Switzerland

= Welcome =



Welcome to the Home Page of the OWASP Switzerland Chapter.


 * The chapter leader is [mailto:sven.vetsch__AT__owasp.org Sven Vetsch] supported by [mailto:robert.schneider__AT__owasp.org Robert Schneider] and [mailto:antonio.fontes__AT__owasp.org Antonio Fontes]. Please contact us with any questions regarding the chapter.
 * Please join us on Meetup and/or subscribe to our (low-traffic) mailing list for meeting announcements and other news related to OWASP in Switzerland.

If you're living in the French speaking part of Switzerland, please also visit the OWASP Geneva chapter for more information.

= Next Meetings = We'd like to invite you to our next OWASP Switzerland meeting. If you want to attend, please make sure to register for the event through the Meetup registration. Seats are limited.




 * When: Wednesday, August 16th 2017
 * 17:30        | Doors will open
 * 18:00 – 18:15 | Update on OWASP
 * 18:20 – 19:30 | Talk & Discussion
 * 19:30 – **:** | Dinner




 * What: "Introducing the OWASP ModSecurity Core Rule Set 3.0" by Christian Folini:
 * Talk:
 * The CRS is a set of generic attack detection rules for use with ModSecurity or compatible web application firewalls that saw a new major release in November 2016 (3.0 -> CRS3). CRS is the 1st line of defense against web application attacks like those summarized in the OWASP Top Ten and all with a minimum of false alerts.
 * This talk demonstrates the installation of the rule set and introduces the most important groups of rules. It covers key concepts like anomaly scoring and thresholds, paranoia levels, stricter siblings and the sampling mode. The important handling of false positives is also covered as well as pre-defined lists of rule exclusions for popular web applications helping to avoid false positives.
 * Speaker
 * Christian Folini is a partner at netnea AG in Berne, Switzerland. He holds a PhD in medieval history and enjoys defending castles across Europe. Unfortunately, defending medieval castles is no big business anymore and Christian turned to defending web servers which he thinks equally challenging. With his background in humanities, Christian is able to bridge the gap between techies and non-techies. He brings more than ten years experience in this role, specialising in Apache / ModSecurity configuration, DDoS defense and threat modeling.
 * Christian is a frequent committer to the OWASP ModSecurity Core Rules project, vice president of Swiss Cyber Experts (a public private partnership), program chair of the Swiss Cyberstorm conference and many other things.


 * Where:
 * Tbd: but in Zürich ;)


 * Who:
 * As usual, all of our meetings are open to everyone and free of charge.


 * Dinner:
 * No official dinner is planned.
 * If you still would like to grab a bite afterwards, simply stay a little longer after the meeting and we will form up a group of hungry people. ;)

To make sure you are not going to miss any of our upcoming events, please join us on us on Meetup and/or subscribe to our (low-traffic) mailing list.

Teaser: Monday, October 16th 2017 - DevOps

= Past Meetings =

= Participation =

OWASP Chapter meetings are free and open. Our chapter's meetings are informal and encourage open discussion of all aspects of application security. Anyone in our area interested in application security is welcome to attend. We encourage attendees to give short presentations about specific topics.

Our main topics are:


 * DevOps
 * Security testing
 * Secure development
 * Hacking
 * Secure Architectures

If you would like to give a presentation (make sure that you have read and understood the speaker agreement), or have any questions about the OWASP Switzerland Chapter, send an email to [mailto:robert.schneider__AT__owasp.org Robert Schneider].

= Sponsoring =

Help us to make application security visible and become a supporter of the OWASP or our Chapter in Switzerland. All information about becoming a member/sponsor can be found here.

If your company is interested in supporting us directly, please contact [mailto:sven.vetsch__AT__owasp.org Sven Vetsch] to talk about the following sponsoring possibilities.


 * Chapter Supporter
 * Single Meeting Supporter
 * Facility Sponsor
 * Organization Supporters (allocating 40% of your annual donation to our Chapter)

= Chapter Material =

Here you can find material related to the OWASP Switzerland Chapter.

OWASP Switzerland bylaws (in German) [[Media:Bylaws owasp switzerland.pdf|Download bylaws]]

OWASP Switzerland Update Presentation (December 13th 2011) [[Media:Owasp_update_presentation.pdf|Download Presentation]]