Difference between revisions of "Los Angeles"

From OWASP
Jump to: navigation, search
(3 intermediate revisions by one user not shown)
Line 18: Line 18:
 
== Announcements  ==
 
== Announcements  ==
  
http://img1.meetupstatic.com/892670376411449149876/img/header/logo.png
+
*'''Change in Leadership'''
 +
Tin Zaw has been a strong and effective visionary President and Leader for OWASP Los Angeles for several years. He will remain an active member of the Board, but effective January 1, 2013, Tin will be stepping down as Leader. Richard Greenberg -- Current Board Member, will assume this role going forward. We give our thanks to Tin for his efforts and dedication and look forward to the new year under Richard's leadership.
 +
 
 +
 
 +
*'''http://img1.meetupstatic.com/892670376411449149876/img/header/logo.png
 
===== We are on Meetup. Please join our community there. =====
 
===== We are on Meetup. Please join our community there. =====
  
 
===== http://www.meetup.com/OWASP-Los-Angeles/ =====
 
===== http://www.meetup.com/OWASP-Los-Angeles/ =====
  
===== Sign up for OWASP Los Angeles mailing list, very low volume and spam free.  =====
+
 
 +
 
 +
*'''OWASP Mailing List'''
 +
===== Sign up for the OWASP Los Angeles mailing list, very low volume and spam free.  =====
  
 
===== https://lists.owasp.org/mailman/listinfo/owasp-losangeles  =====
 
===== https://lists.owasp.org/mailman/listinfo/owasp-losangeles  =====
Line 29: Line 36:
 
<br>  
 
<br>  
  
== Next Meeting October 29, 2012:==  
+
== Next Meeting January 23, 7PM:==  
 
*'''At: Symantec Offices'''
 
*'''At: Symantec Offices'''
  
Line 35: Line 42:
  
  
== Speaker: Dan Tentler==  
+
== Speaker: Jim Manico from Whitehat Security==  
Carpe Datum: Drinking from the espresso firehose we know as Shodan
+
*'''Abstract: Top Ten Web Defenses'''
  
Have you ever stayed up until 5am fiendishly digging around on shodan? I have. More times than I care to admit. I’m starting to find patterns. Shodan is genius. It’s a glorious search engine that catalogs the banners from TCP connections on several ports – for the entire IPV4 internet. This makes for some bodacious late night reading. The findings, on the other hand, are in a lot of cases most heinous. SCADA, Power company networks and controls, thousands of webcams, weed growrooms, .gov/.mil border routers and sharepoint systems. It’s a little overwhelming. I decided to sift it all through a strainer to make it easier to take in. So I wrote a scraper script and a viewer to better parse the results! Come with me on an excellent adventure – but without Bill or Ted – more like the haunted mansion ride, except all the ghosts and spooks are systems or cameras left wide open on the internet. Did you know you could telnet into hydrogen fuel cells? Neither did I!
+
We cannot “firewall” or “patch” our way to secure websites. In the past, security professionals thought firewalls, Secure Sockets Layer (SSL), patching, and privacy policies were enough. Today, however, these methods are outdated and ineffective, as attacks on prominent, well-protected websites are occurring every day. Website developers must learn to code in a secure fashion to have any chance of providing organizations with proper defenses in the current threat-scape. The session will provide specific tips and guidelines to make website code both low risk and less vulnerable.
  
Dan Tentler: You know that guy that gets paid to be the bad guy? That's Dan. He's got a mixed bag of previous experiences. Ask him about it over some scotch!
+
*'''Bio:''' Jim Manico
 +
Jim is the VP of Security Architecture for WhiteHat Security. Jim is also the host of the OWASP Podcast Series, is the committee chair of the OWASP Connections Committee, is the project manager of the OWASP Cheatsheet series, and is a significant contributor to several additional OWASP projects. Jim provides secure coding and developer awareness training for WhiteHat Security using his 8+ years of experience delivering developer-training courses for SANS, Aspect Security and others. He brings 16 years of database-driven Web software development and analysis experience to WhiteHat and OWASP as well. Jim works on the beautiful island of Kauai, Hawaii where he lives with his wife Tracey.
  
http://www.dantentler.com/
 
  
===== Please RSVP here: http://www.meetup.com/OWASP-Los-Angeles/events/85019852/ =====
+
===== Please RSVP here: http://www.meetup.com/OWASP-Los-Angeles/events/ =====
<br>
+
==  
+
 
<br>
 
<br>
 +
 
<br>  
 
<br>  
 
== Would you like to speak at an OWASP Los Angeles Meeting? ==  
 
== Would you like to speak at an OWASP Los Angeles Meeting? ==  
Line 56: Line 62:
  
 
== Other Events  ==
 
== Other Events  ==
*'''HIMSS Privacy and Security Forum'''
+
*'''ISSA Los Angeles Monthly Meeting'''
 +
        Special Discount for OWASP Members
 +
        WEDNESDAY, January  16, 2013 11:30 AM - 1:45 PM
 +
        at Les Freres Taix French Restaurant
 +
        1911 West Sunset Blvd., LA, Ca 90026
 +
        (213) 484-1265
 +
        issala.org
  
*Special Discount for OWASP Members
+
*'''ISSA Orange County Q1 Meeting'''
  THURSDAY, NOVEMBER 1, 2012 7:30 AM - 2:30 PM
+
        January 17 6PM
  at THE CALIFORNIA ENDOWMENT
+
         http://www.meetup.com/OWASP-OC/events/96085252/
         1000 North Alameda St., LA, CA 90012
+
        Free Parking
+
  
*To view full program agenda, go to http://bit.ly/RoL9ZZ
 
  
 
== Archives of Previous Meetings  ==
 
== Archives of Previous Meetings  ==

Revision as of 12:47, 26 December 2012

Contents

Welcome to the Los Angeles Chapter!

Sponsors and Supporters Donate Here:

https://www.cvent.com/events/owasp-sponsorship-and-donation/registration-99bc1441e2684ff5b214b0df6b3a9ae3.aspx

Single Meeting Supporter: Organizations that wish to support the OWASP Los Angeles Chapter with a 100% tax deductible donation enable the OWASP Foundation to continue its mission

Get the following benefits::

- Meet upwards of 60-70 potential new clients
- Be recognized as a local supporter by posting your company logo on the local chapter page(Image size for logos: gif, jpg or png with a size of 150px X 45px at 72dpi or 55px X 80px at 72dpi) 
- Have a table at local chapter meeting 
- Promote your products and services
- Bring a raffle prize to gather business cards

Contact us #Los Angeles Chapter for general questions relating to sponsorship and donations

Announcements

  • Change in Leadership

Tin Zaw has been a strong and effective visionary President and Leader for OWASP Los Angeles for several years. He will remain an active member of the Board, but effective January 1, 2013, Tin will be stepping down as Leader. Richard Greenberg -- Current Board Member, will assume this role going forward. We give our thanks to Tin for his efforts and dedication and look forward to the new year under Richard's leadership.


  • logo.png
We are on Meetup. Please join our community there.
http://www.meetup.com/OWASP-Los-Angeles/
  • OWASP Mailing List
Sign up for the OWASP Los Angeles mailing list, very low volume and spam free.
https://lists.owasp.org/mailman/listinfo/owasp-losangeles


Next Meeting January 23, 7PM:

  • At: Symantec Offices
  • 900 Corporate Pointe, Culver City, CA 90230


Speaker: Jim Manico from Whitehat Security

  • Abstract: Top Ten Web Defenses

We cannot “firewall” or “patch” our way to secure websites. In the past, security professionals thought firewalls, Secure Sockets Layer (SSL), patching, and privacy policies were enough. Today, however, these methods are outdated and ineffective, as attacks on prominent, well-protected websites are occurring every day. Website developers must learn to code in a secure fashion to have any chance of providing organizations with proper defenses in the current threat-scape. The session will provide specific tips and guidelines to make website code both low risk and less vulnerable.

  • Bio: Jim Manico

Jim is the VP of Security Architecture for WhiteHat Security. Jim is also the host of the OWASP Podcast Series, is the committee chair of the OWASP Connections Committee, is the project manager of the OWASP Cheatsheet series, and is a significant contributor to several additional OWASP projects. Jim provides secure coding and developer awareness training for WhiteHat Security using his 8+ years of experience delivering developer-training courses for SANS, Aspect Security and others. He brings 16 years of database-driven Web software development and analysis experience to WhiteHat and OWASP as well. Jim works on the beautiful island of Kauai, Hawaii where he lives with his wife Tracey.


Please RSVP here: http://www.meetup.com/OWASP-Los-Angeles/events/



Would you like to speak at an OWASP Los Angeles Meeting?

Call for Papers (CFP) is NOW OPEN. To speak at upcoming OWASP Los Angeles meetings please submit your BIO and talk abstract via email to Tin Zaw. The talk must be vendor neutral and its content be available under Creative Common 3.0 license.


Other Events

  • ISSA Los Angeles Monthly Meeting
        Special Discount for OWASP Members
       WEDNESDAY, January  16, 2013 11:30 AM - 1:45 PM
       at Les Freres Taix French Restaurant
       1911 West Sunset Blvd., LA, Ca 90026
       (213) 484-1265
       issala.org
  • ISSA Orange County Q1 Meeting
       January 17 6PM
       http://www.meetup.com/OWASP-OC/events/96085252/


Archives of Previous Meetings

2012 Meetings

2011 Meetings

2010 Meetings

2009 Meetings

2008 Meetings

List of presentations available from past meetings


Los Angeles Chapter

Volunteer OWASP Leaders: Yev Avidon and Mikhael Felker
Los Angeles chapter was founded by Cassio Goldschmidt.


The AppSec USA 2010 conference received rave reviews. Thanks to all the volunteers and great speakers who helped make it a success!

Web archive: http://2010.AppSecUSA.org

Videos: http://vimeo.com/user4863863/videos

AppSec Logo.jpg