Dallas

THANKS TO OUR SPONSORS: The Dallas Chapter of OWASP would like to thank Richland College for hosting our monthly meetings.

Get Connected and Stay Connected
The Dallas OWASP chapter is proud to announce several new ways to keep in touch with the leadership and other members of the chapter and greater organization.

In addition to our Mailing List we also have a Dallas OWASP Twitter Feed a Dallas OWASP Facebook Page and a Dallas OWASP Linkedin Group. We invite you to join or follow whichever groups suit you, get involved with your fellow Dallas OWASP Chapter members, and we'll keep them all up to date with the latest official news and announcements from the chapter leadership.

Click any of the links below to visit the corresponding Dallas OWASP social networking groups:

February Meeting
When: Wednesday February 6, 2013 from 11:30 AM – 1:00 PM

Topic:  Using Webappsec Vulns to Break Censorship

The technical means by which just-in-time censorship works has a number of potentially fatal flaws. One of which can be easily used against itself by leveraging common web application security flaws. This presentation will explore both the censorship technology itself as well as how censorship might be completely subverted, in some cases with something as simple as a single line of text. These techniques, if ever used, could lead to something as small as causing regimes to re-think what they censor, up to and including country-wide DoS or worse.

Who:: Robert Hansen, a.k.a. rsnake

Mr. Hansen (CISSP and CEO of Falling Rock Networks) has worked for Digital Island, Exodus Communications and Cable & Wireless in varying roles from Sr. Security Architect and eventually product managing many of the managed security services product lines. He also worked at eBay as a Sr. Global Product Manager of Trust and Safety, focusing on anti-phishing, anti-DHTML malware and anti-virus strategies. Later he worked as a director of product management for Realtor.com. Robert sits on the advisory board for the Intrepidus Group, and Lockify and currently contributes to the security strategy of several startup companies. Mr. Hansen wrote Detecting Malice authors content on O'Reilly and co-authored "XSS Exploits" by Syngress publishing. He also has briefed the DoD at the Pentagon and speaks at SourceBoston, Secure360, GFIRST/US-CERT, CSI, Toorcon, APWG, ISSA, TRISC, World OWASP/WASC conferences, SANS, Microsoft's Bluehat, Blackhat, DefCon, SecTor, BSides, Networld+Interop, and has been the keynote speaker at the New York Cyber Security Conference, NITES and OWASP Appsec Asia. Mr. Hansen is a member of Infragard, WASC, IACSP, APWG, contributed to the OWASP 2.0 guide and is on the Content Review Board for Blackhat. He is also a mentor at TechStars.

Where: Richland College, 12800 Abrams Road, Dallas, TX 75243, Room: Sabine Hall: SH117 (Please Note Room Change)

Map

January Meeting
No Dallas OWASP meeting in Jan.

December Meeting
No Dallas OWASP meeting in Dec.

November Meeting
When: Wednesday November 7, 2012 from 11:30 AM – 1:00 PM

Topic:  Flame, Stuxnet, One to be Named and the Elderwood Project - Today’s Threat Landscape

Who: John R. Hill, CISSP, Principal Security Strategist Security Business Practice Symantec

Where: Richland College, 12800 Abrams Road, Dallas, TX 75243, Room: Sabine Hall: SH118

Map

October Meeting
When: Wednesday October 3, 2012 from 11:30 AM – 1:00 PM

Topic:  Exploitation Techniques and Mitigation

Who: James McFadyen, Information Security Engineer and Director of Customer Support at HAWK Network Defense, Inc

Where: Richland College, 12800 Abrams Road, Dallas, TX 75243, Room: Sabine Hall: SH118

Map

September Meeting
When: Wednesday September 12, 2012 from 11:30 AM – 1:00 PM

Topic:  The Importance of Application Security.

Who: Peter Perfetti; Director, Security Services & Operations IMPACT Security, LLC

Where: Richland College, 12800 Abrams Road, Dallas, TX 75243, Room: Sabine Hall: SH118

Map

August Meeting
When: Wednesday August 1, 2012 from 11:30 AM – 1:00 PM

Topic:  Malicious Math: Recent Real-World Cryptographical and Computational Threats on the Web.

Who: Derek Soeder, founder, Ridgeway Internet Security

Where: Richland College, 12800 Abrams Road, Dallas, TX 75243, Room: Sabine Hall: SH118

Map

Slides: [[Media:Malicious Math - Final.pptx‎]]

July Meeting
When: Wednesday July 11, 2012 from 11:30 AM – 1:00 PM

Topic:  Reinventing Dynamic Testing: Real-Time Hybrid

Who: Adam Hils; Senior Product Manager HP Enterprise Security Products

Where: Richland College, 12800 Abrams Road, Dallas, TX 75243, Room: Sabine Hall: SH118

Map

June Meeting
When: Wednesday June 6, 2012 from 11:30 AM – 1:00 PM

Topic:  Is There An End to Testing Ourselves Secure?

Who: Rohit Sethi; Vice President, Product Development, SD Elements

Where: Richland College, 12800 Abrams Road, Dallas, TX 75243, Room: Sabine Hall: SH118

Map

May Meeting
When: Wednesday, May 2, 2012 from 11:30 AM to 1:00 PM

Topic:  OWASP and PCI DSS Requirement 6.5

OWASP and PCI DSS Requirement 6.5. Keeping current with the OWASP top 10 and how it impacts companies PCI compliance and training. Tony will discuss how McAfee complies to the requirement and how McAfee must make changes to match the current top 10 as well has making sure that developers keep up to date on training. Who: Tony Gunn; Director of Security Operations for McAfee Where: North Lake College (Central Campus) 5001 N. MacArthur Blvd. Irving, TX 75038 Phone: 972-273-3000 Building: A Room: 206

Map

March Meeting
When: March 7, 2012, 11:30am - 1:00pm

Topic:  AAA for Hybrid Cloud Environment

During this session, presented by Symplified, we will explore four areas of interest.

Web, SaaS, Mobile Application Adoption Protecting sensitive data WAM for the Public Cloud Identity Sprawl

Who: Cullen Landrum, CISSP is a Senior Systems Engineer at Symplified.

Where: North Lake College (Central Campus), 5001 N. MacArthur Blvd. Irving, TX 75038 Phone: 972-273-3000 Building: A Room: 206

Map

February Meeting
When: February 1, 2012, 11:30am - 1:00pm

Topic:  Web Application Vulnerability Testing with Nessus

Who: Rik A. Jones is a Senior Information Security Analyst for the Dallas County Community College District (DCCCD)

Where: SMU Caruth Hall Palmer Conference Center / 406 Caruth Hall 3145 Dyer Street Dallas, Texas 75205

Map (Caruth Hall is building 44 on the campus map link.)

January Meeting
When: January 11, 2012, 11:30am - 1:00pm

Topic:  OWASP TOP 10

Power point demonstration of OWASP Top Ten Web Application Security Vulnerabilities with actual hacking examples. This presentation will cover such vulnerabilities as SQL injection, XSS and CSRF. Discussion, hands on exercise and question and answer session.

Who: Matt Parsons, VP Parsons Software Security Consulting

Where: North Lake College (Central Campus) 5001 N. MacArthur Blvd. Irving, TX 75038 Phone: 972-273-3000 Building: G Room: 405

Map

November 7, 2012
Title:  Internet Security Threat Report

Speaker: John R. Hill, CISSP, Principal Security Strategist Security Business Practice Symantec

Slides: [[Media:Symantec_ISTR_17.pdf‎]]

February 1, 2012
Title: Web Application Vulnerability Testing with Nessus

Speaker: Rik A. Jones, Senior Information Security Analyst for the Dallas County Community College District (DCCCD)

Slides: [[Media:Web Application Vul Testing with Nessus 2012.02.01.pdf‎]] [[Media:OWASP Broken Web Applications 2012.02.01.pdf‎]]

January 11, 2012
Title: OWASP TOP 10

Speaker: Matt Parsons, VP Parsons Software Security Consulting

Slides: [[Media:OWASPtopTen.pdf‎]]