Denver

Next Meeting
The next meeting of the Denver OWASP chapter will be on June 21st at 7:00PM. Accuvant will be hosting the meeting at their downtown office. They are located at 621 17th St., Room 1120 (11th Floor), Denver, CO 80293. The map has several parking locations indicated; if you need more detailed directions, please contact [mailto:david.byrne@echostar.com David Byrne]. Refreshments will be provided by Symplified.

The technical presentation will be by David Byrne from EchoStar Satellite. He will speak on Anti-DNS pinning attacks, a technique that allows an attacker to leverage cross-site-scripting to turn a web browser into a proxy server. This is done using standard browser functionality; no client-side vulnerabilities are required. The end-result is that network firewalls can are completly bypassed to access internal servers. The presentation will focus on a live demonstration of an attack.

The non/less technical presentation will be by David Stevens from Symplified. He will discuss methods to calculate Return on Security Investment (ROSI). Considering how difficult it often is to get funding for security initiatives, this is a useful skill for any security professional or security manager.

Future Meetings
Below is a list of potential topics for future meetings. If you are interested in presenting, or at least contributing to the content of a presentation on any topic, please send [mailto:davidribyrne@yahoo.com David Byrne] an e-mail. Feel free to submit ideas for other topics as well.


 * Common security mistakes and best practices for
 * .Net
 * J2EE
 * Performing security-oriented code reviews
 * HTTP message spliting attacks
 * Sarbanes Oxley (SOX) compliance, relating to web apps

Past Meetings
April 2007

February 2007

January 2007

November 2006