Newcastle

= Next Meeting =

The next meeting will take place on 29/09/2015 from 18:00 to 21:00 at Northumbria University Ellison Building EBA002. We are changing the format this time and having 3 small 20 minute talks, a refreshment break and then a single 60 minute talk

We are still looking for a speaker for the long talk, but the short sessions are


 * John Beddard on Securing Real-Time Networks
 * Ian Oxley on Content Security Policy
 * Mike Goodwin talking about his OWASP threat modelling tool project
 * Neil Dixley on 'OWASP Top 10 Mobile Risks'

If you would like to volunteer to speak at this or any future meetings, please get in contact with the chapter leaders - you would be very welcome!

= Upcoming Events =

The next event will be run on 29/09/2015 from 18:00 to 21:00 at Northumbria University Ellison Building EBA002.

This is the Fourth Meeting of the Newcastle Chapter.

We are changing the format this time and having 3 small 20 minute talks, a refreshment break and then a single 60 minute talk.

The talks are as follows:

18:00 - 18:20 John Beddard on Securing Real-Time Networks which should prove extremely interesting given the amount of sysops we have!

18:20 - 18:40 Ian Oxley on Content Security Policy

18:40 - 19:00 Mike Goodwin talking about his OWASP threat modelling tool project.

19:00 - 20:00 Pizza!

20:00 - 21:00 Neil Dixley on 'OWASP Top 10 Mobile Risks': An introduction to using the OWASP top 10 for mobile risks for secure mobile development, including an overview of the OWASP Mobile Security Project and how you can participate.

Everyone is free to attend.

= Past Events =

2015 Dates

29/09/2015 from 18:00 to 21:00 at Northumbria University Ellison Building EBA002

Speakers:


 * John Beddard on Securing Real-Time Networks (short talk) [[Media: PassiveDefense_Newcastle_Chapter_Sept_2015.pdf]]
 * Ian Oxley on Content Security Policy (short talk) (awaiting slides)
 * Mike Goodwin on Threat Dragon - a new threat modelling tool project from OWASP (short talk) [[Media: OWASP_Threat_Dragon_Newcastle_Chapter_Sept_2015.pptx]]
 * Neil Dixley on 'OWASP Top 10 Mobile Risks' (long talk) [[Media: OWASP_Mobile_Security_Project_Newcastle_Chapter_Sept_2015.pptx]]

28/07/2015 from 18:00 to 21:00 at Northumbria University Ellison Building EBA102B.

We changed the format for this meeting and has 3 short talks (approx 20 mins) and then one long one (60 mins).

Speakers: [[Media: OWASP_Honeypots.odp]]
 * Andrew Waite: Honeypots; from research to the Enterprise.

[[Media: OWASP_Security_Containerisation.ppt]]
 * George Chlapoutakis: Security in the World of Containerisation.

Speakers: An introduction to penetration testing, using several OWASP projects as well as other open source and free programs. [[Media: An_introduction_to_penetration_testing.pptx]]
 * Robin Fewster: An introduction to basic application penetration testing.

An introduction to threat modelling and using the 'Elevation of Privilege' card game to facilitate and improve team threat modelling exercises. [[Media: Threat_Modeling_Presentation.pptx]]
 * Neil Dixley: The Elevation of Privilege Threat Modelling Tool.

24/03/2015 from 18:00 to 21:00 at Northumbria University Ellison Building EBA002.

Speakers:


 * Neil Dixley: Cognitive Bias and Security Vulnerabilities: The psychology of software engineering. An introduction to the psychology of cognitive bias and how human nature and cognitive biases are the key to user based security vulnerabilities. A look at how our brains trick us into feeling safe while giving our pin number to strangers on the phone plus a look at how we can use technology to disrupt cognitive bias and use these human traits to mitigate threats and strengthen application security. [[Media:Cognitive_Bias_and_Security_Vulnerabilities__Presentation.pptx]]
 * Andy Ward: Security Compliance for Developers - Are we Certified... or Certifiable?. Against a background of increasing threats and hacks, with more and more of our personal lives and business processes conducted online, it's never been more important to ensure our software is secure and robust. But how do you prove it? These days, reassuring your customers takes more than an SSL padlock, and some marketing spiel mentioning 'banking grade encryption'! After a quick reminder of "what's the worst that can happen...", Andy will introduce some of the security Compliance and Certification systems that help you 'walk the walk', and provide confidence that your system has its security in good hands, before looking at what it means for developers and engineering teams. [[Media: OWASP_Compliance_for_Devs.pptx]]

= Chapter Leaders =

The chapter leaders are:


 * Connor Carr
 * Mike Goodwin

Once the group is up and running we will be looking for more leaders.

= Sponsorship =

The Newcastle chapter is very grateful to Sage (platinum sponsor) for its generous support.



Chapter sponsorship helps pay for venue hire, pizzas, speaker travel expenses, pizzas, giveaway swag for meetings and pizzas. Also, a proportion of the sponsorship goes to support the OWASP global mission. If you would like to sponsor the chapter, please contact one of the chapter leaders. The corporate sponsorship costs are:


 * Platinum sponsor (£1200)
 * Gold sponsor (£600)
 * Silver sponsor (£300)

Any other donation is also gratefully received.

= Local Organisations =

Other related organisations in the Newcastle area:


 * (ISC)2 North East Chapter - for information, contact the chapter secretary, [mailto:robin.fewster@sage.com Robin Fewster], the chapter president [mailto:ken.walls@rpmi.co.uk Ken Walls], the chapter membership officer [mailto:scott.wakeling@atos.net Scott Wakeling] or the chapter treasurer [mailto:gleishman@secnetics.com Gordon Leishman]. Their next meeting is on 22nd September at PricewaterhouseCoopers LLP, Central Square South, Orchard Street, Newcastle upon Tyne, NE1 3AZ

Please get in touch with one of the chapter leaders to get your organisation listed here.

And feel free to use the Newcastle mailing list to publicise related events.