Difference between revisions of "Boulder"

From OWASP
Jump to: navigation, search
m (Overflow or not, Aerstone will host this month's meeting.)
(6 intermediate revisions by 2 users not shown)
Line 10: Line 10:
 
== Upcoming Events ==
 
== Upcoming Events ==
  
====Thursday, March 21st at 6pm – Access Control with Jim Manico====
+
====Thursday, June 27th at 6pm – Gene Kim: Why We Need DevOps Now====
  
'''When''': Thursday, February 21st at 6:00pm
 
<br>'''Where''': [https://aerstone.com/ Aerstone], located at [https://maps.google.com/maps?q=1711+Pearl+St,+Boulder,+CO+80302&hl=en&ll=40.018955,-105.272412&spn=0.005801,0.016512&sll=40.019446,-105.273058&layer=c&cbp=13,345.63,,0,0.03&cbll=40.019323,-105.273016&hnear=1711+Pearl+St,+Boulder,+Colorado+80302&t=m&z=17&panoid=5v0RhKi7sjpi-Z5HcgKFFw 1711 Pearl St.] (3rd floor).
 
<br>'''Parking''': Free through the [http://files.meetup.com/3503072/Parking.png Whittier Neighborhood Zone].
 
<br>'''RSVP''': available through [http://www.meetup.com/OWASP-Boulder/events/106914712/ MeetUp.com]
 
  
'''Agenda'''<br>
+
'''About the speaker'''<br>
6:00 - 6:30 Food, drink, and networking<br>
+
'''Gene Kim''' is a multiple award winning CTO, researcher and author. He was founder and CTO of Tripwire, which commercialized the open source software he wrote in 1992 with Dr. Gene Spafford at Purdue University. He is the author of “[http://www.amazon.com/Visible-Ops-Handbook-Implementing-Practical/dp/0975568612/ref=sr_1_1?ie=UTF8&qid=1327709357&sr=8-1 The Visible Ops Handbook],” and “[http://www.amazon.com/Visible-Ops-Security-Operations-ebook/dp/B003J35A0A/ref=sr_1_2?ie=UTF8&qid=1327709357&sr=8-2 The Security Visible Ops Handbook],”which has sold over 200K copies to date. Gene is also the author of [http://itrevolution.com/books/phoenix-project-devops-book/ The Phoenix Project: A Novel About IT, DevOps, and Helping Your Business Win].
6:30 - 7:15 Chapter business and group discussion<br>
+
7:15 - 8:00 Featured presentation<br>
+
  
'''Featured Presentation: Access Control Design Best Practices'''<br>
+
Gene’s area of passion is helping companies build super-tribes where Development, IT Operations, Product and Project Management and Information Security simultaneously maximize throughput of features from “code complete” to “in production,” without causing chaos and disruption to the IT environment. He’s helped some of the largest Internet properties, such as Microsoft, Yahoo!, AOL and Microsoft companies he’s worked with Microsoft. He loves finding and fixing bottlenecks which impede and frustrate the entire organization, enabling management from each tribe to achieve the greater organizational goals.
Access Control is a necessary security control at almost every layer within a web application. This talk will discuss several of the key access control anti-patterns commonly found during website security audits. These access control anti-patterns include hard-coded security policies, lack of horizontal access control, and "fail open" access control mechanisms. In reviewing these and other access control problems, we will discuss and design a positive access control mechanism that is data contextual, activity based, configurable, flexible, and deny-by-default - among other positive design attributes that make up a robust web-based access-control mechanism.
+
  
'''Speaker Bio'''<br>
+
{| style="width:100%;" border="0" align="left" cellpadding="5"
'''Jim Manico''' is the VP of Security Architecture for WhiteHat Security. Jim is also a global board member of OWASP, is the host of the OWASP Podcast Series, is the committee chair of the OWASP Connections Committee, is the project manager of the OWASP Cheatsheet series, and is a significant contributor to several additional OWASP projects. Jim provides secure coding and developer awareness training for WhiteHat Security using his 8+ years of experience delivering developer-training courses for SANS, Aspect Security and others. He brings 16 years of database-driven Web software development and analysis experience to WhiteHat and OWASP as well. Jim works on the beautiful island of Kauai,Hawaii where he lives with his wife Tracey.
+
|-
 +
| style="width:6em;" | '''When'''
 +
|                    | Thursday, June 27th
 +
|-
 +
|                    | '''Agenda'''
 +
|                    | 6:00 - 6:30: Food, drink, and networking<br>6:30 - 7:00: Chapter business and group discussion<br>7:00 - 8:00: '''Why We Need DevOps Now: A Fourteen Year Study Of High Performing IT Organizations'''<br>Gene will present his findings from an ongoing study of how high-performing IT organizations simultaneously deliver stellar service levels and deliver fast flow of new features into the production environment.  To successfully deliver against what on the surface appear to be conflicting objectives, (i.e. preserving service levels while introducing significant amounts of change into production), requires creating a highly-coordinated collection of teams where Development, QA, IT Operations, as well as Product Management and Information Security genuinely work together to solve business objectives.<br>Gene will describe what successful transformations look like, and how those transformations were achieved from a software development and service operations perspective. He will draw upon fourteen years of research of high-performing IT organizations, as well as work he's done since 2008 to help some of the largest Internet companies increase feature flow and production stability through applications of DevOps principles.
 +
|-
 +
|                    | '''Location'''
 +
|                    | [https://aerstone.com/ Aerstone], located at [https://maps.google.com/maps?q=1711+Pearl+St,+Boulder,+CO+80302&hl=en&ll=40.018955,-105.272412&spn=0.005801,0.016512&sll=40.019446,-105.273058&layer=c&cbp=13,345.63,,0,0.03&cbll=40.019323,-105.273016&hnear=1711+Pearl+St,+Boulder,+Colorado+80302&t=m&z=17&panoid=5v0RhKi7sjpi-Z5HcgKFFw 1711 Pearl St.] (3rd floor).
 +
|-
 +
|                    | '''Parking'''
 +
|                    | Free parking one block north of Aerstone through the [http://files.meetup.com/3503072/Parking.png Whittier Neighborhood Zone].
 +
|-
 +
|                    | '''Virtual'''
 +
|                    | Remote attendees may participate through [https://questconsultants.webex.com/questconsultants/j.php?ED=207871237&UID=0&RT=MiM2 WebEx].
 +
|-
 +
|                    | '''RSVP'''
 +
|                    | Available through [http://www.meetup.com/OWASP-Boulder/events/124446512/ MeetUp.com].
 +
|}
  
Seating is limited and is prioritized for those who RSVP. Parking is available through the Whittier Neighborhood Zone. Food and drinks will be provided and there will be a networking session preceding the meeting. As always, meetings are free to attend.
+
<br><br>
 +
  
 
[[Category:OWASP Chapter]]
 
[[Category:OWASP Chapter]]
 
[[Category:Colorado]]
 
[[Category:Colorado]]

Revision as of 12:46, 26 June 2013

Contents

OWASP Boulder

Welcome to the Boulder chapter homepage. The chapter leader is Mark Major.
Click here to join the local chapter mailing list.

Participation

OWASP Foundation (Overview Slides) is a professional association of global members and is and open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.

Sponsorship/Membership

Btn donate SM.gif to this chapter or become a local chapter supporter.

Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member? Join Now BlueIcon.JPG

Special Thanks

The Boulder chapter is grateful for the continued sponsorship of Aerstone. Thank you for providing the venue, refreshments, and other resources necessary to keep the chapter running strong.

BoulderSponsorAerstone.png


Upcoming Events

Thursday, June 27th at 6pm – Gene Kim: Why We Need DevOps Now

About the speaker
Gene Kim is a multiple award winning CTO, researcher and author. He was founder and CTO of Tripwire, which commercialized the open source software he wrote in 1992 with Dr. Gene Spafford at Purdue University. He is the author of “The Visible Ops Handbook,” and “The Security Visible Ops Handbook,”which has sold over 200K copies to date. Gene is also the author of The Phoenix Project: A Novel About IT, DevOps, and Helping Your Business Win.

Gene’s area of passion is helping companies build super-tribes where Development, IT Operations, Product and Project Management and Information Security simultaneously maximize throughput of features from “code complete” to “in production,” without causing chaos and disruption to the IT environment. He’s helped some of the largest Internet properties, such as Microsoft, Yahoo!, AOL and Microsoft companies he’s worked with Microsoft. He loves finding and fixing bottlenecks which impede and frustrate the entire organization, enabling management from each tribe to achieve the greater organizational goals.

When Thursday, June 27th
Agenda 6:00 - 6:30: Food, drink, and networking
6:30 - 7:00: Chapter business and group discussion
7:00 - 8:00: Why We Need DevOps Now: A Fourteen Year Study Of High Performing IT Organizations
Gene will present his findings from an ongoing study of how high-performing IT organizations simultaneously deliver stellar service levels and deliver fast flow of new features into the production environment. To successfully deliver against what on the surface appear to be conflicting objectives, (i.e. preserving service levels while introducing significant amounts of change into production), requires creating a highly-coordinated collection of teams where Development, QA, IT Operations, as well as Product Management and Information Security genuinely work together to solve business objectives.
Gene will describe what successful transformations look like, and how those transformations were achieved from a software development and service operations perspective. He will draw upon fourteen years of research of high-performing IT organizations, as well as work he's done since 2008 to help some of the largest Internet companies increase feature flow and production stability through applications of DevOps principles.
Location Aerstone, located at 1711 Pearl St. (3rd floor).
Parking Free parking one block north of Aerstone through the Whittier Neighborhood Zone.
Virtual Remote attendees may participate through WebEx.
RSVP Available through MeetUp.com.