Difference between revisions of "Belgium"

From OWASP
Jump to: navigation, search
m (WHERE)
(PROGRAM)
 
(109 intermediate revisions by 4 users not shown)
Line 3: Line 3:
 
= Local News  =
 
= Local News  =
  
== Stay updated  ==
+
== Upcoming events ==
  
"'''BeNeLux Days 2012'''" is online: https://www.owasp.org/index.php/BeNeLux_OWASP_Day_2012.
+
=== Upcoming chapter meeting: 8 March 2016 (Leuven) ===
  
 +
On Tuesday 8 March 2016, we will have our next BE chapter meeting in Leuven.
  
If you want to be invited for the next OWASP Belgium Chapter meetings, please [http://eepurl.com/iFZtb drop us your contact info].
+
See https://www.owasp.org/index.php/Belgium#Chapter_Meetings for more details.
 +
 
 +
Registration via https://owasp-belgium-2016-03-08.eventbrite.com
 +
 
 +
=== OWASP BeNeLux Day 2016 ===
 +
 
 +
We are proud to announce the dates of the next edition of BeNeLux OWASP Day! The event will take place on 17 and 18 March 2016, in Belval Campus, in Esch-sur-Alzette - Luxembourg.
 +
 
 +
See [[BeNeLux OWASP Day 2016]] for more details.
 +
 
 +
 
 +
 
 +
== Stay in touch ==
 +
 
 +
=== Twitter ===
  
 
You can also follow us on [https://twitter.com/owasp_be Twitter]!
 
You can also follow us on [https://twitter.com/owasp_be Twitter]!
  
== Structural Sponsors 2012/2013  ==
+
=== OWASP-BE contact list ===
 +
 
 +
If you want to be invited for the next OWASP Belgium Chapter meetings, please [http://eepurl.com/iFZtb drop us your contact info].
 +
 
 +
=== OWASP-BE discussion mailing list===
 +
If you want to join the local chapter mailing list, please [http://lists.owasp.org/mailman/listinfo/owasp-belgium click here].
 +
 
 +
== Structural Sponsors 2013/2014 ==
 
OWASP Member affiliated to the Belgium chapter:
 
OWASP Member affiliated to the Belgium chapter:
  
{{MemberLinks|link=http://www.pwc.com/|logo=PWC_log_resized.png}}
+
{{MemberLinks|link=http://www.pwc.com/|logo=PWC_log_resized.png}} [[File:TSF logo blackred transparent.png|250px|link=http://www.thesecurityfactory.be/]]
  
OWASP Belgium thanks its structural chapter supporters for 2012 and the OWASP BeNeLux Days 2012:
 
  
[http://www.iminds.be https://www.owasp.org/images/thumb/a/a1/Iminds-logo.png/200px-Iminds-logo.png]
+
OWASP Belgium thanks its structural chapter supporters for 2013/2014 and the OWASP BeNeLux Days 2013:  
 +
 
 
[http://www.zionsecurity.com https://www.owasp.org/images/e/e6/Zionsecurity.jpg]
 
[http://www.zionsecurity.com https://www.owasp.org/images/e/e6/Zionsecurity.jpg]
[http://on2it.net https://www.owasp.org/images/3/3d/On2it-sponsor.png]
+
[http://www.nviso.be https://www.owasp.org/images/5/5e/Nviso_logo_RGB_baseline_200px.png]
 +
[http://www.Checkmarx.com https://www.owasp.org/images/a/a2/Checkmarx.jpg]
  
 
If you want to support our chapter, please contact [mailto:seba@owasp.org Seba Deleersnyder]
 
If you want to support our chapter, please contact [mailto:seba@owasp.org Seba Deleersnyder]
  
 
= Chapter Meetings  =
 
= Chapter Meetings  =
 
+
== Next Meeting (8 March 2016) in Leuven ==
 
+
 
+
 
+
== Next Meeting (5th of March 2013) in Leuven ==
+
  
 
=== WHEN ===
 
=== WHEN ===
5th of March 2013 (18h00 - 21h00)
+
Tuesday 8 March 2016
  
 
=== WHERE  ===
 
=== WHERE  ===
This chapter meeting is co-organized with '''[http://www.secappdev.org SecAppDev]'''.  
+
Hosted by [https://distrinet.cs.kuleuven.be iMinds-Distrinet Research Group (KU Leuven)].
  
Both speakers are faculty of the [http://www.secappdev.org Secure Application Development course] which is held in Leuven from 4 March 2013 until 8 March 2013. OWASP Members get a 10% discount to attend the course.
+
Both speakers are faculty of the [http://www.secappdev.org/ Secure Application Development] course which is held in Leuven from 7-11 March 2016. OWASP Members get a 10% discount to attend the course.
  
<BR/>
+
Address: <br>
Hosted by [http://distrinet.cs.kuleuven.be Distrinet Research Group (K.U.Leuven)].
+
Department of Computer Science (foyer at ground floor)<br> Celestijnenlaan 200 A<br> 3001 Heverlee ([http://googlemapsinterface.kuleuven.be/index.cgi?lang=N&nbol=(50.864186697481145,%204.678754210472107)&zoomlevel=17&plaatsnaam=Department+of+Computer+Science&maptype=roadmap google maps])
  
Address: <br> Department of Computer Science (meeting room '''05.128''' - fifth floor)<br> Celestijnenlaan 200 A<br> 3001 Heverlee <br>
+
Routemap: https://distrinet.cs.kuleuven.be/about/route/
 
+
Routemap: http://distrinet.cs.kuleuven.be/about/route/
+
  
 
=== PROGRAM ===
 
=== PROGRAM ===
 
The agenda:
 
The agenda:
*18h00 - 18h30: '''Welcome &amp; sandwiches'''<br>  
+
*18h15 - 19h00: '''Welcome & sandwiches'''<br>  
*18h30 - 18h45: '''OWASP Update''' (by Lieven Desmet, OWASP Belgium Board)<br>  
+
*19h00 - 19h15: '''OWASP Update''' <br>  
*18h45 - 19h45: '''25 Years of Vulnerabilities''' (by Yves Younan, Senior Research Engineer at Sourcefire)<br>
+
*19h15 - 20h15: '''Writing robust client-side code using Modern JavaScript''' (by Tom Van Cutsem, Bell Labs, Nokia)<br>
:This talk will take a look into the interesting world of vulnerability statistics. We have examined data for the last 25 years and used it to map out trends and general information on vulnerabilities in software. Some of the questions we look at are "What were the most popular vulnerabilities? Which had the most impact? Which vendors and products suffered from the most issues? Etc. While some of the statistics are predictable, others are surprising. This data was first introduced at RSA Conference San Francisco 2013.  
+
:''Abstract:'' In this talk, I will take the audience on a tour of recent evolutions in the JavaScript language (and surrounding ecosystem) and how they can use these changes to their advantage to write better client-side code that is more robust against bugs and other exploits. JavaScript — still unquestionably the dominant client-side language in use on the Web — has evolved significantly over the past five years, with two significant updates to ECMAScript, its defining standard. I will give a brief introduction to the language and its Good and Bad parts and then move on to features added in ECMAScript 5th edition, such as "strict mode", which are by now widely deployed in major browsers. Next, I will look at relevant language features that were introduced recently as part of ECMAScript 6th edition. Finally, I will give a brief introduction to Secure ECMAScript (SES), which is a secure JavaScript dialect that enables the safe embedding of third-party scripts in a webpage, also forming the basis for Google’s Caja compiler.
:'''Dr. Yves Younan''' is a Senior Research Engineer in the Vulnerability Research Team (VRT) at Sourcefire where he works on vulnerabilities and mitigations. Prior to joining Sourcefire, he worked as a Security Researcher with BlackBerry Security at Research In Motion. Before joining RIM, he was an academic, founding the Native Code Security group within the DistriNet research group at the KU Leuven in Belgium. He received a Master's degree in Computer Science from the Vrije Universiteit Brussel (VUB) and a PhD in Engineering: Computer Science from KU Leuven. His PhD focused on building efficient mitigations against vulnerability exploitation, several practical mitigations were published and presented at international conferences.
+
:''Bio:'' '''Tom Van Cutsem''' is a senior researcher at Nokia Bell Labs in Antwerp, Belgium. Prior to joining Bell Labs, he was a professor of computer science at Vrije Universiteit Brussel. He sat on the ECMA TC39 committee in charge of standardising JavaScript and actively contributed to the ECMAScript 2015 (a.k.a. “ES6”) standard. Together with Mark S. Miller, he designed and specified ECMAScript’s new reflection API. Tom's broader research interests lie in distributed systems, programming languages, stream processing, concurrency and parallelism. He received his PhD in 2008 from Vrije Universiteit Brussel for his research on AmbientTalk, a distributed scripting language for mobile phones.
*19h45 - 20h00: Break<br>  
+
*20h15 - 20h30: '''Break'''<br>  
*20h00 - 21h00: '''Banking Security: Attacks and Defences''' (by Steven Murdoch, Senior Researcher at University of Cambridge)<br>
+
*20h30 - 21h30: '''Internet censorship on Social Media''' (by prof. Dan Wallach, Rice University)<br>
:Designers of banking security systems are faced with a difficult challenge of developing technology within a tightly constrained budget, yet which must be capable of defeating attacks by determined, well-equipped criminals. This talk will summarise banking security technologies for protecting Chip and PIN/EMV card payments, online shopping, and online banking. The effectiveness of the security measures will be discussed, along with vulnerabilities discovered in them both by academics and by criminals. These vulnerabilities include cryptographic flaws, failures of tamper resistance, and poor implementation decisions, and have led not only to significant financial losses, but in some cases unfair allocation of liability. Proposed improvements will also be described, not only to the technical failures but also to the legal and regulatory regimes which are the underlying reason for some of these problems not being properly addressed.
+
:''Abstract:'' TBA
:'''Dr. Steven J. Murdoch''' is a Royal Society University Research Fellow in the Security Group of the University of Cambridge Computer Laboratory, working on developing metrics for security and privacy. His research interests include covert channels, banking security, anonymous communications, and censorship resistance. Following his PhD studies on anonymous communications, he worked with the OpenNet Initiative, investigating Internet censorship. He then worked for the Tor Project, on improving the security and usability of the Tor anonymity system. Currently he is supported by the Royal Society on developing methods to understand complex system security. He is also working on analyzing the security of banking systems especially Chip & PIN/EMV, and is Chief Security Architect of Cronto, an online authentication technology provider.
+
:''Bio:'' '''Dan Wallach''' is a professor in the systems group at Rice University's Department of Computer Science, He manages Rice's [http://seclab.cs.rice.edu/ computer security lab]. His research interests include mobile code, wireless and smartphone security, and the security of electronic voting systems.
  
 
=== REGISTRATION  ===
 
=== REGISTRATION  ===
Please register via [https://owasp-belgium-2013-03-05.eventbrite.com https://owasp-belgium-2013-03-05.eventbrite.com]
+
Please register via EventBrite: https://owasp-belgium-2016-03-08.eventbrite.com
 +
 
 +
=== Coverage ===
 +
 
 +
 
 +
 
  
 
== Past Events  ==
 
== Past Events  ==
 +
*Events held in [[Belgium Previous Events 2015|2015]]
 +
*Events held in [[Belgium Previous Events 2014|2014]]
 +
*Events held in [[Belgium Previous Events 2013|2013]]
 
*Events held in [[Belgium Previous Events 2012|2012]]
 
*Events held in [[Belgium Previous Events 2012|2012]]
 
*Events held in [[Belgium Previous Events 2011|2011]]  
 
*Events held in [[Belgium Previous Events 2011|2011]]  
Line 76: Line 101:
 
The Belgium Chapter is supported by the following board:  
 
The Belgium Chapter is supported by the following board:  
  
 +
*Sebastien Deleersnyder, Toreon
 
*Erwin Geirnaert, Zion Security  
 
*Erwin Geirnaert, Zion Security  
 
*Philippe Bogaerts, F5  
 
*Philippe Bogaerts, F5  
*André Mariën, Inno.com
+
*André Mariën, Euroclear
 
*Lieven Desmet, K.U.Leuven  
 
*Lieven Desmet, K.U.Leuven  
*Sebastien Deleersnyder, SAIT Zenitel
+
*Bart De Win, PWC
*Bart De Win, Ascure
+
*David Mathy, Freelance
*David Mathy, Focus ICT
+
  
 
Our goal is to professionalize the local OWASP functioning, provide in a bigger footprint to detect OWASP opportunities such as speakers/topics/sponsors/… and set a 5 year target on: Target audiences, Different events and Interactions of OWASP global – local projects. __NOTOC__ <headertabs/>
 
Our goal is to professionalize the local OWASP functioning, provide in a bigger footprint to detect OWASP opportunities such as speakers/topics/sponsors/… and set a 5 year target on: Target audiences, Different events and Interactions of OWASP global – local projects. __NOTOC__ <headertabs/>
 
[[Category:Europe]]
 
[[Category:Europe]]

Latest revision as of 14:55, 11 February 2016

OWASP Belgium

Welcome to the Belgium chapter homepage. The chapter leader is Sebastien Deleersnyder
Click here to join the local chapter mailing list.

Participation

OWASP Foundation (Overview Slides) is a professional association of global members and is open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.

Sponsorship/Membership

Btn donate SM.gif to this chapter or become a local chapter supporter.

Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member? Join Now BlueIcon.JPG

[edit]

Upcoming events

Upcoming chapter meeting: 8 March 2016 (Leuven)

On Tuesday 8 March 2016, we will have our next BE chapter meeting in Leuven.

See https://www.owasp.org/index.php/Belgium#Chapter_Meetings for more details.

Registration via https://owasp-belgium-2016-03-08.eventbrite.com

OWASP BeNeLux Day 2016

We are proud to announce the dates of the next edition of BeNeLux OWASP Day! The event will take place on 17 and 18 March 2016, in Belval Campus, in Esch-sur-Alzette - Luxembourg.

See BeNeLux OWASP Day 2016 for more details.


Stay in touch

Twitter

You can also follow us on Twitter!

OWASP-BE contact list

If you want to be invited for the next OWASP Belgium Chapter meetings, please drop us your contact info.

OWASP-BE discussion mailing list

If you want to join the local chapter mailing list, please click here.

Structural Sponsors 2013/2014

OWASP Member affiliated to the Belgium chapter:

PWC_log_resized.png        TSF logo blackred transparent.png


OWASP Belgium thanks its structural chapter supporters for 2013/2014 and the OWASP BeNeLux Days 2013:

Zionsecurity.jpg Nviso_logo_RGB_baseline_200px.png Checkmarx.jpg

If you want to support our chapter, please contact Seba Deleersnyder

Next Meeting (8 March 2016) in Leuven

WHEN

Tuesday 8 March 2016

WHERE

Hosted by iMinds-Distrinet Research Group (KU Leuven).

Both speakers are faculty of the Secure Application Development course which is held in Leuven from 7-11 March 2016. OWASP Members get a 10% discount to attend the course.

Address:
Department of Computer Science (foyer at ground floor)
Celestijnenlaan 200 A
3001 Heverlee (google maps)

Routemap: https://distrinet.cs.kuleuven.be/about/route/

PROGRAM

The agenda:

  • 18h15 - 19h00: Welcome & sandwiches
  • 19h00 - 19h15: OWASP Update
  • 19h15 - 20h15: Writing robust client-side code using Modern JavaScript (by Tom Van Cutsem, Bell Labs, Nokia)
Abstract: In this talk, I will take the audience on a tour of recent evolutions in the JavaScript language (and surrounding ecosystem) and how they can use these changes to their advantage to write better client-side code that is more robust against bugs and other exploits. JavaScript — still unquestionably the dominant client-side language in use on the Web — has evolved significantly over the past five years, with two significant updates to ECMAScript, its defining standard. I will give a brief introduction to the language and its Good and Bad parts and then move on to features added in ECMAScript 5th edition, such as "strict mode", which are by now widely deployed in major browsers. Next, I will look at relevant language features that were introduced recently as part of ECMAScript 6th edition. Finally, I will give a brief introduction to Secure ECMAScript (SES), which is a secure JavaScript dialect that enables the safe embedding of third-party scripts in a webpage, also forming the basis for Google’s Caja compiler.
Bio: Tom Van Cutsem is a senior researcher at Nokia Bell Labs in Antwerp, Belgium. Prior to joining Bell Labs, he was a professor of computer science at Vrije Universiteit Brussel. He sat on the ECMA TC39 committee in charge of standardising JavaScript and actively contributed to the ECMAScript 2015 (a.k.a. “ES6”) standard. Together with Mark S. Miller, he designed and specified ECMAScript’s new reflection API. Tom's broader research interests lie in distributed systems, programming languages, stream processing, concurrency and parallelism. He received his PhD in 2008 from Vrije Universiteit Brussel for his research on AmbientTalk, a distributed scripting language for mobile phones.
  • 20h15 - 20h30: Break
  • 20h30 - 21h30: Internet censorship on Social Media (by prof. Dan Wallach, Rice University)
Abstract: TBA
Bio: Dan Wallach is a professor in the systems group at Rice University's Department of Computer Science, He manages Rice's computer security lab. His research interests include mobile code, wireless and smartphone security, and the security of electronic voting systems.

REGISTRATION

Please register via EventBrite: https://owasp-belgium-2016-03-08.eventbrite.com

Coverage

Past Events

  • Events held in 2015
  • Events held in 2014
  • Events held in 2013
  • Events held in 2012
  • Events held in 2011
  • Events held in 2010
  • Events held in 2009
  • Events held in 2008
  • Events held in 2007
  • Events held in 2006
  • Events held in 2005

The Belgium Chapter is supported by the following board:

  • Sebastien Deleersnyder, Toreon
  • Erwin Geirnaert, Zion Security
  • Philippe Bogaerts, F5
  • André Mariën, Euroclear
  • Lieven Desmet, K.U.Leuven
  • Bart De Win, PWC
  • David Mathy, Freelance
Our goal is to professionalize the local OWASP functioning, provide in a bigger footprint to detect OWASP opportunities such as speakers/topics/sponsors/… and set a 5 year target on: Target audiences, Different events and Interactions of OWASP global – local projects.