Difference between revisions of "Boulder"

From OWASP
Jump to: navigation, search
m
(15 intermediate revisions by 2 users not shown)
Line 2: Line 2:
 
|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-boulder|emailarchives=http://lists.owasp.org/pipermail/owasp-boulder}}
 
|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-boulder|emailarchives=http://lists.owasp.org/pipermail/owasp-boulder}}
  
== Upcoming Events ==
+
====Special Thanks====
 +
The Boulder chapter is grateful for the continued sponsorship of Aerstone. Thank you for providing the venue, refreshments, and other resources necessary to keep the chapter running strong.
  
====Wednesday, January 16nd at 6pm – CTF Project Development====
+
[[File:BoulderSponsorAerstone.png]]
  
Plan, plot, hack, hang out.
 
  
'''When''': Wednesday, January 2nd at 6:00pm
+
== Upcoming Events ==
<br>'''Where''': [https://aerstone.com/ Aerstone], located at [https://maps.google.com/maps?q=1711+Pearl+St,+Boulder,+CO+80302&hl=en&ll=40.018955,-105.272412&spn=0.005801,0.016512&sll=40.019446,-105.273058&layer=c&cbp=13,345.63,,0,0.03&cbll=40.019323,-105.273016&hnear=1711+Pearl+St,+Boulder,+Colorado+80302&t=m&z=17&panoid=5v0RhKi7sjpi-Z5HcgKFFw 1711 Pearl St.] (3rd floor).
+
<br>'''Parking''': Free through the [http://files.meetup.com/3503072/Parking.png Whittier Neighborhood Zone].
+
<br>'''RSVP''': available through [http://www.meetup.com/OWASP-Boulder/ MeetUp.com]
+
<br>'''Virtual meeting''': available through [https://questconsultants.webex.com/ WebEx].
+
<br>(Please call me if the door is locked or WebEx is down.)
+
  
The standing agenda includes status updates on:
+
====Thursday, September 19th at 6pm – Bill Jackson: Secure Coding Mechanics====
* Participant VM
+
* Scoreboard
+
* Challenge management
+
* Challenge development
+
* Challenge-framework integration
+
* General project administration
+
* Roadblocks
+
  
Any time left over will be used for collaboration and coding.
 
  
 +
'''About the speaker'''<br>
 +
'''Bill Jackson''' has been a software engineer with Raytheon for 15 years. He has worked as the secure coding lead for the GPS program (yeah, that GPS), and has helped define and implement secure coding processes and practices for several other programs. His experience extends to Java EE, Agile software development, concurrency, and user interface design.  Bill has MS in computer science from the University of Colorado at Denver and a BS from Colorado State University and holds a CISSP and CompTIA Security+ certification.
  
====Thursday, January 17th at 6pm – OWASP Project Round-Up====
+
{| style="width:100%;" border="0" align="left" cellpadding="5"
 
+
|-
To kick off 2013 the Boulder Chapter is holding an OWASP Project Roundup. Chapter members will showcase OWASP projects --from well-known to obscure-- in a series of lightning talks.
+
| style="width:6em;" | '''When'''
 
+
|                    | Thursday, September 19th
'''When''': Thursday, January 17th at 6:00pm
+
|-
<br>'''Where''': [https://aerstone.com/ Aerstone], located at [https://maps.google.com/maps?q=1711+Pearl+St,+Boulder,+CO+80302&hl=en&ll=40.018955,-105.272412&spn=0.005801,0.016512&sll=40.019446,-105.273058&layer=c&cbp=13,345.63,,0,0.03&cbll=40.019323,-105.273016&hnear=1711+Pearl+St,+Boulder,+Colorado+80302&t=m&z=17&panoid=5v0RhKi7sjpi-Z5HcgKFFw 1711 Pearl St.] (3rd floor).
+
| style="width:6em;vertical-align:text-top;" | '''Agenda'''
<br>'''Parking''': Free through the [http://files.meetup.com/3503072/Parking.png Whittier Neighborhood Zone].
+
|                    | 6:00 - 6:30: Food, drink, and networking<br>6:30 - 7:00: Chapter business and group discussion<br>7:00 - 8:00: '''Secure Coding Mechanics:''' Bill will bring his experience as a software engineer and secure coding lead to discuss common vulnerabilities in both development and architecture including:
<br>'''RSVP''': available through [http://www.meetup.com/OWASP-Boulder/events/93638032/ MeetUp.com]
+
*Integer overflow/underflow
<br>'''Virtual meeting''': available through [https://questconsultants.webex.com/questconsultants/j.php?ED=16221943&UID=495177262&RT=MiM2 WebEx].
+
*Filename/path validation
 
+
*Excessive logging
To make this work I need volunteers. Your job is to pick a project, learn a bit about it, then present it to the rest of the group. Informal discussions are good, prepared presentations are better, and live demos are best. The goal is lively, informative, low-stress discussions rather than formal, extensively-research presentations. Spend an hour or two familiarizing yourself with your project (you do not need to be an expert on it), jot your notes into a couple of slides, then share with the group for 5 - 10 minutes.
+
*Debug modes/maintenance hooks/configuration by convention
 
+
*Insecure password handling (back-end handling)
Need help selecting a project? Take a look at the [[:Category:OWASP_Project|OWASP Projects page]]. Try tools you use already (the [[:Category:OWASP Top Ten Project|OWASP Top 10]]), tools you've heard of and want to learn more about ([[:Category:OWASP_WebGoat_Project|WebGoat]]), or discover something entirely new ([[:Category:OWASP Enterprise Security API|ESAPI]]). All projects are encouraged, from the popular to the esoteric. Still undecided? Send me a note with your interest in presenting and I will happily suggest some projects to choose from.
+
*Insecure start-up and shut-down
 
+
|-
To avoid duplicates, project topics will be first-come first-served. Email your topic idea to either mark.major or rob.jepson at owasp.org and we will add you to the meeting agenda. Please check this Wiki (or the [http://www.meetup.com/OWASP-Boulder/ chapter's MeetUp.com page]) to see what other people have taken prior to choosing your topic.
+
|                    | '''Location'''
 
+
|                    | [https://aerstone.com/ Aerstone], located at [https://maps.google.com/maps?q=1711+Pearl+St,+Boulder,+CO+80302&hl=en&ll=40.018955,-105.272412&spn=0.005801,0.016512&sll=40.019446,-105.273058&layer=c&cbp=13,345.63,,0,0.03&cbll=40.019323,-105.273016&hnear=1711+Pearl+St,+Boulder,+Colorado+80302&t=m&z=17&panoid=5v0RhKi7sjpi-Z5HcgKFFw 1711 Pearl St.] (3rd floor).
Current project presentations (in no particular order):
+
|-
*Mike: DirBuster
+
|                    | '''Parking'''
*Greg: Mantra
+
|                    | Free parking one block north of Aerstone through the [http://files.meetup.com/3503072/Parking.png Whittier Neighborhood Zone].
*Chris: Zap
+
|-
*Mark: TBD (whatever is left over)
+
|                    | '''RSVP'''
 
+
|                    | Available through [http://www.meetup.com/OWASP-Boulder/events/135038952/ MeetUp.com].
Please remember that seating is limited and is prioritized for those who RSVP through MeetUp. If you have a change of plans, please update your RSVP status to allow space for those on the waiting list. Food and drinks are provided and the facilities will remain open after the meeting for socializing and networking. All meetings are free to attend.
+
|}
 
+
 
+
====Special Thanks====
+
The Boulder chapter is grateful for the continued sponsorship of Aerstone. Thank you for providing the venue, refreshments, and other resources necessary to keep the chapter running strong.
+
 
+
[[File:BoulderSponsorAerstone.png]]
+
  
 +
<br><br>
 +
  
 
[[Category:OWASP Chapter]]
 
[[Category:OWASP Chapter]]
 
[[Category:Colorado]]
 
[[Category:Colorado]]

Revision as of 22:24, 4 September 2013

Contents

OWASP Boulder

Welcome to the Boulder chapter homepage. The chapter leader is Mark Major.
Click here to join the local chapter mailing list.

Participation

OWASP Foundation (Overview Slides) is a professional association of global members and is and open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.

Sponsorship/Membership

Btn donate SM.gif to this chapter or become a local chapter supporter.

Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member? Join Now BlueIcon.JPG

Special Thanks

The Boulder chapter is grateful for the continued sponsorship of Aerstone. Thank you for providing the venue, refreshments, and other resources necessary to keep the chapter running strong.

BoulderSponsorAerstone.png


Upcoming Events

Thursday, September 19th at 6pm – Bill Jackson: Secure Coding Mechanics

About the speaker
Bill Jackson has been a software engineer with Raytheon for 15 years. He has worked as the secure coding lead for the GPS program (yeah, that GPS), and has helped define and implement secure coding processes and practices for several other programs. His experience extends to Java EE, Agile software development, concurrency, and user interface design. Bill has MS in computer science from the University of Colorado at Denver and a BS from Colorado State University and holds a CISSP and CompTIA Security+ certification.

When Thursday, September 19th
Agenda 6:00 - 6:30: Food, drink, and networking
6:30 - 7:00: Chapter business and group discussion
7:00 - 8:00: Secure Coding Mechanics: Bill will bring his experience as a software engineer and secure coding lead to discuss common vulnerabilities in both development and architecture including:
  • Integer overflow/underflow
  • Filename/path validation
  • Excessive logging
  • Debug modes/maintenance hooks/configuration by convention
  • Insecure password handling (back-end handling)
  • Insecure start-up and shut-down
Location Aerstone, located at 1711 Pearl St. (3rd floor).
Parking Free parking one block north of Aerstone through the Whittier Neighborhood Zone.
RSVP Available through MeetUp.com.