Difference between revisions of "Boulder"

From OWASP
Jump to: navigation, search
(September 17, 2009 Sql injection)
(25 intermediate revisions by 6 users not shown)
Line 1: Line 1:
{{Chapter Template|chaptername=Boulder|extra=The chapter leaders are [mailto:kthaxton@businesspartnersolutions.com Kathy Thaxton], [mailto:mrhits777@gmail.com Jeremy Martinez], and [mailto:Andrew.Riesel@GMail.com Andrew Riesel]|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-boulder|emailarchives=http://lists.owasp.org/pipermail/owasp-boulder}}
+
{{Chapter Template|chaptername=Boulder|extra=The chapter leader is [[User:Mark_Major|Mark Major]].
 +
|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-boulder|emailarchives=http://lists.owasp.org/pipermail/owasp-boulder}}
  
<paypal>Boulder</paypal>
+
== Upcoming Events ==
  
Next Meeting of the Boulder OWASP will be September 24, 2009 at Staples in Broomfield.
+
'''Thursday, November 15th at 6pm – Identity Management with Ram'''
  
 +
November's topic is "Identity and Access Management for OWASP" by Ram.  There are various aspects to security -- and this talk will explain the Identity and Access Management part of the security spectrum. Web applications typically need authenticated access and they have various roles that need to be authorized depending on business needs.
  
=== Directions to Staples: ===
+
In addition to our presentation, we welcome everyone's participation in the open topic discussion.  While entirely impromptu, October's discussion on PEN testing was detailed and informative, demonstrating the value of collaborating with peers.  Security professionals: Remember to invite a developer!
  
'''Staples: [http://maps.google.com/maps?q=1+Environmental+Way,+Broomfield,+CO+80021,+USA&sa=X&oi=map&ct=title One Environmental Way, Broomfield, Co. 80021]'''
+
Presenter Bio: Ram graduated from Perry Mason thrillers to reading about Pascal, C, C++ and OOP by the time he was 16. Corporate life started him off on IBM mainframes. That did not last long before he got back into Java and C++. The 9/11 incident threw him into Security and he got to dabble a fair bit in the Identity and Access Management space. He is very fortunate to have been able to add to his geek credentials by gaining soft skills (very important skill for security folks) in dealing with "situations" on numerous occasions in a customer facing role. He also loves the outdoor pursuits of Colorado.
  
=== Agenda ===
+
Many thanks to [http://www.aerstone.com/ Aerstone] for hosting and refreshments.
* 6 to 7:00 Dinner @ [http://maps.google.com/maps?f=q&hl=en&geocode=&q=Corporate+Express+1+Environmental+Way,+Broomfield+colorado&sll=39.935803,-105.13092&sspn=0.077395,0.144711&ie=UTF8&ll=39.926934,-105.126565&spn=0.009676,0.018089&z=16&iwloc=A Staples CE - Broomfield]
+
  
* 7pm to 8:30 pm Cross-site scripting lab
+
Seating is limited and is prioritized for those who [http://www.meetup.com/OWASP-Boulder/ RSVP]If you have a change of plans, please update your RSVP status to allow space for those on the waiting list.
Sponsor:  '''Nope, no sponsorIt'a your chapter, BYO dinner and/or order pizza at 6'ish'''
+
  
Speaker: tbd
+
The meeting will be held at the [https://maps.google.com/maps?q=1711+Pearl+St,+Boulder,+CO+80302&hl=en&ll=40.018955,-105.272412&spn=0.005801,0.016512&sll=40.019446,-105.273058&layer=c&cbp=13,345.63,,0,0.03&cbll=40.019323,-105.273016&hnear=1711+Pearl+St,+Boulder,+Colorado+80302&t=m&z=17&panoid=5v0RhKi7sjpi-Z5HcgKFFw Aerstone offices] on 17th and Pearl. Parking is available through the [http://files.meetup.com/3503072/Parking.png Whittier Neighborhood Zone] for up to three hours daily. As always, food and drinks are free and there will be an open networking session after the meeting.
  
=== Logistics ===
+
[[Category:OWASP Chapter]]
Please bring a wifi equipped laptop.  We recommend the [http://www.owasp.org/index.php/Category:OWASP_Live_CD_2008_Project OWASP LiveCD].  Go ahead and download it and familiarize yourself with it ahead of time, if you're so inclined.
+
[[Category:Colorado]]
 
+
 
+
Following the meeting we will have informal discussions over beverages at the [http://maps.google.com/maps?f=q&hl=en&geocode=&q=Gordon+Biersch+Brewery+Broomfield+colorado&ie=UTF8&ll=39.935803,-105.13092&spn=0.077395,0.144711&z=13&iwloc=A Gordon Biersch Brewery and Restaurant].
+
 
+
 
+
-----------------------------------------------------------------------
+
 
+
== Boulder OWASP 2009 AGENDA ==
+
=== May 21, 2009 Cross site scripting Lab ===
+
Lab to explain how to attack vulnerable sites –we will use three different examples and
+
Spend  one half hour on each:  Basic attacks, intermediate and advanced.
+
Teacher TBA.
+
 
+
We will be using the OWASP Live CD and will have them available.
+
Must have laptop with CD player. 
+
Meeting will be at Staples:  One Environmental Way, Broomfield, Co. 80021
+
Brown bag or we can order pizza when everyone gets there.
+
6pm to 7pm dinner and Lab from 7pm to 8:30
+
Drinks at Gordon Biersch after the lab.  Topics up for discussion (we’ll choose one):
+
 
+
Black Hat DC researchers demonstrate new cross-site scripting browser hack that lets attackers retrieve data without a trace
+
 
+
[http://developers.slashdot.org/article.pl?sid=09/05/09/1339213 Should Developers Be Liable For Their Code?]
+
 
+
=== June 18, 2009 Part 2 Cross Site Scripting Lab – put it into practice – how to defend against Cross site scripting ===
+
We will defend against a basic attack, an intermediate and advanced.
+
Teacher TBA
+
Remember to bring your OWASP Live CD and your laptop with CD player.
+
Location will be at CSU in Fort Collins.  Directions will be forthcoming.
+
6:30 to 7pm Dinner (Brown Bag or we will all order pizza) Lab from 7pm to 9pm.
+
 
+
=== No meetings July or August 2009 === 
+
We will try to put up the sites that we are defending against in the June Lab so that you can have a go at them over the break.
+
 
+
=== September 24, 2009 Sql injection ===
+
We will be using SQL injection to attack using  authentication bypass, database enumeration, adding users through sql injection, Data mining, writing code
+
Teacher TBA
+
We will be using the OWASP Live CD and will have them available.
+
Must have laptop with CD player. 
+
Meeting will be at Staples:  One Environmental Way, Broomfield, Co. 80021
+
Brown bag or we can order pizza when everyone gets there.
+
6pm to 7pm dinner and Lab from 7pm to 8:30
+
Drinks at Gordon Biersch after the lab.  Topics up for discussion (TBA).
+
 
+
=== October, 22, 2009 Defense against sql injection – how to sanitize user input ===
+
Teacher TBA
+
We will be using the OWASP Live CD and will have them available.
+
Must have laptop with CD player. 
+
Meeting will be at Staples:  One Environmental Way, Broomfield, Co. 80021
+
Brown bag or we can order pizza when everyone gets there.
+
6pm to 7pm dinner and Lab from 7pm to 8:30
+
Drinks at Gordon Biersch after the lab.  Topics up for discussion (TBA).
+
 
+
=== November, 19, 2009 This Lab will put into action the SQL injection attack and the defense.  ===
+
We will be using the attacks from the September meeting and then defending against them.
+
We will be using the OWASP Live CD and will have them available.
+
Must have laptop with CD player. 
+
Meeting will be at Staples:  One Environmental Way, Broomfield, Co. 80021
+
Brown bag or we can order pizza when everyone gets there.
+
6pm to 7pm dinner and Lab from 7pm to 8:30
+
Drinks at Gordon Biersch after the lab.  Topics up for discussion (TBA).
+
 
+
 
+
=== December  - Date TBA  “Capture the Holiday flag” ===
+
We are planning on reserving space at a restaurant.  What better way to Capture the Flag than over a couple of beers?
+

Revision as of 23:17, 25 October 2012

Contents

OWASP Boulder

Welcome to the Boulder chapter homepage. The chapter leader is Mark Major.
Click here to join the local chapter mailing list.

Participation

OWASP Foundation (Overview Slides) is a professional association of global members and is and open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.

Sponsorship/Membership

Btn donate SM.gif to this chapter or become a local chapter supporter.

Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member? Join Now BlueIcon.JPG

Upcoming Events

Thursday, November 15th at 6pm – Identity Management with Ram

November's topic is "Identity and Access Management for OWASP" by Ram. There are various aspects to security -- and this talk will explain the Identity and Access Management part of the security spectrum. Web applications typically need authenticated access and they have various roles that need to be authorized depending on business needs.

In addition to our presentation, we welcome everyone's participation in the open topic discussion. While entirely impromptu, October's discussion on PEN testing was detailed and informative, demonstrating the value of collaborating with peers. Security professionals: Remember to invite a developer!

Presenter Bio: Ram graduated from Perry Mason thrillers to reading about Pascal, C, C++ and OOP by the time he was 16. Corporate life started him off on IBM mainframes. That did not last long before he got back into Java and C++. The 9/11 incident threw him into Security and he got to dabble a fair bit in the Identity and Access Management space. He is very fortunate to have been able to add to his geek credentials by gaining soft skills (very important skill for security folks) in dealing with "situations" on numerous occasions in a customer facing role. He also loves the outdoor pursuits of Colorado.

Many thanks to Aerstone for hosting and refreshments.

Seating is limited and is prioritized for those who RSVP. If you have a change of plans, please update your RSVP status to allow space for those on the waiting list.

The meeting will be held at the Aerstone offices on 17th and Pearl. Parking is available through the Whittier Neighborhood Zone for up to three hours daily. As always, food and drinks are free and there will be an open networking session after the meeting.