Difference between revisions of "Los Angeles"

From OWASP
Jump to: navigation, search
 
(288 intermediate revisions by 2 users not shown)
Line 1: Line 1:
 
== Welcome to the Los Angeles Chapter!  ==
 
== Welcome to the Los Angeles Chapter!  ==
  
 +
[[Image:New_OWASP_LA_Logo-08-2014.jpg|700px|New_OWASP_LA_Logo-08-2014.jpg]]
  
 
=====[http://www.regonline.com/donation_1044369 https://www.owasp.org/images/2/2f/Donatenow.jpg]=====
 
=====[http://www.regonline.com/donation_1044369 https://www.owasp.org/images/2/2f/Donatenow.jpg]=====
Line 8: Line 9:
  
 
Get the following benefits::
 
Get the following benefits::
  - Meet upwards of 60-90 potential new clients
+
  - Meet upwards of 70-110 potential new clients
  - Be recognized as a local supporter by posting your company logo on the local chapter page and on our Meetup site(Image size for logos: gif, jpg or png with a size of 150px X 45px at 72dpi or 55px X 80px at 72dpi)
+
  - Be recognized as a local supporter by posting your company logo on the local chapter page and on our Meetup site
 
  - Have your marketing write-up included in e-mail blasts sent prior to a monthly meeting.
 
  - Have your marketing write-up included in e-mail blasts sent prior to a monthly meeting.
 
  - Have a table at local chapter meeting  
 
  - Have a table at local chapter meeting  
Line 17: Line 18:
 
Contact us [[#Los Angeles Chapter]] for general questions relating to sponsorship and donations
 
Contact us [[#Los Angeles Chapter]] for general questions relating to sponsorship and donations
  
== '''Announcements'''  ==
+
== '''Participation'''  ==
  
=== Change in Leadership ===
+
OWASP Foundation is a professional association of global members and is open to anyone interested in learning more about software security. Local chapters are run independently and guided by the [https://www.owasp.org/index.php/Chapter_Leader_Handbook Chapter_Leader_Handbook]. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the [https://www.owasp.org/index.php/Speaker_Agreement speaker agreement] and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related security topic you would like to present on.
Tin Zaw has been a strong and effective visionary President and Leader for OWASP Los Angeles for several years. He will remain an active member of the Board, but effective January 1, 2013, Tin will be stepping down as Leader. Richard Greenberg -- Current Board Member, will assume this role going forward. We give our thanks to Tin for his efforts and dedication and look forward to the new year under Richard's leadership.
+
  
 +
== '''Announcements'''  ==
  
'''[http://www.meetup.com/OWASP-Los-Angeles/ http://img1.meetupstatic.com/892670376411449149876/img/header/logo.png]
+
<br>
==== We are on Meetup. Please join our community there. ====
+
===''' [https://www.owasp.org/index.php/WASPY_Awards_2013/ OWASP Los Angeles received the BEST Chapter Leaders award at AppSec USA NY]===
 +
<br>
 +
'''<h2>[http://www.meetup.com/OWASP-Los-Angeles https://www.owasp.org/images/8/82/Meetup_logo3.jpg] [http://www.meetup.com/OWASP-Los-Angeles] [http://www.meetup.com/owasp-los-angeles OWASP-Los-Angeles '''''We are on Meetup. Please join our community here''.''']</h2>'''
 
===== If you are unable to access Meetup from your work computer as a result of filtering of social sites, we recommend that you view it on your smart phone or via your personal computer. =====
 
===== If you are unable to access Meetup from your work computer as a result of filtering of social sites, we recommend that you view it on your smart phone or via your personal computer. =====
  
 
===== http://www.meetup.com/OWASP-Los-Angeles/ =====
 
===== http://www.meetup.com/OWASP-Los-Angeles/ =====
  
<br>  
+
<br>
 +
 
 
== '''Become an OWASP Member TODAY'''==
 
== '''Become an OWASP Member TODAY'''==
 
===== Support your LA Chapter: only $50 for the entire year!  =====
 
===== Support your LA Chapter: only $50 for the entire year!  =====
Line 35: Line 39:
 
===== https://www.owasp.org/index.php/Individual_Member  =====
 
===== https://www.owasp.org/index.php/Individual_Member  =====
  
<br>  
+
<br>
  
== '''Next Meeting Wednesday, March 20, 2013 6:15 PM:'''==  
+
== '''Next OWASP Meeting'''==
*'''At: [http://maps.google.com/maps?q=3500+Ramona+Boulevard+%2C+Monterey+Park%2C+CA Luminaria's]'''
+
'''''**[http://www.meetup.com/OWASP-Los-Angeles/pages/Symantec_Parking_Information/ NOTE: Please review NEW parking rules (@meetup.com) for our monthly meetings at Symantec as of 7/22/2014] **'''''
 +
<br>
  
*3500 Ramona Boulevard , Monterey Park, CA [http://maps.google.com/maps?q=3500+Ramona+Boulevard+%2C+Monterey+Park%2C+CA map]
+
== '''[http://www.meetup.com/OWASP-Los-Angeles/events/219479197/ Special OWASP-CSA Joint Meeting March 11,2015 7pm at Symantec Offices in Culver City] '''<br> ==
  
*Note the change in date, as this is a joint meeting with ISSA
+
  Speaker: Jerry Hoff, VP of the Static Code Analysis Division at WhiteHat Security
  
*There is a fee to attend this Special Meeting. Register early online before the Monday prior to the the event, and get a $10 discount!
+
  Topic: Web Attacks at Scale in 2015 (Alternative Title: Web Security Bootcamp)
*ISSA, OWASP, ISC2, & CSA Members, and Students: $25 / Non-Members: $35
+
*Register NOW: http://issalamarchdinnermeeting.eventbrite.com/
+
  
 +
'''<u>Abstract:</u>'''
 +
This talk is an attacker-centric presentation demonstrating how modern pen-testing tools such as OWASP Zap, Browser Exploitation Framework (BeEF) and sqlmap can be used to automate web attacks at scale.  Reenactments of some of the most publicized attacks in recent history will be conducted to ensure participants understand and absorb how these attacks are taking place.  Full exploits using these tools and more will be demonstrated, and a discussion of solutions will follow.
  
 +
'''<u>Speaker Bio:</u>'''
 +
Jerry Hoff is the Principal Security Strategist at WhiteHat Security. Prior to WhiteHat Security, Jerry co-founded Infrared Security, a specialist in application security and next-generation static analysis technologies.  His work experience also includes a number of financial firms including Morgan Stanley Asia where he was on the global Security Architecture team based out of Hong Kong.  He has more than a decade of experience in application security consulting, and has taught at Washington University’s CAIT program delivering security and development classes for thousands of developers. Jerry is a frequent speaker at numerous security events around the globe, and is a regular OWASP contributor, where he leads up the OWASP Application Tutorial Series and WebGoat.NET. Jerry holds a Master's degree in Computer Science from Washington University in St. Louis.
  
== ''' Speaker: Garret Grajek''' ==
+
<br>
*''' Synopsis: '''
+
<div style="text-align: center;">
 +
Thanks to our sponsor:
  
Securing Mobile Apps – that’s the big discussion today. The last couple of years enterprises have been attempting to meet this requirement by deploying client-intensive MDMs (Mobile Device Managers). This has left the apps being utilized by partners, suppliers and customers – completely unprotected. How do we meet the challenge of applying security authentication standards to these un-managed devices. This is what will be discussed/demo’d.
+
''[[File:Whitehat.jpeg|200px| center | link=http://www.whitehat.com ]]''
  
Presentation Break-Out:
+
</div>
  
''' Title: Securing Mobile Apps for the Enterprise '''
+
== '''[http://www.meetup.com/OWASP-Los-Angeles/events/211682922/ March 25,2015 6:30pm at Microsoft 13031 W Jefferson Blvd Suite 200, Playa Vista, CA] '''<br> ==
  
*''' Agenda: '''
+
  Speaker: Jeff Williams is the founder and CTO of Contrast Security
  
I. The Condudrum: Secure the Phone or the App?
+
  Topic: Why Your AppSec Experts Are Killing You
  
II. History: SMS (System Manangement Server) vs WAM
+
'''<u>Abstract:</u>'''
 +
Software development has been transformed by practices like Continuous Integration and Continuous Integration, while application security has remained trapped in expert-based waterfall mode. In this talk, Jeff will show you how you can evolve into a “Continuous Application Security” organization that generates assurance automatically across an entire application security portfolio. Jeff will show you how to bootstrap the “sensor-model-dashboard” feedback loop that makes real time, continuous application security possible. He will demonstrate the approach with a new *free* tool called Contrast for Eclipse that brings the power of instrumentation-based application security testing directly into the popular IDE. Check out “Application Security at DevOps Speed and Portfolio Scale” for some background.
  
III. Now: MDM vs MAM (Mobile Appplication Managemnt)
+
'''<u>Speaker bio:</u>'''  
 
+
Jeff Williams is the founder and CTO of Contrast Security, bringing the power of instrumentation and real time analytics to secure your application portfolio. Previously, Jeff was a founder and CEO of Aspect Security. He also served as Global Chairman of the OWASP Foundation where he created many open-source standards, tools, libraries, and guidelines – including the OWASP Top Ten, WebGoat, ESAPI, XSS CheatSheet, ASVS and more. Jeff welcomes hearing from you and may be reached directly at jeff.williams@contrastsecurity.com.
IV: Advantage of App-Centric Security (MAM)
+
<br>
 
+
- Modifiable Authentication
+
 
+
- No Agent needed
+
 
+
- No update needed of client software for workflow/Auth change
+
 
+
V: Demo of MAM
+
 
+
VI Q.A.
+
 
+
*''' Bio: '''
+
 
+
Garret Grajek, CTO / COO, SecureAuth Corporation.
+
 
+
Garret Grajek is a CISSP-certified security engineer with more than 20 years of experience in the information security and authentication space. As Chief Technical Officer and Chief Operating Officer for SecureAuth Corporation, Garret is responsible for the strategic direction of the company’s Identity Enforcement product offerings.
+
 
+
Prior to co-founding SecureAuth, Grajek held leadership roles at some of the world’s leading technology companies including Cisco and IBM, where he was responsible for consumer and network security products. He also served as western region lead field engineer for RSA Security.
+
 
+
Grajek also worked at Netegrity where he was responsible for field implementation of Access Control products and led installations of SiteMinder, the security suite that controls all user access to the E*Trade Financial Services web site. Netegrity became the standard for internet access control and was acquired by CA.
+
 
+
He began his career as an entrepreneur and founder of an independent programming company that specialized in operating systems and network utilities. A pioneer in the use of the Linux operating system in enterprise environments, Grajek was responsible for the successful completion of numerous projects for IBM, Texas Instruments, Tandem Computers.
+
 
+
Grajek holds bachelor’s degree in computer science from the University of Texas at Austin.
+
 
+
== '''Sponsor: Security Innovation'''==
+
 
+
[https://www.securityinnovation.com/ Security Innovation]
+
  
The Application Security Company
+
<div style="text-align: center;">
 +
Thanks to our sponsor:
  
Reduce Application Security Risk
+
''[[File:Prevoty_Primary_RGB_300.png|200px| center | link=http://www.prevoty.com ]]''
 +
Prevoty delivers powerful real-time Application Security capability for enterprises via its runtime application and monitoring & protection technology. We solve security challenges across the entire application portfolio: Instant remediation of existing vulnerability backlogs (Past), Quicker time-to-market without introducing new vulnerabilities (Present), and Dramatically reduced exposure to zero-day attacks (Future).
 +
</div>
  
Security Innovation focuses on the most difficult IT Security problem, and the root cause of most data breaches – insecure applications. Their solutions are based on the three pillars of a secure SDLC, which feed into one another to create an ecosystem of repeatable, secure software development: ''' [https://www.securityinnovation.com/solutions/standards-and-process.html Standards] ''', ''' [https://www.securityinnovation.com/solutions/education.html Education] ''' and ''' [https://www.securityinnovation.com/solutions/assessment.html Assessment] '''
 
  
 
===== Please RSVP here: http://www.meetup.com/OWASP-Los-Angeles/events/ =====
 
===== Please RSVP here: http://www.meetup.com/OWASP-Los-Angeles/events/ =====
Line 108: Line 91:
 
== Would you like to speak at an OWASP Los Angeles Meeting? ==  
 
== Would you like to speak at an OWASP Los Angeles Meeting? ==  
  
Call for Papers (CFP) is NOW OPEN. To speak at upcoming OWASP Los Angeles meetings please submit your BIO and talk abstract via email to [mailto:richard.greenberg@owasp.org Richard Greenberg]. The talk must be vendor neutral and its content be available under Creative Common 3.0 license.  
+
Call for Papers (CFP) is NOW OPEN. To speak at upcoming OWASP Los Angeles meetings please submit your BIO and talk abstract via email to [mailto:richard.greenberg@owasp.org Richard Greenberg] OR [mailto:Stuart.Schwartz@owasp.org Stuart Schwartz]. The talk must be vendor neutral and its content be available under Creative Common 3.0 license.  
  
 
<br>  
 
<br>  
 +
 +
== '''Upcoming OWASP Meetings'''  ==
 +
<br>
  
 
== '''Other Events'''  ==
 
== '''Other Events'''  ==
*''' [http://www.socallinuxexpo.org/scale11x The Eleventh Annual Southern California Linux Expo February 22-24, 2013 Hilton Los Angeles International Airport] '''  
+
<br>
 +
== ''' [http://summit.issala.org/ Issa-LA Summit - Thursday, June 4,5 2015 7:30am - 6pm] '''<br> ==
  
*''' [http://www.issala.org/summit/ Early Bird Registration now open for the ISSA LA Security Summit May 21 at the Universal City Hilton] '''
+
== Archives of Previous Meetings  ==
 +
[[Los Angeles/2015 Meetings|2015 Meetings]]
  
 +
[[Los Angeles/2014 Meetings|2014 Meetings]]
 +
 +
[[Los Angeles/2013 Meetings|2013 Meetings]]
  
== Archives of Previous Meetings  ==
 
 
[[Los Angeles/2012 Meetings|2012 Meetings]]  
 
[[Los Angeles/2012 Meetings|2012 Meetings]]  
  
Line 129: Line 119:
 
[[Los Angeles/2008 Meetings|2008 Meetings]]  
 
[[Los Angeles/2008 Meetings|2008 Meetings]]  
  
[[Los Angeles Presentation Archive|List of presentations available from past meetings]] <!--A list of previous presentations conducted at the Los Angeles Chapter can be found [https://www.owasp.org/index.php/Los_Angeles_Previous_Presentations here].-->  
+
[[Los Angeles Presentation Archive | Presentation Archive ]] <!--A list of previous presentations conducted at the Los Angeles Chapter can be found [https://www.owasp.org/index.php/Los_Angeles_Previous_Presentations here].-->  
  
<br>  
+
<br>
  
 
== Los Angeles Chapter  ==
 
== Los Angeles Chapter  ==
Line 138: Line 128:
 
*[mailto:tin.zaw@owasp.org Tin Zaw] -- Board Member
 
*[mailto:tin.zaw@owasp.org Tin Zaw] -- Board Member
 
*[mailto:edward@owasp.org Edward Bonver] -- Board Member
 
*[mailto:edward@owasp.org Edward Bonver] -- Board Member
*[mailto:Kelly.Fitzgerald@owasp.org Kelly Fitzgerald] -- Board Member  
+
*[mailto:mike.francis@owasp.org Mike Francis] -- Board Member  
 
*[mailto:Stuart.Schwartz@owasp.org Stuart Schwartz] -- Board Member  
 
*[mailto:Stuart.Schwartz@owasp.org Stuart Schwartz] -- Board Member  
 +
*[mailto:aaron.guzman@owasp.org Aaron Guzman] -- Board Member
 +
*[mailto:dave.wettenstein@owasp.org Dave Wettenstein] -- Board Member 
  
Volunteer OWASP Leaders: Yev Avidon and Mikhael Felker  <br>
+
Volunteers: Yev Avidon and Mikhael Felker  <br>
Volunteer OWASP Wiki: Mike Francis <br>
+
OWASP Wiki: [mailto:mike.francis@owasp.org Mike Francis] <br>
 
The Los Angeles chapter was founded by Cassio Goldschmidt.  
 
The Los Angeles chapter was founded by Cassio Goldschmidt.  
  
 
<br>The AppSec USA 2010 conference received rave reviews. Thanks to all the volunteers and great speakers who helped make it a success!  
 
<br>The AppSec USA 2010 conference received rave reviews. Thanks to all the volunteers and great speakers who helped make it a success!  
 +
 +
<!-- === ''' [http://appseccali.org/ OWASP AppSec California Summit January 27-28, 2014-] ===
 +
-->
  
 
Web archive: http://2010.AppSecUSA.org  
 
Web archive: http://2010.AppSecUSA.org  

Latest revision as of 11:04, 2 March 2015

Welcome to the Los Angeles Chapter!

New_OWASP_LA_Logo-08-2014.jpg

Donatenow.jpg

Single Meeting Supporter: Organizations that wish to support the OWASP Los Angeles Chapter with a 100% tax deductible donation enable the OWASP Foundation to continue its mission

Get the following benefits::

- Meet upwards of 70-110 potential new clients
- Be recognized as a local supporter by posting your company logo on the local chapter page and on our Meetup site
- Have your marketing write-up included in e-mail blasts sent prior to a monthly meeting.
- Have a table at local chapter meeting 
- Promote your products and services
- Bring a raffle prize to gather business cards

Contact us #Los Angeles Chapter for general questions relating to sponsorship and donations

Participation

OWASP Foundation is a professional association of global members and is open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related security topic you would like to present on.

Announcements


OWASP Los Angeles received the BEST Chapter Leaders award at AppSec USA NY


Meetup_logo3.jpg [1] OWASP-Los-Angeles We are on Meetup. Please join our community here.

If you are unable to access Meetup from your work computer as a result of filtering of social sites, we recommend that you view it on your smart phone or via your personal computer.
http://www.meetup.com/OWASP-Los-Angeles/


Become an OWASP Member TODAY

Support your LA Chapter: only $50 for the entire year!
https://www.owasp.org/index.php/Individual_Member


Next OWASP Meeting

**NOTE: Please review NEW parking rules (@meetup.com) for our monthly meetings at Symantec as of 7/22/2014 **

Special OWASP-CSA Joint Meeting March 11,2015 7pm at Symantec Offices in Culver City

  Speaker: Jerry Hoff, VP of the Static Code Analysis Division at WhiteHat Security
  Topic: Web Attacks at Scale in 2015 (Alternative Title: Web Security Bootcamp) 

Abstract: This talk is an attacker-centric presentation demonstrating how modern pen-testing tools such as OWASP Zap, Browser Exploitation Framework (BeEF) and sqlmap can be used to automate web attacks at scale. Reenactments of some of the most publicized attacks in recent history will be conducted to ensure participants understand and absorb how these attacks are taking place. Full exploits using these tools and more will be demonstrated, and a discussion of solutions will follow.

Speaker Bio: Jerry Hoff is the Principal Security Strategist at WhiteHat Security. Prior to WhiteHat Security, Jerry co-founded Infrared Security, a specialist in application security and next-generation static analysis technologies. His work experience also includes a number of financial firms including Morgan Stanley Asia where he was on the global Security Architecture team based out of Hong Kong. He has more than a decade of experience in application security consulting, and has taught at Washington University’s CAIT program delivering security and development classes for thousands of developers. Jerry is a frequent speaker at numerous security events around the globe, and is a regular OWASP contributor, where he leads up the OWASP Application Tutorial Series and WebGoat.NET. Jerry holds a Master's degree in Computer Science from Washington University in St. Louis.


Thanks to our sponsor:

Whitehat.jpeg

March 25,2015 6:30pm at Microsoft 13031 W Jefferson Blvd Suite 200, Playa Vista, CA

  Speaker: Jeff Williams is the founder and CTO of Contrast Security
  Topic: Why Your AppSec Experts Are Killing You

Abstract: Software development has been transformed by practices like Continuous Integration and Continuous Integration, while application security has remained trapped in expert-based waterfall mode. In this talk, Jeff will show you how you can evolve into a “Continuous Application Security” organization that generates assurance automatically across an entire application security portfolio. Jeff will show you how to bootstrap the “sensor-model-dashboard” feedback loop that makes real time, continuous application security possible. He will demonstrate the approach with a new *free* tool called Contrast for Eclipse that brings the power of instrumentation-based application security testing directly into the popular IDE. Check out “Application Security at DevOps Speed and Portfolio Scale” for some background.

Speaker bio: Jeff Williams is the founder and CTO of Contrast Security, bringing the power of instrumentation and real time analytics to secure your application portfolio. Previously, Jeff was a founder and CEO of Aspect Security. He also served as Global Chairman of the OWASP Foundation where he created many open-source standards, tools, libraries, and guidelines – including the OWASP Top Ten, WebGoat, ESAPI, XSS CheatSheet, ASVS and more. Jeff welcomes hearing from you and may be reached directly at jeff.williams@contrastsecurity.com.

Thanks to our sponsor:

Prevoty Primary RGB 300.png

Prevoty delivers powerful real-time Application Security capability for enterprises via its runtime application and monitoring & protection technology. We solve security challenges across the entire application portfolio: Instant remediation of existing vulnerability backlogs (Past), Quicker time-to-market without introducing new vulnerabilities (Present), and Dramatically reduced exposure to zero-day attacks (Future).


Please RSVP here: http://www.meetup.com/OWASP-Los-Angeles/events/


Would you like to speak at an OWASP Los Angeles Meeting?

Call for Papers (CFP) is NOW OPEN. To speak at upcoming OWASP Los Angeles meetings please submit your BIO and talk abstract via email to Richard Greenberg OR Stuart Schwartz. The talk must be vendor neutral and its content be available under Creative Common 3.0 license.


Upcoming OWASP Meetings


Other Events


Issa-LA Summit - Thursday, June 4,5 2015 7:30am - 6pm

Archives of Previous Meetings

2015 Meetings

2014 Meetings

2013 Meetings

2012 Meetings

2011 Meetings

2010 Meetings

2009 Meetings

2008 Meetings

Presentation Archive


Los Angeles Chapter

Volunteers: Yev Avidon and Mikhael Felker
OWASP Wiki: Mike Francis
The Los Angeles chapter was founded by Cassio Goldschmidt.


The AppSec USA 2010 conference received rave reviews. Thanks to all the volunteers and great speakers who helped make it a success!


Web archive: http://2010.AppSecUSA.org

Videos: http://vimeo.com/user4863863/videos

AppSec Logo.jpg