OWASP Foundation (Overview Slides) is a professional association of global members and is open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.
Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member? }
Upcoming Chapter Meetings
- The next chapter meeting will be in February 20 2019 in Leuven: Registration via https://owasp-belgium-2019-02-20.eventbrite.com/
See https://www.owasp.org/index.php/Belgium#Chapter_Meetings for more details and older meetings.
Stay in Touch
If you want to be invited for the next OWASP Belgium Chapter meetings, please drop us your contact info.
Structural Sponsors 2019
OWASP Belgium thanks its structural chapter supporters for 2019 and the OWASP BeNeLux Days 2018:
If you want to support our chapter, please contact Seba Deleersnyder
20 February 2019 Meeting
- Host: DistriNet Research Group (KU Leuven) (Both speakers are faculty of the Secure Application Development course held in Leuven from 2019-02-18 to 2018-02-22.)
Department of Computer Science (foyer at ground floor) Celestijnenlaan 200 A 3001 Heverlee
- 18h15 - 19h00: Welcome & sandwiches
- 19h00 - 19h10: OWASP Update by Sebastien Deleersnyder (OWASP)
- 19h10 - 20h00: ''CSP in the age of Script Gadgets by Prof. Martin Johns (TU Braunschweig)
- 20h00 - 20h10: Break
- 20h10 - 21h00: Zero to DevSecOps - security in a DevOps world (part 1, 2, 3) by Jimmy Mesta (CTO, Manicode Security)
CSP in the age of Script Gadgets
- Speaker: Prof. Martin Johns (TU Braunschweig)
- Presentation: not yet available
Content Security Policy (CSP) was first introduced in 2012. It should have been a silver-bullet defense against various injection attacks, including the rampant Cross-Site Scripting vulnerabilities. Unfortunately, modern development practices and legacy code bases proved to be substantial obstacles. New versions of CSP were released to address usability and compatibility for developers. Unfortunately, researchers discovered many bypasses and vulnerabilities in real-world CSP policies. The latest problem is known as script gadgets, where data is turned into code by legitimate functionality.
In this session, we will take a look at the problems you might encounter when deploying CSP. We start at CSP level 1 and work towards the latest level 3 version. We discuss CSP's features, potential bypasses, and pitfalls to avoid. In the end, you will have gained the knowledge to deploy a secure and effective CSP policy.
Martin Johns is a full professor at the TU Braunschweig.
Zero to DevSecOps - security in a DevOps world
- Speaker: Jimmy Mesta (CTO, Manicode Security)
- Presentation: not yet available
The way that software is being deployed is undergoing a massive transformation. As a result, security teams are at a point where they must adapt or be left in the dust. Traditional application security used to be heavyweight and human-driven. Tasks are more often than not mostly manual efforts. Time-consuming security testing often breaks down in an automated world. Dynamic vulnerability scanning and manual code reviews are incompatible with a world where code changes are automatically being pushed to production hundreds of times per day.
This talk will share lessons learned from helping teams of all sizes and maturity levels with their transformation to a DevSecOps model where security goes from being a blocker to an enabler. Specifically, we will cover some of the tools and processes you can start using right now. These tools allow you to start adding real value to your organization through enhanced visibility, vulnerability discovery, and feedback loops. It is time to adapt and embrace a new era of security.
Jimmy Mesta is CTO at Manicode Security. He is a DevSecOps, Mobile, and Kubernetes Secure Coding Instructor.
Registration is via EventBrite: https://owasp-belgium-2019-02-20.eventbrite.com.
The Belgium Chapter is supported by the following board:
- Sebastien Deleersnyder, Toreon
- Lieven Desmet, KU Leuven
- Bart De Win, PWC
- Erwin Geirnaert, Zion Security
- David Mathy, Freelance
- Adolfo Solero, Freelance
- Stella Dineva, Ingenico Payment Services
- Thomas Herlea, NVISO
Our goal is to professionalize the local OWASP functioning, provide in a bigger footprint to detect OWASP opportunities such as speakers/topics/sponsors/… and set a 5 year target on: Target audiences, Different events and Interactions of OWASP global – local projects.