Difference between revisions of "Switzerland"

From OWASP
Jump to: navigation, search
m (Past Meetings: Added the last presentation; Next Meeting: Updated to the next meeting date)
m (Netx and Past Meeting updated)
 
(48 intermediate revisions by 2 users not shown)
Line 7: Line 7:
 
Welcome to the Home Page of the OWASP Switzerland Chapter.  
 
Welcome to the Home Page of the OWASP Switzerland Chapter.  
  
*The chapter leader is [mailto:sven.vetsch__AT__owasp.org Sven Vetsch] supported by the members of the board [mailto:antonio.fontes__AT__owasp.org Antonio Fontes] and [mailto:alexis.fitzgerald__AT__owasp.org Alexis FitzGerald]. Please contact us with any questions about the chapter.  
+
*The chapter leader is [mailto:sven.vetsch__AT__owasp.org Sven Vetsch] supported by [mailto:antonio.fontes__AT__owasp.org Antonio Fontes]. Please contact us with any questions regarding the chapter.  
 
*Please subscribe to the [https://lists.owasp.org/mailman/listinfo/owasp-switzerland mailing list] for meeting announcements and other news related to OWASP in Switzerland.  
 
*Please subscribe to the [https://lists.owasp.org/mailman/listinfo/owasp-switzerland mailing list] for meeting announcements and other news related to OWASP in Switzerland.  
 
*You can follow us on [https://twitter.com/owasp_ch Twitter] and [https://www.facebook.com/OWASPSwitzerland Facebook]
 
*You can follow us on [https://twitter.com/owasp_ch Twitter] and [https://www.facebook.com/OWASPSwitzerland Facebook]
Line 15: Line 15:
 
= Next Meetings  =
 
= Next Meetings  =
 
Please find below the planned dates for the upcoming OWASP Switzerland Meetings:
 
Please find below the planned dates for the upcoming OWASP Switzerland Meetings:
* '''Wednesday, April 9th 2014'''
 
* Tuesday, June 17th 2014
 
* Wednesday, August 20th 2014
 
* Tuesday, October 21th 2014
 
* Wednesday, December 10th 2014
 
  
<!--
+
 
 +
{| class="wikitable sortable" border="0"
 +
|-
 +
! scope="col" | Date
 +
! scope="col" class="unsortable" | Info
 +
! scope="col" class="unsortable" | Speaker
 +
! scope="col" class="unsortable" | Location
 +
! scope="col" class="unsortable" | Host
 +
! scope="col" | Event
 +
! scope="col" | Topic
 +
|-
 +
| 2015-04-15
 +
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/mailman/listinfo/owasp-switzerland]]</center>
 +
| <center>?</center>
 +
| <center>[[Image:location.png|20px|link=https://www.google.ch/maps/place/Hagenholzstrasse+20,+8050+Zürich]]</center>
 +
| [https://www.credit-suisse.com/ch/ Credit Suisse]
 +
| Chapter Meeting
 +
| ?
 +
|-
 +
| 2015-06-17
 +
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/mailman/listinfo/owasp-switzerland]]</center>
 +
| <center>?</center>
 +
| <center>[[Image:location.png|20px|link=https://goo.gl/maps/V7MmY]]</center>
 +
| [http://www.csnc.ch/ Compass Security]
 +
| Chapter Meeting
 +
| ?
 +
|-
 +
| 2015-08-19
 +
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/mailman/listinfo/owasp-switzerland]]</center>
 +
| <center>?</center>
 +
| <center>?</center>
 +
| ?
 +
| Chapter Meeting
 +
| ?
 +
|-
 +
| 2015-10-14
 +
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/mailman/listinfo/owasp-switzerland]]</center>
 +
| <center>?</center>
 +
| <center>?</center>
 +
| ?
 +
| Chapter Meeting
 +
| ?
 +
|-
 +
| 2015-12-15
 +
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/mailman/listinfo/owasp-switzerland]]</center>
 +
| <center>?</center>
 +
| <center>?</center>
 +
| ?
 +
| Chapter Meeting
 +
| ?
 +
|}
 +
 
 +
<!--  
 
<br>
 
<br>
 
----
 
----
 
<br>
 
<br>
'''Wednesday, February 19th 2014'''<br>
+
[[File:owasp_switzerland_next_meeting.png|150px|right|OWASP Switzerland Next Meeting]]
We'd like to invite you to the first of six OWASP Switzerland meetings in 2014. Please make sure to [https://doodle.com/aa8822cp5qfkpu3z register] for the event using your full name as this is needed to access the Swisscom premises where the meeting will take place.
+
 
<br>
+
We'd like to invite you to out next OWASP Switzerland meeting. If you want to attend, please make sure to [http://doodle.com/ump72ns8kev85zhk register] for the event as the space is ''limited'' to 20 attendees.
 +
 
 
* When:
 
* When:
*:Wednesday, February 19th 2014
+
*:Wednesday, December 10th 2014
*:Starting at 18:00
+
*:The exact time and place will be communicated as soon as the reservation has been made after the registration has been closed.
*:Doors at 17:30
+
  
 
* What:
 
* What:
*:'''S-SDLC – Ready for Clouds?''' (''by Robert Schneider, Swisscom IT Services AG [[Image:person.png|20px|link=User:Schattenbaum]]'')
+
*:'As those of you who joined our last OWASP Meeting already know, the December meeting will be a bit special. There won’t be any big presentations but we’ll meet somewhere in Zurich to have a cheese fondue and talk about what happened in 2014 appsec wise. We hope many of you find the time to have a fun and relaxed dinner to close the year.
*:Many companies have it (somehow) and numerous are planning to implement one – a Secure Software Development Life Cycle (S-SDLC). As Swisscom is building a new Cloud, the whole S-SDLC had to be reconsidered to match the new challenges. In this presentation I would like to give you an overview of the four fundamental phases that we plan to implement in our new S-SDLC (Intellectual Property Scan, Code Review, Vulnerability Scanning and Stress & Load Testing) as well as an idea of what these phases are meant to do. Additionally, I would like to give you an idea of what possible candidates (i.e. tools) could be of interest for you and where we see the biggest pitfalls so far.
+
*:As this is a considerable topic, I hope that you bring with you many questions, answers as well as your own experiences to share with each other.
+
  
 
* Where:
 
* Where:
*:Swisscom IT Services AG
+
*:Coming soon
*:Pfingstweidstrasse 51
+
*:CH-8005 Zürich
+
*:[https://maps.google.ch/maps?q=Pfingstweidstrasse+51+Z%C3%BCrich+8005 Google Maps]
+
 
+
<pre>Please *don't* use the main entrance.
+
We will be waiting for you on the back side of the building (opposite to the Renaissance Hotel).</pre>
+
  
 
* Who:
 
* Who:
*:As usual, all of our meetings are open to everyone and free of charge.
+
*:The dinner is as every OWASP meeting open to everyone and free of charge. Food and drinks will be paid by everyone individually.
 
+
* Agenda
+
*:18:00 – 18:15 | Intro and Update on OWASP by Sven Vetsch, OWASP Switzerland [[Image:person.png|20px|link=User:Disenchant]]
+
*:18:20 – 19:30 | S-SDLC – Ready for Clouds? by Robert Schneider, Swisscom IT Services AG [[Image:person.png|20px|link=User:Schattenbaum]]
+
*:20:00 – **:** | Dinner
+
 
-->
 
-->
 
 
<!--Fore this year we are planning to serve you with six meetings. The first one will take place in February.<br>
 
<!--Fore this year we are planning to serve you with six meetings. The first one will take place in February.<br>
 
Keep yourself informed and up-to-date by using one of the possibilities listed below. -->
 
Keep yourself informed and up-to-date by using one of the possibilities listed below. -->
 
<!-- There are no planned meetings for 2015 yet. Keep yourself informed and up-to-date by subscribing to our (low-traffic) [https://lists.owasp.org/mailman/listinfo/owasp-switzerland mailinglist]. -->
 
<!-- There are no planned meetings for 2015 yet. Keep yourself informed and up-to-date by subscribing to our (low-traffic) [https://lists.owasp.org/mailman/listinfo/owasp-switzerland mailinglist]. -->
 
  
 
= Past Meetings  =
 
= Past Meetings  =
Line 68: Line 100:
 
|-
 
|-
 
| 2013-12-17
 
| 2013-12-17
| [[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2013-October/000258.html]]
+
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2013-October/000258.html]]</center>
| [[Image:person.png|20px|link=User:USERNAME]]
+
| <center>[[Image:person.png|20px|link=User:USERNAME]]</center>
| [[Image:slides.png|20px|link=File:FILENAME.pdf]]
+
| <center>[[Image:location.png|20px|link=http://www.owasp.ch]]</center>
 +
| <center>[[Image:slides.png|20px|link=File:FILENAME.pdf]]</center>
 
| Chapter Meeting (or as an example: Area41)
 
| Chapter Meeting (or as an example: Area41)
 
| Node security
 
| Node security
Line 82: Line 115:
 
! scope="col" class="unsortable" | Info
 
! scope="col" class="unsortable" | Info
 
! scope="col" class="unsortable" | Speaker
 
! scope="col" class="unsortable" | Speaker
! scope="col" class="unsortable" | Slides
+
! scope="col" class="unsortable" | Host
 +
! scope="col" | Slides
 
! scope="col" | Event
 
! scope="col" | Event
 
! scope="col" | Topic
 
! scope="col" | Topic
 +
|-
 +
| 2015-02-18
 +
| <center>[[Image:info.png|20px|link=http://lists.owasp.org/pipermail/owasp-switzerland/2015-January/000292.html]]</center>
 +
| <center>[[Image:person.png|20px|link=https://miki.it/]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.swisscom.com/]]</center>
 +
| <center>[[Image:slides.png|20px|link=File:20150218-Abusing_JSONP_with_Rosetta_Flash-miki.it.pdf]]</center>
 +
| Chapter Meeting
 +
| Abusing JSONP with Rosetta Flash
 +
|-
 +
| 2014-12-10
 +
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2014-November/000286.html]]</center>
 +
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.vorbahnhof.ch/]]</center>
 +
|
 +
| Chapter Meeting
 +
| OWASP Switzerland Fondue
 +
|-
 +
| 2014-11-12
 +
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2014-October/000282.html]]</center>
 +
| <center>[[Image:person.png|20px|link=http://www.christian-folini.ch/]]</center>
 +
| <center>[[Image:location.png|20px|link=https://www.open.ch/]]</center>
 +
| <center>[[Image:slides.png|20px|link=File:Owasp-ch-folini-nov-2014.pdf]]</center>
 +
| Chapter Meeting
 +
| Living on the Edge - Advanced ModSecurity to Save Your Ass
 +
|-
 +
| 2014-08-20
 +
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2014-August/000279.html]]</center>
 +
| <center>[[Image:person.png|20px|link=http://www.arcus-security.ch/]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.kshp.ch/]]</center>
 +
| <center>[[Image:slides.png|20px|link=File:20140820-Flash_Security_by_Arcus_Security.pdf]]</center>
 +
| Chapter Meeting
 +
| (Client-Side) Flash Security
 +
|-
 +
| 2014-06-17
 +
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2014-June/000275.html]]</center>
 +
| <center>[[Image:person.png|20px|link=https://www.sec-consult.com/]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.credit-suisse.ch/]]</center>
 +
| <center>[[Image:slides.png|20px|link=File:20140617-XSS_and_beyond-Rene.pdf]]</center>
 +
| Chapter Meeting
 +
| XSS and beyond
 +
|-
 +
| 2014-04-09
 +
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2014-April/000271.html]]</center>
 +
| <center>[[Image:person.png|20px|link=https://twitter.com/dobinrutis]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.ubs.com/ch/]]</center>
 +
| <center>[[Image:slides.png|20px|link=File:20140409-SSL_TLS_jungle-Dobinrutis.pdf]]</center>
 +
| Chapter Meeting
 +
| SSL/TLS jungle - bringing light into the cipher forest
 
|-
 
|-
 
| 2014-02-19
 
| 2014-02-19
| [[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2014-January/000267.html]]
+
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2014-January/000267.html]]</center>
| [[Image:person.png|20px|link=User:Schattenbaum]]
+
| <center>[[Image:person.png|20px|link=User:Schattenbaum]]</center>
| [[Image:slides.png|20px|link=File:20140219-SSDLC_Ready_for_Clouds-Robert.pdf]]
+
| <center>[[Image:location.png|20px|link=http://www.swisscom.ch/]]</center>
 +
| <center>[[Image:slides.png|20px|link=File:20140219-SSDLC_Ready_for_Clouds-Robert.pdf]]</center>
 
| Chapter Meeting
 
| Chapter Meeting
| S-SDLC – Ready for Clouds?
+
| S-SDLC – Ready for the Cloud?
 
|-
 
|-
 
| 2013-12-17
 
| 2013-12-17
| [[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2013-December/000262.html]]
+
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2013-December/000262.html]]</center>
|  
+
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.credit-suisse.ch/]]</center>
 
|  
 
|  
 
| Chapter Meeting
 
| Chapter Meeting
Line 101: Line 185:
 
|-
 
|-
 
| 2013-10-22
 
| 2013-10-22
| [[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2013-October/000258.html]]
+
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2013-October/000258.html]]</center>
| [[Image:person.png|20px|link=https://www.xing.com/profiles/Alexandre_Herzog]]
+
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Alexandre_Herzog]]</center>
| [[Image:slides.png|20px|link=File:20131022-advances_in_secure_aspnet_development-alexandre.pdf]]
+
| <center>[[Image:location.png|20px|link=http://www.colab-zurich.ch/]]</center>
 +
| <center>[[Image:slides.png|20px|link=File:20131022-advances_in_secure_aspnet_development-alexandre.pdf]]</center>
 
| Chapter Meeting
 
| Chapter Meeting
 
| Advances in secure (ASP).NET development – Break the hacker's spirit
 
| Advances in secure (ASP).NET development – Break the hacker's spirit
 
|-
 
|-
 
| 2013-10-22
 
| 2013-10-22
| [[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2013-October/000258.html]]
+
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2013-October/000258.html]]</center>
| [[Image:person.png|20px|link=User:Disenchant]]
+
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
| [[Image:slides.png|20px|link=File:20131022-node_security-disenchant.pdf]]
+
| <center>[[Image:location.png|20px|link=http://www.colab-zurich.ch/]]</center>
 +
| <center>[[Image:slides.png|20px|link=File:20131022-node_security-disenchant.pdf]]</center>
 
| Chapter Meeting
 
| Chapter Meeting
 
| Node.js Security
 
| Node.js Security
 
|-
 
|-
 
| 2013-04-09
 
| 2013-04-09
| [[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2013-March/000241.html]]
+
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2013-March/000241.html]]</center>
|  
+
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.securesafe.com/]]</center>
 
|  
 
|  
 
| Chapter Meeting
 
| Chapter Meeting
|  
+
| Tools (not) to use
 
|-
 
|-
 
| 2012-09-19
 
| 2012-09-19
 
|  
 
|  
| [[Image:person.png|20px|link=User:Disenchant]]
+
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
| [[Image:slides.png|20px|link=File:Owasp_top_10_mobile_risks.pdf]]
+
| <center>[[Image:location.png|20px|link=http://www.security-zone.info/]]</center>
 +
| <center>[[Image:slides.png|20px|link=File:Owasp_top_10_mobile_risks.pdf]]</center>
 
| Security-Zone
 
| Security-Zone
 
| OWASP Top 10 Mobile Risks
 
| OWASP Top 10 Mobile Risks
 
|-
 
|-
 
| 2012-06-12
 
| 2012-06-12
| [[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2012-June/000229.html]]
+
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2012-June/000229.html]]</center>
|  
+
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Tobias_Ospelt]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
 
|  
 
|  
 
| Chapter Meeting
 
| Chapter Meeting
|  
+
| Reversing Android Apps
 
|-
 
|-
 
| 2012-02-14
 
| 2012-02-14
| [[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2012-February/000224.html]]
+
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2012-February/000224.html]]</center>
 +
| <center>[[Image:person.png|20px|link=https://www.blackhat.com/html/bh-us-12/speakers/Gianni-Gnesa.html]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
 
|  
 
|  
 +
| Chapter Meeting
 +
| Analysis of the RSA Security Breach
 +
|-
 +
| 2011-12-13
 +
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2011-December/000223.html]]</center>
 +
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Alexis_FitzGerald]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
 
|  
 
|  
 
| Chapter Meeting
 
| Chapter Meeting
|
+
| AppSec - Why is it important
 
|-
 
|-
 
| 2011-12-13
 
| 2011-12-13
| [[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2011-December/000223.html]]
+
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2011-December/000223.html]]</center>
|  
+
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Stephan_Berger37]][[Image:person.png|20px|link=https://plus.google.com/106548980928636767176/posts]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
 
|  
 
|  
 
| Chapter Meeting
 
| Chapter Meeting
|  
+
| Dangers of Firefox Add-On's
 
|-
 
|-
 
| 2011-10-11
 
| 2011-10-11
| [[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2011-September/000218.html]]
+
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2011-September/000218.html]]</center>
|  
+
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Cyrill_Brunschwiler]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.itacs.ch/]]</center>
 
|  
 
|  
 
| Chapter Meeting
 
| Chapter Meeting
|  
+
| Presentation of the OWASP Top 10 & a hands-on session
 
|-
 
|-
 
| 2011-08-09
 
| 2011-08-09
| [[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2011-August/000215.html]]
+
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2011-August/000215.html]]</center>
|  
+
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
|  
+
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
| Foundation of OWASP Switzerland Association
+
 
|  
 
|  
 +
| Chapter Meeting
 +
| Foundation of OWASP Switzerland Association
 
|-
 
|-
 
| 2011-06-14
 
| 2011-06-14
| [[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2011-June/000208.html]]
+
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2011-June/000208.html]]</center>
| [[Image:person.png|20px|link=https://www.xing.com/profiles/Pascal_Buchbinder]]
+
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Pascal_Buchbinder]]</center>
| [[Image:slides.png|20px|link=File:Owasl_lcm_20110614_mod_sslcrl.pdf]]
+
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
 +
| <center>[[Image:slides.png|20px|link=File:Owasl_lcm_20110614_mod_sslcrl.pdf]]</center>
 
| Chapter Meeting
 
| Chapter Meeting
 
| Automatic CRL updates for the Apache Web server
 
| Automatic CRL updates for the Apache Web server
 
|-
 
|-
 
| 2011-06-14
 
| 2011-06-14
| [[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2011-June/000208.html]]
+
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2011-June/000208.html]]</center>
| [[Image:person.png|20px|link=User:Disenchant]]
+
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
| [[Image:slides.png|20px|link=File:OWASP_Browser_Security.pdf]]
+
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
 +
| <center>[[Image:slides.png|20px|link=File:OWASP_Browser_Security.pdf]]</center>
 
| Chapter Meeting
 
| Chapter Meeting
 
| New Standards and upcoming Technologies in Browser Security (Slides by [https://www.owasp.org/index.php/User:Tgondrom Tobias Gondrom])
 
| New Standards and upcoming Technologies in Browser Security (Slides by [https://www.owasp.org/index.php/User:Tgondrom Tobias Gondrom])
Line 179: Line 282:
 
| 2011-05-12
 
| 2011-05-12
 
|  
 
|  
| [[Image:person.png|20px|link=User:Afontes]]
+
| <center>[[Image:person.png|20px|link=User:Afontes]]</center>
| [[Image:slides.png|20px|link=https://www.owasp.org/index.php/File:SwissCyberStorm3-Do_you_know_OWASP.pdf]]
+
| <center>[[Image:location.png|20px|link=https://www.swisscyberstorm.com/]]</center>
 +
| <center>[[Image:slides.png|20px|link=https://www.owasp.org/index.php/File:SwissCyberStorm3-Do_you_know_OWASP.pdf]]</center>
 
| Swiss Cyber Storm III
 
| Swiss Cyber Storm III
|  
+
| Do you know OWASP?
 
|-
 
|-
 
| 2011-04-12
 
| 2011-04-12
| [[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2011-April/000204.htmll]]
+
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2011-April/000204.html]]</center>
| [[Image:person.png|20px|link=https://www.xing.com/profiles/Alexandre_Herzog]]
+
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Alexandre_Herzog]]</center>
| [[Image:slides.png|20px|link=File:20110412-aspnet_viewstate_security-alexandre.pdf]]
+
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
 +
| <center>[[Image:slides.png|20px|link=File:20110412-aspnet_viewstate_security-alexandre.pdf]]</center>
 
| Chapter Meeting
 
| Chapter Meeting
 
| ASP.NET & ViewState Security
 
| ASP.NET & ViewState Security
 
|-
 
|-
 
| 2010-04-12
 
| 2010-04-12
| [[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2010-February/000152.html]]
+
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2010-February/000152.html]]</center>
| [[Image:person.png|20px|link=https://www.xing.com/profiles/Tobias_Christen]]
+
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Tobias_Christen]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
 
|  
 
|  
 
| Chapter Meeting
 
| Chapter Meeting
Line 199: Line 305:
 
|-
 
|-
 
| 2010-04-12
 
| 2010-04-12
| [[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2010-February/000152.html]]
+
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2010-February/000152.html]]</center>
| [[Image:person.png|20px|link=https://www.xing.com/profiles/Michael_Tschannen]]
+
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Michael_Tschannen]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.rheinfelder.ch/]]</center>
 
|  
 
|  
 
| Chapter Meeting
 
| Chapter Meeting
Line 206: Line 313:
 
|-
 
|-
 
| 2009-06-25
 
| 2009-06-25
| [[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2009-June/000144.html]]
+
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2009-June/000144.html]]</center>
 +
| <center>[[Image:person.png|20px|Jerry Hoff]][[Image:person.png|20px|Jason Li]]</center>
 +
| <center>[[Image:location.png|20px|link=https://www.avantec.ch/]]</center>
 
|  
 
|  
 +
| Chapter Meeting
 +
| Benefits of a security API such as ESAPI
 +
|-
 +
| 2009-06-25
 +
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2009-June/000144.html]]</center>
 +
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Bruno_Blumenthal]]</center>
 +
| <center>[[Image:location.png|20px|link=https://www.avantec.ch/]]</center>
 
|  
 
|  
 
| Chapter Meeting
 
| Chapter Meeting
 +
| Advanced SQL injection exploitation to operating system full control
 +
|-
 +
| 2009-04-07
 +
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2009-March/000140.html]]</center>
 +
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Tobias_Christen]]</center>
 +
| <center>[[Image:location.png|20px|link=https://www.avantec.ch/]]</center>
 
|  
 
|  
 +
| Chapter Meeting
 +
| Open security architecture (www.opensecurityarchitecture.org)
 
|-
 
|-
 
| 2009-04-07
 
| 2009-04-07
| [[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2009-March/000140.html]]
+
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2009-March/000140.html]]</center>
|  
+
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Cyrill_Brunschwiler]]</center>
 +
| <center>[[Image:location.png|20px|link=https://www.avantec.ch/]]</center>
 
|  
 
|  
 
| Chapter Meeting
 
| Chapter Meeting
 +
| XSRF and JSON hijacking & a hands-on session
 +
|-
 +
| 2008-09-08
 +
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2008-August/000132.html]]</center>
 +
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Pascal_Buchbinder]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.swissre.com/]]</center>
 
|  
 
|  
 +
| Chapter Meeting
 +
| Quality of services for web applications (Hands-On Workshop)
 
|-
 
|-
 
| 2008-09-08
 
| 2008-09-08
| [[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2008-August/000132.html]]  
+
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2008-August/000132.html]]</center>
|  
+
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Cyrill_Brunschwiler]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.swissre.com/]]</center>
 
|  
 
|  
 
| Chapter Meeting
 
| Chapter Meeting
 +
| XML Security (Hands-On Workshop)
 +
|-
 +
| 2008-09-08
 +
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2008-August/000132.html]]</center>
 +
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Alessandro_Moretti]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.swissre.com/]]</center>
 
|  
 
|  
 +
| Chapter Meeting
 +
| ISC2/Application security
 
|-
 
|-
 
| 2008-04-01
 
| 2008-04-01
|  
+
| <center>[[Image:info.png|20px|link=http://lists.owasp.org/pipermail/owasp-switzerland/2008-March/000114.html]]</center>
| [[Image:person.png|20px|link=https://www.xing.com/profiles/Christian_Folini]]
+
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Christian_Folini]]</center>
 +
| <center>[[Image:location.png|20px|link=https://www.ethz.ch/]]</center>
 
|  
 
|  
 
| Global OWASP Week
 
| Global OWASP Week
Line 234: Line 377:
 
|-
 
|-
 
| 2008-04-01
 
| 2008-04-01
|  
+
| <center>[[Image:info.png|20px|link=http://lists.owasp.org/pipermail/owasp-switzerland/2008-March/000114.html]]</center>
| [[Image:person.png|20px|link=https://www.xing.com/profiles/Alessandro_Moretti]]
+
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Alessandro_Moretti]]</center>
 +
| <center>[[Image:location.png|20px|link=https://www.ethz.ch/]]</center>
 
|  
 
|  
 
| Global OWASP Week
 
| Global OWASP Week
Line 241: Line 385:
 
|-
 
|-
 
| 2008-04-01
 
| 2008-04-01
|  
+
| <center>[[Image:info.png|20px|link=http://lists.owasp.org/pipermail/owasp-switzerland/2008-March/000114.html]]</center>
| [[Image:person.png|20px|link=User:Disenchant]]
+
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 +
| <center>[[Image:location.png|20px|link=https://www.ethz.ch/]]</center>
 
|  
 
|  
 
| Global OWASP Week
 
| Global OWASP Week
Line 248: Line 393:
 
|-
 
|-
 
| 2007-12-11
 
| 2007-12-11
| [[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2007-November/000106.html]]
+
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2007-November/000106.html]]</center>
 +
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Thomas_Bader]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.zurich.com/]]</center>
 
|  
 
|  
 +
| Chapter Meeting
 +
| Certified Secure Web
 +
|-
 +
| 2007-12-11
 +
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2007-November/000106.html]]</center>
 +
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/Tobias_Christen]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.zurich.com/]]</center>
 
|  
 
|  
 
| Chapter Meeting
 
| Chapter Meeting
 +
| Secure Development Life Cycle
 +
|-
 +
| 2007-12-11
 +
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2007-November/000106.html]]</center>
 +
| <center>[[Image:person.png|20px|Daniel Hulliger]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.zurich.com/]]</center>
 
|  
 
|  
 +
| Chapter Meeting
 +
| Securing my Assets (Presentation & Demo)
 
|-
 
|-
 
| 2007-09-20
 
| 2007-09-20
| [[Image:info.png|20px|link=http://www.disenchant.ch/blog/owasp-switzerland-goes-public/80]]
+
| <center>[[Image:info.png|20px|link=http://www.disenchant.ch/blog/owasp-switzerland-goes-public/80]]</center>
|  
+
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.security-zone.info/]]</center>
 
|  
 
|  
 
| Security-Zone
 
| Security-Zone
|  
+
| OWASP Testing Guide
 
|-
 
|-
 
| 2007-09-19
 
| 2007-09-19
| [[Image:info.png|20px|link=http://www.disenchant.ch/blog/owasp-switzerland-goes-public/80]]
+
| <center>[[Image:info.png|20px|link=http://www.disenchant.ch/blog/owasp-switzerland-goes-public/80]]</center>
|  
+
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 +
| <center>[[Image:location.png|20px|link=http://www.security-zone.info/]]</center>
 
|  
 
|  
 
| Security-Zone
 
| Security-Zone
 +
| OWASP Top 10
 +
|-
 +
| 2007-07-24
 +
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2007-July/000095.html]]</center>
 +
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 +
| <center>[[Image:location.png|20px|link=https://www.zurich.ch/]]</center>
 
|  
 
|  
 +
| Chapter Meeting
 +
| OWASP - An Overview
 
|-
 
|-
 
| 2007-07-24
 
| 2007-07-24
| [[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2007-July/000095.html]]
+
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2007-July/000095.html]]</center>
| [[Image:person.png|20px|link=https://www.xing.com/profiles/Pierre_Parrend]]
+
| <center>[[Image:person.png|20px|link=https://www.xing.com/profiles/Pierre_Parrend]]</center>
| [[Image:slides.png|20px|link=Mobile_Java_Security]]
+
| <center>[[Image:location.png|20px|link=https://www.zurich.ch/]]</center>
 +
| <center>[[Image:slides.png|20px|link=Mobile_Java_Security]]</center>
 
| Chapter Meeting
 
| Chapter Meeting
 
| Dependability for Java Mobile Code
 
| Dependability for Java Mobile Code
 
|-
 
|-
| 2007-04-26
+
| 2007-07-24
| [[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2007-April/000086.html]]  
+
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2007-July/000095.html]]</center>
|  
+
| <center>[[Image:person.png|20px|link=https://www.xing.com/profile/HansPeter_Waldegger]][[Image:person.png|20px|link=https://www.xing.com/profiles/Pascal_Buchbinder]]</center>
 +
| <center>[[Image:location.png|20px|link=https://www.zurich.ch/]]</center>
 
|  
 
|  
 
| Chapter Meeting
 
| Chapter Meeting
 +
| OWASP Top 10 (Demo)
 +
|-
 +
| 2007-04-26
 +
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2007-April/000086.html]]</center>
 +
| <center>[[Image:person.png|20px|link=http://www.linkedin.com/in/bchess]]</center>
 +
| <center>[[Image:location.png|20px|link=https://www.zurich.ch/]]</center>
 
|  
 
|  
 +
| Chapter Meeting
 +
| Risk metrics
 
|-
 
|-
 
| 2007-02-12
 
| 2007-02-12
| [[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2007-February/000079.html]]
+
| <center>[[Image:info.png|20px|link=https://lists.owasp.org/pipermail/owasp-switzerland/2007-February/000079.html]]</center>
| [[Image:person.png|20px|link=User:Disenchant]]
+
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
| [[Image:slides.png|20px|link=File:20070212-xss_worms-disenchant.pdf]]
+
| <center>[[Image:location.png|20px|link=https://www.zurich.ch/]]</center>
 +
| <center>[[Image:slides.png|20px|link=File:20070212-xss_worms-disenchant.pdf]]</center>
 
| Chapter Meeting
 
| Chapter Meeting
 
| XSS-Worms
 
| XSS-Worms
Line 291: Line 474:
 
| 2006-11-11
 
| 2006-11-11
 
|  
 
|  
 +
| <center>[[Image:person.png|20px|link=User:Disenchant]]</center>
 
|  
 
|  
 
|  
 
|  
 +
| Chapter Meeting
 
| OWASP Switzerland Chapter Kick-Off Meeting
 
| OWASP Switzerland Chapter Kick-Off Meeting
|
 
 
|}
 
|}
 
  
 
= Participation  =
 
= Participation  =

Latest revision as of 04:25, 6 March 2015


[edit]

OWASP Switzerland Chapter Logo

Welcome to the Home Page of the OWASP Switzerland Chapter.

  • The chapter leader is Sven Vetsch supported by Antonio Fontes. Please contact us with any questions regarding the chapter.
  • Please subscribe to the mailing list for meeting announcements and other news related to OWASP in Switzerland.
  • You can follow us on Twitter and Facebook


If you're living in the French speaking part of Switzerland, please also visit the OWASP Geneva chapter for more information.

Please find below the planned dates for the upcoming OWASP Switzerland Meetings:


Date Info Speaker Location Host Event Topic
2015-04-15
Info.png
?
Location.png
Credit Suisse Chapter Meeting  ?
2015-06-17
Info.png
?
Location.png
Compass Security Chapter Meeting  ?
2015-08-19
Info.png
?
?
 ? Chapter Meeting  ?
2015-10-14
Info.png
?
?
 ? Chapter Meeting  ?
2015-12-15
Info.png
?
?
 ? Chapter Meeting  ?


Date Info Speaker Host Slides Event Topic
2015-02-18
Info.png
Person.png
Location.png
Slides.png
Chapter Meeting Abusing JSONP with Rosetta Flash
2014-12-10
Info.png
Person.png
Location.png
Chapter Meeting OWASP Switzerland Fondue
2014-11-12
Info.png
Person.png
Location.png
Slides.png
Chapter Meeting Living on the Edge - Advanced ModSecurity to Save Your Ass
2014-08-20
Info.png
Person.png
Location.png
Slides.png
Chapter Meeting (Client-Side) Flash Security
2014-06-17
Info.png
Person.png
Location.png
Slides.png
Chapter Meeting XSS and beyond
2014-04-09
Info.png
Person.png
Location.png
Slides.png
Chapter Meeting SSL/TLS jungle - bringing light into the cipher forest
2014-02-19
Info.png
Person.png
Location.png
Slides.png
Chapter Meeting S-SDLC – Ready for the Cloud?
2013-12-17
Info.png
Person.png
Location.png
Chapter Meeting Annual Review & Outlook
2013-10-22
Info.png
Person.png
Location.png
Slides.png
Chapter Meeting Advances in secure (ASP).NET development – Break the hacker's spirit
2013-10-22
Info.png
Person.png
Location.png
Slides.png
Chapter Meeting Node.js Security
2013-04-09
Info.png
Person.png
Location.png
Chapter Meeting Tools (not) to use
2012-09-19
Person.png
Location.png
Slides.png
Security-Zone OWASP Top 10 Mobile Risks
2012-06-12
Info.png
Person.png
Location.png
Chapter Meeting Reversing Android Apps
2012-02-14
Info.png
Person.png
Location.png
Chapter Meeting Analysis of the RSA Security Breach
2011-12-13
Info.png
Person.png
Location.png
Chapter Meeting AppSec - Why is it important
2011-12-13
Info.png
Person.pngPerson.png
Location.png
Chapter Meeting Dangers of Firefox Add-On's
2011-10-11
Info.png
Person.png
Location.png
Chapter Meeting Presentation of the OWASP Top 10 & a hands-on session
2011-08-09
Info.png
Person.png
Location.png
Chapter Meeting Foundation of OWASP Switzerland Association
2011-06-14
Info.png
Person.png
Location.png
Slides.png
Chapter Meeting Automatic CRL updates for the Apache Web server
2011-06-14
Info.png
Person.png
Location.png
Slides.png
Chapter Meeting New Standards and upcoming Technologies in Browser Security (Slides by Tobias Gondrom)
2011-05-12
Person.png
Location.png
Slides.png
Swiss Cyber Storm III Do you know OWASP?
2011-04-12
Info.png
Person.png
Location.png
Slides.png
Chapter Meeting ASP.NET & ViewState Security
2010-04-12
Info.png
Person.png
Location.png
Chapter Meeting Usability vs. Security
2010-04-12
Info.png
Person.png
Location.png
Chapter Meeting 2-factor authentication for mobile devices: a secure and practical approach
2009-06-25
Info.png
Jerry HoffJason Li
Location.png
Chapter Meeting Benefits of a security API such as ESAPI
2009-06-25
Info.png
Person.png
Location.png
Chapter Meeting Advanced SQL injection exploitation to operating system full control
2009-04-07
Info.png
Person.png
Location.png
Chapter Meeting Open security architecture (www.opensecurityarchitecture.org)
2009-04-07
Info.png
Person.png
Location.png
Chapter Meeting XSRF and JSON hijacking & a hands-on session
2008-09-08
Info.png
Person.png
Location.png
Chapter Meeting Quality of services for web applications (Hands-On Workshop)
2008-09-08
Info.png
Person.png
Location.png
Chapter Meeting XML Security (Hands-On Workshop)
2008-09-08
Info.png
Person.png
Location.png
Chapter Meeting ISC2/Application security
2008-04-01
Info.png
Person.png
Location.png
Global OWASP Week Taking Apache access logs to the next level
2008-04-01
Info.png
Person.png
Location.png
Global OWASP Week Implementing an Application Security Lifecycle programme
2008-04-01
Info.png
Person.png
Location.png
Global OWASP Week WebAppSec the Big Picture
2007-12-11
Info.png
Person.png
Location.png
Chapter Meeting Certified Secure Web
2007-12-11
Info.png
Person.png
Location.png
Chapter Meeting Secure Development Life Cycle
2007-12-11
Info.png
Daniel Hulliger
Location.png
Chapter Meeting Securing my Assets (Presentation & Demo)
2007-09-20
Info.png
Person.png
Location.png
Security-Zone OWASP Testing Guide
2007-09-19
Info.png
Person.png
Location.png
Security-Zone OWASP Top 10
2007-07-24
Info.png
Person.png
Location.png
Chapter Meeting OWASP - An Overview
2007-07-24
Info.png
Person.png
Location.png
Slides.png
Chapter Meeting Dependability for Java Mobile Code
2007-07-24
Info.png
Person.pngPerson.png
Location.png
Chapter Meeting OWASP Top 10 (Demo)
2007-04-26
Info.png
Person.png
Location.png
Chapter Meeting Risk metrics
2007-02-12
Info.png
Person.png
Location.png
Slides.png
Chapter Meeting XSS-Worms
2006-11-11
Person.png
Chapter Meeting OWASP Switzerland Chapter Kick-Off Meeting

OWASP Chapter meetings are free and open. Our chapter's meetings are informal and encourage open discussion of all aspects of application security. Anyone in our area interested in application security is welcome to attend. We encourage attendees to give short presentations about specific topics.


Our main topics are:

  • Security testing
  • Secure development
  • Hacking
  • Secure Architectures


If you would like to give a presentation (make sure that you have read and understood the speaker agreement), or have any questions about the OWASP Switzerland Chapter, send an email to Sven Vetsch.

Help us to make application security visible and become a supporter of the OWASP or our Chapter in Switzerland. All information about becoming a member/sponsor can be found here.

If your company is interested in supporting us directly, please contact Sven Vetsch to talk about the following sponsoring possibilities.

  • Chapter Supporter
  • Single Meeting Supporter
  • Facility Sponsor
  • Organization Supporters (allocating 40% of your annual donation to our Chapter)

Here you can find material related to the OWASP Switzerland Chapter.

OWASP Switzerland bylaws (in German)
Download bylaws

OWASP Switzerland Update Presentation (December 13th 2011)
Download Presentation

funds to OWASP earmarked for Switzerland.

Join the list.png Follow-us-on-twitter.png Facebook-icon.png