Difference between revisions of "Louisville"

From OWASP
Jump to: navigation, search
(January 2010 Meeting)
(Q2 meeting update)
(24 intermediate revisions by 5 users not shown)
Line 1: Line 1:
{{Chapter Template|chaptername=Louisville|extra=The chapter leader is [mailto:cparker@accuvant.com Chris Parker]|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-Louisville|emailarchives=http://lists.owasp.org/pipermail/owasp-Louisville}}
+
{{Chapter Template|chaptername=Louisville|extra=The chapter leaders are: [mailto:curtis.koenig@owasp.org Curtis Koenig], [mailto:cfiske@humana.com Carolyn Fiske],[mailto:hnhaworth@gmail.com Heather Haworth], [mailto:Brian.Blankenship@owasp.com Brian Blankenship], and [mailto:ksullivan31@gmail.com Kristen Sullivan]|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-Louisville|emailarchives=http://lists.owasp.org/pipermail/owasp-Louisville}}
 +
 
 +
 
 +
 
 +
== Upcoming Events ==
 +
 
 +
'''May 14th, 2013 from 06:30-07:30PM'''
 +
 
 +
'''Where:''' LVL1 814 E Broadway  Louisville, KY 40204
 +
 
 +
'''Topic:'''  Blind SQL injection with sqlmap
 +
 
 +
'''Presenter:''' Conrad Reynolds
 +
 
 +
The next meeting will be held at LVL1.  If you are not familiar with it, LVL1 is a "hacker space" (or "maker space" if you prefer) where people get together to work on interesting projects. 
 +
 
 +
Conrad Reynolds is a very talented web application pen tester and excellent presenter which we are excited to have speaking.  In addition to learning about blind SQL injection, stick around if you are so inclined to attend the LVL1 weekly meeting to see what they are all about.  There are a lot of interesting projects going on at LVL1 to check out. 
 +
 
 +
For the OWASP meeting, please plan on arriving between 06:00 - 06:20PM.  Conrad's presentation will be from 06:30 - 07:30.  If you want to stay for the LVL1 meeting, it starts at 08:00PM, and runs for 30 minutes or so.  They also provide a tour of the facility for anyone interested.  Some of the LVL1 members also like to cook, and may have dinner available for donations.
 +
 
 +
This is our first evening timeframe meeting.  We want to accomodate as many as possible, and also wanted to partner up with LVL1 to cross-promote.  We hope to see you there!
 +
 
 +
For more information on LVL1, please check out their site at http://lvl1.org
 +
 
 +
 +
==Past Events==
 +
'''Please note: videos of our meetings are below in the presentations sections. We will try to take video of each meeting based on the speaker's permission. Demos may be omitted.'''
 +
{|class="collapsible collapsed wikitable"
 +
|-
 +
! Past Events
 +
|-
 +
|
 +
'''February 22nd, 2013'''
 +
 
 +
'''Meeting Location:''' Heartland Payment Systems, 1 Heartland Way ,  Jeffersonville, IN  47130
 +
Presentation:  11:30 – 12:30
 +
 
 +
'''Curtis Koenig''' is the current Chapter Leader for the Louisville OWASP chapter, serving the southern Indiana and Greater Louisville Metro area. He is the Sr. Security Program Manager for Mozilla, the open source project behind such products as Firefox and Thunderbird. Curtis has over 10 years in the security field with knowledge in security operations, incident response, security architecture, malware analysis, and security configuration and design. Curtis is a frequent speaker at conferences for Mozilla.  In his spare time Curtis like to hike and camp with his family and volunteers teaching leadership skills for youth and adults.
 +
 
 +
Topics:  With our chapter being newly rebooted, Curtis covered what OWASP is all about to provide some background for new people, as well as what has changed with OWASP since our last meeting.
 +
Curtis also covered a few open source tools like ZAP, Multilidae, and Web Goat, and how they are used internally at Mozilla.
 +
 
 +
'''Nov 11th 2011 , 11:30 AM – 1 PM'''
 +
 
 +
'''Meeting Location:'''
 +
Sullivan University Campus, 3101 Bardstown Road, Room 254, Louisville KY 40205 - (about 15 minutes from the airport…on I-264 East)
 +
 
 +
When you arrive at the University's main building, Drive around past the front visitor's doors to the parking area on the right side of the Main Building. Room 254 can be accessed via a back stairway near a break area on the back right-hand side of the building, very easy to spot.
 +
 
 +
'''Desktop Betrayal: Exploiting Clients through the Features They Demand'''
 +
In this talk, Tom Eston will explore the use of client features to gain privileged access to client systems. During previous talks around social networks, Tom Eston and fellow security researcher Kevin Johnson discovered that most of the damage they could perform against a target didn’t use an exploit against any vulnerable system. Tom and Kevin were able to create various attacks that made use of features being used on client machines. While this talk will not disclose any vulnerabilities within popular client software, Tom will be releasing multiple attacks that use these clients against their users. Tom will be discussing attacks using JavaScript, HTML5, PDF files, Flash, Data URIs, Web Workers and more. Tom will also discuss code to perform these attacks as well as add-ons to popular tools such as BeEF (Browser Exploitation Framework) that will enable these tools to make use of the attacks.
 +
 
 +
'''Tom Eston''' is the manager of the SecureState Profiling Team. Tom leads a team of highly skilled penetration testers that provides attack and penetration testing services for SecureState’s clients. Tom focuses much of his research on new technologies such as social media, mobile devices and new web technology. He is the founder of SocialMediaSecurity.com which is an open source community dedicated to exposing the insecurities of social media. Tom is also a security blogger, co-host of the Security Justice and Social Media Security podcasts and is a frequent speaker at security user groups and national conferences including DerbyCon, Notacon, OWASP AppSec, Black Hat USA, DEFCON and ShmooCon.
 +
|-
 +
|'''Chapter Meeting– Friday, May 21, 2010 11:30am-1pm - Lunch provided '''
 +
'''To RSVP:'''  Just send a message to '''[mailto:brian.r.blankenship@gmail.com Brian Blankenship]''' and indicate how many are coming.
 +
 
 +
'''Date/Time:  May 21th, 11:30 - 1:00PM'''
 +
 
 +
 
 +
'''Location:'''  Sullivan University - Room 254 (Address: 3101 Bardstown Road, Louisville KY 40205) – a big thank you to Sullivan University for supplying a room this month!
 +
 
 +
 +
 
 +
Our venue is located on the Sullivan University campus just off I-264 at Bardstown Road.
 +
 
 +
The particular Sullivan building is located at:
 +
 
 +
3101 Bardstown Road, Louisville KY 40205 Room 254
 +
 
 +
 +
 
 +
When you arrive at the University's main building, Drive around past the front visitor's doors to the parking area on the right side of the Main Building.
 +
 
 +
Room 254 can be accessed via a back stairway near a break area on the back right-hand side of the building.
 +
 
 +
The meeting "ROOM 254" has theater style seating for 90+, nice Video Screens setup also.
 +
 
 +
 +
'''Speaker: Mike Zusman'''
 +
 
 +
Mike comes to us from the Intrepidus group and we are very lucky to have him. He’s a former web application developer turned computer security consultant. Mike is known for his speaking engagements at BlackHat, Defcon, CanSecWest, numerous OWASP events, and a number of other regional events. His research interests include mobile applications and platforms, remote access technologies, fuzzing, and SSL/TLS, but he currently has a sweet spot for automating web application attacks, identity management, and abusing social networks.
 +
 
 +
Mike specializes in developing deep understandings of complex systems in a short period of time. Breaking software, and then documenting how he broke it. More importantly, he’s a skilled mountain biker, road cyclist, and snowboarder.
 +
 
 +
'''Donated Giveaways''' from O’Rielly’s Books via Jeremy Druin!!!! Thanks Jeremy!'''
 +
 
 +
    One copy of "Web Security Testing Cookbook"
 +
 
 +
    2 copies of "Hacking: The Next Generation"       
 +
 
 +
'''Please sign up for our mailing list. We will not abuse the list or send many emails, but we’d like to use it to send out our meeting invites and reminders. Thank you so very much for your participation. You’re attendance and involvement make our group great and help attract the very best speakers in the industry!'''
 +
|-
 +
|'''Louisville ISACA is having a Mini CEH training course / lab that I think everyone might be interested in.  We would like to share this with ISSA and OWASP members for the $700  price.'''
 +
 +
'''Details are posted on our site: http://www.isacaky.org/2010/certified-ethical-hacker-ceh-training-may-13-14th/'''
  
<paypal>Louisville</paypal>
 
  
==  Upcoming Events ==
 
  
 
'''Secure 360'''
 
'''Secure 360'''
Line 33: Line 126:
 
skype: lorna.alamri
 
skype: lorna.alamri
 
lorna.alamri@owasp.org''
 
lorna.alamri@owasp.org''
 +
|-
 +
|The January 2010 OWASP meeting featured a presentation from '''Rafal Los''' of HP.
  
==  January 2010 Meeting ==
+
'''''Speaker: Rafal Los on Flash and Web 2.0 security'''''
  
'''Louisville OWASP Chapter - Fourth Meeting, Friday January 29th, 2010'''
+
'''Rafal Los, Security Specialist with Hewlett-Packard's Application Security Center (ASC), is an industry veteran who has worked in a variety of security positions— from consultant to Information Security Officer in the Fortune 100— within some of the most demanding business environments. Rafal’s unique blend of technical expertise and business knowledge enable him to teach audiences about security techniques, programs and processes that they can both understand strategically, and realistically apply. He has extensive experience in security testing, risk analysis and management, penetration testing and architecture and policy. Previous successes include building and implementing a successful web application security program for one of the largest and most diverse companies in the world.'''
 +
|-
 +
|
  
'''Please Note:  RSVP Required!  The meeting location this quarter has a capacity of 40 persons. ''' Please send your RSVP as soon as possible to ensure a seat and lunch.  We apologize for any inconvenience this may cause and are seeking a larger venue for future meetings. 
 
  
To RSVP:  Just send a reply to '''[[Media:brian.r.blankenship@gmail.com]]''' and indicate how many are coming.
+
The third OWASP meeting featured a presentation from '''Rohyt Belani''' of Intrepidus Group.  
 
+
'''Date/Time:  January 29th, 11:30 - 1:00PM'''
+
Location:  MetroSafe Building, 410 S. Fifth Street. (there is a parking lot across the street, and a parking garage 1/2 block away).
+
 
+
'''Lunch is being provided by Imperva and Accuvant, and the room by Louisville Metro.'''  Thank you all for supporting the Louisville OWASP chapter!
+
 
+
''''''''Speaker: Rafal Los will be discussing Flash and Web 2.0 security (see bio below)''''''''
+
 
+
''“Rafal Los, Security Specialist with Hewlett-Packard's Application Security Center  (ASC), is an industry veteran who has worked in a variety of security positions—  from consultant to Information Security Officer in the Fortune 100— within some of  the most demanding business environments.  Rafal’s unique blend of technical  expertise and business knowledge enable him to teach audiences about security  techniques, programs and processes that they can both understand strategically,  and realistically apply.  He has extensive experience in security testing, risk  analysis and management, penetration testing and architecture and policy.  Previous successes include building and implementing a successful web  application security program for one of the largest and most diverse companies in  the world.”''
+
 
+
==  Past Meetings ==
+
 
+
The third OWASP meeting will feature a presentation from '''Rohyt Belani''' of Intrepidus Group.  
+
  
 
'''Along with being the CEO and co-founder of the Intrepidus Group, Rohyt is also Adjunct Professor at Carnegie Mellon University. Prior to starting the Intrepidus Group, Mr. Belani has held the positions of Managing Director at Mandiant, Principal Consultant at Foundstone and Researcher at the US-CERT. He is a contributing author for Osborne’s Hack Notes – Network Security, as well as Addison Wesley’s Extrusion Detection: Security Monitoring for Internal Intrusions. Mr. Belani is a regular speaker at various industry conferences including Black Hat, OWASP, ASIS, SecTOR, Hack in the Box, Infosec World, DallasCon, CPM, ISSA meetings, and several forums catering to the FBI, US Secret Service, and US Military. He has written technical articles and columns for online publications like Securityfocus and SC magazine, and has been interviewed by BBC Radio, Forbes magazine, TechNewsWorld, InformationWeek, Information Today, IndustryWeek, E-Commerce Times, SmartMoney, and Hacker Japan. Mr. Belani holds a Bachelor of Engineering in Computer Engineering from Bombay University and a Master of Science in Information Networking from Carnegie Mellon University. He currently leads the OWASP Java Project a world-wide consortium of Java security experts.'''  
 
'''Along with being the CEO and co-founder of the Intrepidus Group, Rohyt is also Adjunct Professor at Carnegie Mellon University. Prior to starting the Intrepidus Group, Mr. Belani has held the positions of Managing Director at Mandiant, Principal Consultant at Foundstone and Researcher at the US-CERT. He is a contributing author for Osborne’s Hack Notes – Network Security, as well as Addison Wesley’s Extrusion Detection: Security Monitoring for Internal Intrusions. Mr. Belani is a regular speaker at various industry conferences including Black Hat, OWASP, ASIS, SecTOR, Hack in the Box, Infosec World, DallasCon, CPM, ISSA meetings, and several forums catering to the FBI, US Secret Service, and US Military. He has written technical articles and columns for online publications like Securityfocus and SC magazine, and has been interviewed by BBC Radio, Forbes magazine, TechNewsWorld, InformationWeek, Information Today, IndustryWeek, E-Commerce Times, SmartMoney, and Hacker Japan. Mr. Belani holds a Bachelor of Engineering in Computer Engineering from Bombay University and a Master of Science in Information Networking from Carnegie Mellon University. He currently leads the OWASP Java Project a world-wide consortium of Java security experts.'''  
Line 60: Line 143:
  
 
'''''Site takedown services, anti-phishing filters, and millions of dollars worth of protective technologies…..and the spear phishers are still successful! This presentation will discuss why this is the case. Today, phishing is a key component in a “hackers” repertoire. Phishers are combining social engineering with application security flaws in well known websites to make automated detection of targeted phishing attacks almost impossible. The result - hijacked online brokerage accounts, stolen identities and e-bank robberies. During this talk, I will present the techniques used by attackers to execute such spear phishing attacks, and real-world cases that I have responded to that will provide perspective on the impact. I will then discuss countermeasures that have been proven to be effective and are recommended by reputed bodies like SANS and Carnegie Mellon University.'''''
 
'''''Site takedown services, anti-phishing filters, and millions of dollars worth of protective technologies…..and the spear phishers are still successful! This presentation will discuss why this is the case. Today, phishing is a key component in a “hackers” repertoire. Phishers are combining social engineering with application security flaws in well known websites to make automated detection of targeted phishing attacks almost impossible. The result - hijacked online brokerage accounts, stolen identities and e-bank robberies. During this talk, I will present the techniques used by attackers to execute such spear phishing attacks, and real-world cases that I have responded to that will provide perspective on the impact. I will then discuss countermeasures that have been proven to be effective and are recommended by reputed bodies like SANS and Carnegie Mellon University.'''''
 +
|-
 +
|The second OWASP meeting will featured a presentation from '''Adrian Crenshaw of Irongeek'''. Adrian is a Louisville based Security professional that has worked in the IT industry for the last twelve years.
  
 
+
'''Adrian runs the  information security website Irongeek.com, which specializes in videos and  articles that illustrate how to use various pen-testing and security tools. He's currently working on an MBA, but is interested in getting a network security/research/teaching job in academia. Please see the description from Adrian on his presentation on the 19th.'''
The second OWASP meeting will feature a presentation from '''Adrian Crenshaw of Irongeek'''. Adrian is a Louisville based Security professional that has worked in the IT industry for the last twelve years.
+
 
+
Adrian runs the  information security website Irongeek.com, which specializes in videos and  articles that illustrate how to use various pen-testing and security tools. He's currently working on an MBA, but is interested in getting a network security/research/teaching job in academia. Please see the description from Adrian on his presentation on the 19th.  
+
  
 
[[Title:]] '''Mutillidae: Using a deliberately vulnerable set of PHP scripts to illustrate the OWASP Top 10'''  
 
[[Title:]] '''Mutillidae: Using a deliberately vulnerable set of PHP scripts to illustrate the OWASP Top 10'''  
Description: A while back I wanted to start covering more web application pen-testing tools and concepts in some of my videos and live classes. Of course, I needed vulnerable web apps to illustrate common web security problems. I like the WebGoat project, but sometimes it's a little hard to figure out exactly what they want you to do to exploit a given web application, and it's written in J2EE (not a layman friendly language).  In an attempt to have something simple to use as a demo in my videos and in class, I started the Mutillidae project.
 
  
Mutillidae is a deliberately vulnerable set of PHP scripts meant to illustrate the OWASP Top 10. This talk will cover installing Mutillidae in a test environment, and how to use it to illustrate the OWASP Top 10 web vulnerabilities in easy to understand terms.  
+
'''''Description: A while back I wanted to start covering more web application pen-testing tools and concepts in some of my videos and live classes. Of course, I needed vulnerable web apps to illustrate common web security problems. I like the WebGoat project, but sometimes it's a little hard to figure out exactly what they want you to do to exploit a given web application, and it's written in J2EE (not a layman friendly language).  In an attempt to have something simple to use as a demo in my videos and in class, I started the Mutillidae project. Mutillidae is a deliberately vulnerable set of PHP scripts meant to illustrate the OWASP Top 10. This talk will cover installing Mutillidae in a test environment, and how to use it to illustrate the OWASP Top 10 web vulnerabilities in easy to understand terms.'''''
 +
|-
 +
|March 2009
  
'''Our meeting location will be at Memorial Auditorium, located at 970 S. 4th Street''' (Corner of 4th Street and Kentucky Street)..  
+
'''The first Louisville OWASP meeting was launched with the help of the Kentuckiana ISSA Chapter, on Friday March 6 2009. The Louisville OWASP chapter is closely associated with the Kentuckiana ISSA chapter and will offer ISSA members, other security professionals, application developers, and all other interested parties, a free forum to learn and discuss the newest developments in application security. Following March’s meeting, we will meet quarterly on a different day and time. The information on future meetings will be following soon. Please provide feedback to the board.'''
  
 
 
March 2009
 
The first Louisville OWASP meeting will coincide with the Kentuckiana ISSA March meeting, on Friday March 6 2009. The Louisville OWASP chapter is closely associated with the Kentuckiana ISSA chapter and will offer ISSA members, other security professionals, application developers, and all other interested parties, a free forum to learn and discuss the newest developments in application security. Following March’s meeting, we will meet quarterly on a different day and time. The information on future meetings will be following soon. Please provide feedback to the board.
 
 
*When: Friday, March 6, 2009, from 11:30 am to 1:00 pm @  Innovative Productivity / McConnell Technology, 401 Industry Rd, Louisville, KY 40208
 
 
If you plan to attend the meeting please RSVP by email to [mailto:Kristen.Sullivan@ky.gov Kristen Sullivan].
 
  
 
Everyone is welcome to join us at our chapter meetings.
 
Everyone is welcome to join us at our chapter meetings.
 +
|-
 +
|}
  
 
[[Category:OWASP Chapter]]
 
[[Category:OWASP Chapter]]
Line 89: Line 166:
  
 
Scope of the board is to discuss and approve local activities, meetings and plans.The board meetings will be announced at a later date. The board currently includes the following members:
 
Scope of the board is to discuss and approve local activities, meetings and plans.The board meetings will be announced at a later date. The board currently includes the following members:
*Chapter Leader: [mailto:cparker@accuvant.com Chris Parker]
+
*[mailto:curtis.koenig@owasp.org Curtis Koenig] - Chapter Leader
*[mailto:Kristen.Sullivan@ky.gov Kristen Sullivan]
+
*[mailto:cfiske@humana.com Carolyn Fiske] - Sponsor Relations
*[mailto:CHAlexander@ups.com Carl Alexander]
+
*[mailto:hnhaworth@gmail.com Heather Haworth] - Coordinator
*[mailto:Brian.Blankenship@kindredhealthcare.com Brian Blankenship]
+
*[mailto:Brian.Blankenship@owasp.org Brian Blankenship] / [mailto:ksullivan31@gmail.com Kristen Sullivan] - Communications
*[mailto:mitch.greenfield@gmail.com Mitchell Greenfield]
+
 
*[mailto:mthacker@humana.com Mark Thacker]
+
*[mailto:agupta@humana.com Ajay Gupta]
+
*[mailto:mmaxey@accuvant.com Mark Maxey]
+
*[mailto:jkoenig@humana.com Curtis Koenig]
+
*[mailto:scott_macarthur@b-f.com Scott MacArthur]
+
  
  
Line 113: Line 185:
  
 
[http://www.vimeo.com/6649338 September 2009 Presentation Rohyt Belani]
 
[http://www.vimeo.com/6649338 September 2009 Presentation Rohyt Belani]
 +
 +
[http://vimeo.com/9078415 January 2010 Presentation Rafal Los]
  
 
== About OWASP ==
 
== About OWASP ==
Line 137: Line 211:
  
 
http://www.sdtimes.com/OWASP_SHEDS_LIGHT_ON_ITS_SECURITY_STANDARDS/About_OWASP_and_SECURITY/33469
 
http://www.sdtimes.com/OWASP_SHEDS_LIGHT_ON_ITS_SECURITY_STANDARDS/About_OWASP_and_SECURITY/33469
 +
 +
[[Category:Kentucky]]

Revision as of 16:34, 30 April 2013

Contents

OWASP Louisville

Welcome to the Louisville chapter homepage. The chapter leaders are: Curtis Koenig, Carolyn Fiske,Heather Haworth, Brian Blankenship, and Kristen Sullivan
Click here to join the local chapter mailing list.

Participation

OWASP Foundation (Overview Slides) is a professional association of global members and is and open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.

Sponsorship/Membership

Btn donate SM.gif to this chapter or become a local chapter supporter.

Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member? Join Now BlueIcon.JPG


Upcoming Events

May 14th, 2013 from 06:30-07:30PM

Where: LVL1 814 E Broadway Louisville, KY 40204

Topic: Blind SQL injection with sqlmap

Presenter: Conrad Reynolds

The next meeting will be held at LVL1. If you are not familiar with it, LVL1 is a "hacker space" (or "maker space" if you prefer) where people get together to work on interesting projects.

Conrad Reynolds is a very talented web application pen tester and excellent presenter which we are excited to have speaking. In addition to learning about blind SQL injection, stick around if you are so inclined to attend the LVL1 weekly meeting to see what they are all about. There are a lot of interesting projects going on at LVL1 to check out.

For the OWASP meeting, please plan on arriving between 06:00 - 06:20PM. Conrad's presentation will be from 06:30 - 07:30. If you want to stay for the LVL1 meeting, it starts at 08:00PM, and runs for 30 minutes or so. They also provide a tour of the facility for anyone interested. Some of the LVL1 members also like to cook, and may have dinner available for donations.

This is our first evening timeframe meeting. We want to accomodate as many as possible, and also wanted to partner up with LVL1 to cross-promote. We hope to see you there!

For more information on LVL1, please check out their site at http://lvl1.org


Past Events

Please note: videos of our meetings are below in the presentations sections. We will try to take video of each meeting based on the speaker's permission. Demos may be omitted.

Louisville OWASP Chapter Board Members

Scope of the board is to discuss and approve local activities, meetings and plans.The board meetings will be announced at a later date. The board currently includes the following members:


Join our group on LinkedIn

http://www.linkedin.com/groups?gid=1917263

Meeting Presentations

We are now trying to video all of our presentations thanks to our newest board member, Adrian Crenshaw! The taping of our meetings will be with the consent of our speakers. Thanks.

March 2009 Presentation

June 2009 Presentation Adrian Crenshaw

September 2009 Presentation Rohyt Belani

January 2010 Presentation Rafal Los

About OWASP

The OWASP Foundation is a 501(c)3 non-profit organization incorporated in the United States of America. OWASP's all-volunteer participants produce free, professional quality, open-source documentation, tools, and standards. Consult the how OWASP works web page for more information about projects and governance.


OWASP Membership

OWASP is an open source project dedicated to finding and fighting the causes of insecure software. All of our materials are free and offered under an open source license, so you do not have to become a member to use them or participate in our projects, mailing lists, conferences, meetings or other activities. On the other hand OWASP rely membership fees and sponsorship to support his activities. There are also unique benefits to become a corporate member such as the use of OWASP materials within your organization without the restrictions associated with the various open source licenses. OWASP individual members also get discounts to security conferences and other perks. For more information consult the OWASP Membership web page.


Articles, Links, etc.

OWASP article with the official SCG release on Darkreading magazine today.

http://www.darkreading.com/security/app-security/showArticle.jhtml?articleID=216402325

The Rocky Road to More Secure Code

http://www.darkreading.com/security/app-security/showArticle.jhtml?articleID=216403548&cid=nl_DR_WEEKLY_T

OWASP Sheds Light on its Security Standards

http://www.sdtimes.com/OWASP_SHEDS_LIGHT_ON_ITS_SECURITY_STANDARDS/About_OWASP_and_SECURITY/33469