter and Facebook

If you're living in the French speaking part of Switzerland, please also visit the OWASP Geneva chapter for more information.

= Next Meetings = We'd like to invite you to our next OWASP Switzerland meeting. If you want to attend, please make sure to register for the event with your *full name* through register. Space is limited to 30 attendees.




 * When: Tuesday, June 7th 2016
 * 17:30        | Doors will open
 * 18:00 – 18:15 | Update on OWASP
 * 18:20 – 19:00 | Talk
 * 19:15 – **:** | Dinner


 * What: "The Tale of a Fameless but Widespread Vulnerability" by Veit Hailperin (Scip):
 * Two key components account for finding vulnerabilities of a certain class: awareness of the vulnerability and ease of finding the vulnerability. Cross-Site Script Inclusion (XSSI) vulnerabilities are not mentioned in the de facto standard for public attention - the OWASP Top 10. Additionally there is no publicly available tool to facilitate finding XSSI. The impact reaches from leaking personal information stored, circumvention of token-based protection to complete compromise of accounts. XSSI vulnerabilities are fairly wide spread and the lack of detection increases the risk of each XSSI. In this talk I am going to demonstrate how to find XSSI, exploit XSSI and also how to protect against XSSI exploitation.


 * Where: [[Image:location.png|20px|link=https://goo.gl/maps/d3eqUeT3zQ12]]
 * Swisscom
 * Pfingstweidstrasse 51
 * 8005 Zürich


 * Who:
 * As usual, all of our meetings are open to everyone and free of charge.


 * Dinner:
 * For those of you, who would like to grab a bite afterwards, please additionally select the "Dinner" checkbox during your registration. This will allow us to reserve a large enough location.

= Past Meetings =

= Participation =

OWASP Chapter meetings are free and open. Our chapter's meetings are informal and encourage open discussion of all aspects of application security. Anyone in our area interested in application security is welcome to attend. We encourage attendees to give short presentations about specific topics.

Our main topics are:


 * Security testing
 * Secure development
 * Hacking
 * Secure Architectures

If you would like to give a presentation (make sure that you have read and understood the speaker agreement), or have any questions about the OWASP Switzerland Chapter, send an email to [mailto:sven.vetsch__AT__disenchant.ch Sven Vetsch].

= Sponsoring =

Help us to make application security visible and become a supporter of the OWASP or our Chapter in Switzerland. All information about becoming a member/sponsor can be found here.

If your company is interested in supporting us directly, please contact [mailto:sven.vetsch__AT__owasp.org Sven Vetsch] to talk about the following sponsoring possibilities.


 * Chapter Supporter
 * Single Meeting Supporter
 * Facility Sponsor
 * Organization Supporters (allocating 40% of your annual donation to our Chapter)

= Chapter Material =

Here you can find material related to the OWASP Switzerland Chapter.

OWASP Switzerland bylaws (in German) [[Media:Bylaws owasp switzerland.pdf|Download bylaws]]

OWASP Switzerland Update Presentation (December 13th 2011) [[Media:Owasp_update_presentation.pdf|Download Presentation]]

Switzerland