Toronto

The mailing list archive can be accessed from here.

Upcoming Meeting, June 21st 2007
The next chapter meeting will be held on June 21st at 20the floor, 79 Wellington Street West, Toronto, ON M5K 1B9 .

Topic: Incorporating security into the SDLC

Description: Incorporating security into the SDLC has been the subject of academic studies for years. However, as hacking has evolved from a hobbyist's sport to organized professionals focused on monetization, enterprises have been forced to take concerted countermeasures. Banks, often the target of cyber attacks, have set an example for responsible security strategies by adopting SDLCs that shift from a reactive response to the latest attack to the proactive development of software systems that are among the most secure in today's world. How do the world's leading financial institutions balance risk against the pressures of delivering software to customers quickly? How are developers trained to write code securely? How are software security tools, such as dynamic and static analysis, deployed for optimal use?

Presenter :

Matt Rose, Senior Software Security Consultant

Matt Rose has 10 years of software development experience that includes Sun, Bea, and Plumtree Software. His development experience includes .NET (VB.NET & C#) as well as Java. Matt has lead SDLC implementations and development projects onsite with clients across many industry verticals. These verticals include but are not limited to Financial, Retail, Insurance, and Healthcare.

Randy Schmitz, District Manager

Randy Schmitz has over 10 years experience in software sales. Randy has been instrumental in creating awareness and sales in the New England States and Eastern Canadian markets over the last 2 years. Prior to his experience at Fortify Software, Randy also worked the same geographic region for Embarcadero Technologies supporting database and development tools sales.

Sponsorship
Many thanks to Deloitte & Touche LLP. for sponsoring the location and food for these meetings.

Speakers
We are always looking for speakers to present on their topic of choice. If you are interested please contact [mailto:nish@securitycompass.com Nish Bhalla]

OWASP Toronto Chapter Committee
The OWASP Toronto Chapter has formed a committee which would help with direction of the chapter. Deloitte & Touches' Application Security Group and Security Compass's Professional Services Group are helping lead this initiative. We are looking for additional members to expand our chapter.

Current Committe Members
Nish Bhalla Reza Kopaee

Meetings
Everyone is welcome to join us at our chapter meetings. These meetings are held every Second Wednesday of the month. We meet at the conference room at Deloitte & Touche. Beverages and snacks are provided.

Address and Directions to the meeting are:

20th floor, the TLC Room (signs will be provided on the floor) TD Centre, TD Waterhouse Tower 79 Wellington Rd. W. Toronto

Directions to the meetings

OWASP Toronto chapter meetings are open to the public RSVP is requested by sending an [mailto:owasp-rsvp@securitycompass.com email]

Past Presentations For Download
The past presentations are avaiable for download from here. If you have any comments on the presentations please send them to us.

Basic Web Application Testing Methodology by Nish Bhalla Security Compass

Basic Web Services Security by Rohit Sethi Security Compass

Authentication Security by Hui Zhu

Identity Management Basics by Derek Browne