Difference between revisions of "Boulder"

From OWASP
Jump to: navigation, search
m
(24 intermediate revisions by 2 users not shown)
Line 2: Line 2:
 
|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-boulder|emailarchives=http://lists.owasp.org/pipermail/owasp-boulder}}
 
|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-boulder|emailarchives=http://lists.owasp.org/pipermail/owasp-boulder}}
  
== Upcoming Events ==
+
====Special Thanks====
 +
The Boulder chapter is grateful for the continued sponsorship of Aerstone. Thank you for providing the venue, refreshments, and other resources necessary to keep the chapter running strong.
  
'''Thursday, September 20th at 6pm – Capture the Flag(CTF) with Daniel Likarish'''
+
[[File:BoulderSponsorAerstone.png]]
  
The Boulder chapter's next meeting will be held at the [https://maps.google.com/maps?q=1711+Pearl+St,+Boulder,+CO+80302&hl=en&ll=40.018955,-105.272412&spn=0.005801,0.016512&sll=40.019446,-105.273058&layer=c&cbp=13,345.63,,0,0.03&cbll=40.019323,-105.273016&hnear=1711+Pearl+St,+Boulder,+Colorado+80302&t=m&z=17&panoid=5v0RhKi7sjpi-Z5HcgKFFw Aerstone offices] on 17th and Pearl. 
 
  
Welcome back from the summer hiatus!
+
== Upcoming Events ==
 
+
OWASP Boulder resumes in September with a Capture the Flag (CTF) meeting. Next spring, [https://www.owasp.org/index.php/Front_Range_OWASP_Conference_2013 SnowFROC 2013] will feature a CTF-style hacking competition organized by local volunteers. Come and share your CTF experience, ideas, and bad code. We will discuss tournament format, rules, and framework.
+
 
+
To kick-off the project, Professor Daniel Likarish of Regis University, organizer of the Rocky Mountain Collegiate Cyber Defense Competition (RMCCDC), will share his experiences in building a CTF tournament from scratch.
+
  
Although this meeting is oriented on developing a CTF tournament, we will discuss a variety of other current events.
+
====Thursday, September 19th at 6pm – Bill Jackson: Secure Coding Mechanics====
  
'''About Professor Likarish:''' Dan is an assistant professor in the School of Computing & Information Sciences with responsibility for Information Assurance program coordination, students and research at [http://academic.regis.edu/cias/AboutUs.html Regis University]. He is Director of the Colorado Front-range Center on Information Assurance Studies. His research and teaching interests are in the design and implementation of student cyber security competitions, security of critical SCADA infrastructure and virtualization of student lab exercises. He has installed and is calibrating a Radio Telescope for use as a K-Collegiate teaching instrument and directs the Rocky Mountain Collegiate Cyber Defense Competition. He is the recipient of various state, industry and federal grants and awards.
 
  
'''About the RMCCDC:''' Seven teams representing Kansas, Colorado and New Mexico attended the competition consisting of a two-day scenario-driven event with teams responsible for recovery and maintenance of business services, processes and defense of the network after a gaming company was successfully attacked. The event provided an opportunity to capture several data sets; live attack and response data by the Red Team, Blue Team interviews as well as post event participant surveys. The competition included cadets from the Air Force Academy who went on to finish in second place at the [http://nationalccdc.org/ National CCDC] in April of 2012.
+
'''About the speaker'''<br>
 +
'''Bill Jackson''' has been a software engineer with Raytheon for 15 years. He has worked as the secure coding lead for the GPS program (yeah, that GPS), and has helped define and implement secure coding processes and practices for several other programs. His experience extends to Java EE, Agile software development, concurrency, and user interface design. Bill has MS in computer science from the University of Colorado at Denver and a BS from Colorado State University and holds a CISSP and CompTIA Security+ certification.
  
Seating is limited! We can only accommodate seating for those who [http://www.meetup.com/OWASP-Boulder/ RSVP].  If you have a change of plans, please update your RSVP to allow those who are on the waiting list.
+
{| style="width:100%;" border="0" align="left" cellpadding="5"
 +
|-
 +
| style="width:6em;" | '''When'''
 +
|                    | Thursday, September 19th
 +
|-
 +
| style="width:6em;vertical-align:text-top;" | '''Agenda'''
 +
|                    | 6:00 - 6:30: Food, drink, and networking<br>6:30 - 7:00: Chapter business and group discussion<br>7:00 - 8:00: '''Secure Coding Mechanics:''' Bill will bring his experience as a software engineer and secure coding lead to discuss common vulnerabilities in both development and architecture including:
 +
*Integer overflow/underflow
 +
*Filename/path validation
 +
*Excessive logging
 +
*Debug modes/maintenance hooks/configuration by convention
 +
*Insecure password handling (back-end handling)
 +
*Insecure start-up and shut-down
 +
|-
 +
|                    | '''Location'''
 +
|                    | [https://aerstone.com/ Aerstone], located at [https://maps.google.com/maps?q=1711+Pearl+St,+Boulder,+CO+80302&hl=en&ll=40.018955,-105.272412&spn=0.005801,0.016512&sll=40.019446,-105.273058&layer=c&cbp=13,345.63,,0,0.03&cbll=40.019323,-105.273016&hnear=1711+Pearl+St,+Boulder,+Colorado+80302&t=m&z=17&panoid=5v0RhKi7sjpi-Z5HcgKFFw 1711 Pearl St.] (3rd floor).
 +
|-
 +
|                    | '''Parking'''
 +
|                    | Free parking one block north of Aerstone through the [http://files.meetup.com/3503072/Parking.png Whittier Neighborhood Zone].
 +
|-
 +
|                    | '''RSVP'''
 +
|                    | Available through [http://www.meetup.com/OWASP-Boulder/events/135038952/ MeetUp.com].
 +
  |}
  
Parking is available through the [http://files.meetup.com/3503072/Parking.png Whittier Neighborhood Zone] for up to three hours daily. As always, food and drinks are free and there will be an open networking session after the meeting.
+
<br><br>
 +
  
 
[[Category:OWASP Chapter]]
 
[[Category:OWASP Chapter]]
 
[[Category:Colorado]]
 
[[Category:Colorado]]

Revision as of 22:24, 4 September 2013

Contents

OWASP Boulder

Welcome to the Boulder chapter homepage. The chapter leader is Mark Major.
Click here to join the local chapter mailing list.

Participation

OWASP Foundation (Overview Slides) is a professional association of global members and is and open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.

Sponsorship/Membership

Btn donate SM.gif to this chapter or become a local chapter supporter.

Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member? Join Now BlueIcon.JPG

Special Thanks

The Boulder chapter is grateful for the continued sponsorship of Aerstone. Thank you for providing the venue, refreshments, and other resources necessary to keep the chapter running strong.

BoulderSponsorAerstone.png


Upcoming Events

Thursday, September 19th at 6pm – Bill Jackson: Secure Coding Mechanics

About the speaker
Bill Jackson has been a software engineer with Raytheon for 15 years. He has worked as the secure coding lead for the GPS program (yeah, that GPS), and has helped define and implement secure coding processes and practices for several other programs. His experience extends to Java EE, Agile software development, concurrency, and user interface design. Bill has MS in computer science from the University of Colorado at Denver and a BS from Colorado State University and holds a CISSP and CompTIA Security+ certification.

When Thursday, September 19th
Agenda 6:00 - 6:30: Food, drink, and networking
6:30 - 7:00: Chapter business and group discussion
7:00 - 8:00: Secure Coding Mechanics: Bill will bring his experience as a software engineer and secure coding lead to discuss common vulnerabilities in both development and architecture including:
  • Integer overflow/underflow
  • Filename/path validation
  • Excessive logging
  • Debug modes/maintenance hooks/configuration by convention
  • Insecure password handling (back-end handling)
  • Insecure start-up and shut-down
Location Aerstone, located at 1711 Pearl St. (3rd floor).
Parking Free parking one block north of Aerstone through the Whittier Neighborhood Zone.
RSVP Available through MeetUp.com.