OWASP Foundation | March 2016 Connector
The OWASP Foundation
|
|
|
|
|
Virtual Training Platform AvailableYou ask and OWASP delivers! We're excited to announce that The OWASP Foundation has added the GoToTraining platform to our arsenal of virtual tools. GoToTraining lets you take advantage of an interactive learning environment where you can post materials (pre course materials, videos, images, class resources), give tests, take polls, and execute small group activities. Classes can be limited in the number of attendees or host as many as 50 students. We would like to begin to schedule training sessions for delivery as early as April. Do you have a 1 to 4 hour class you would like to present? Popular Topics for OWASP Training are (in no particular order)
For Q2, all trainings will be recorded and made available through the OWASP YouTube Channel and links to the recordings will be posted on the relevant pages on the wiki. If you are a trainer in a non English speaking country and would like to host a training in another language, that would be fantastic! Any interested trainers, please CONTACT US or reach out to Kate Hartmann directly. As always, thank you for all you do! Annual Report Call for ContentThe OWASP Foundation is looking for exciting and illustrative success stories from YOU, the community for inclusion in our 2015 Annual Report. This yearss theme is simply: Growing, Learning, Sharing, Leading. Tell us how you and your team worked to spread the OWASP mission in 2015. Here are some ideas but feel free to be creative!
Submit your content - articles, pictures, ideas by April 14, 2015. This is your opportunity to share with the world why you participate. We want everyone to contribute! Everyone's story is important to the Foundation. Become globally famous by submitting your picture and/or brief bio so we can be sure to give you credit for your contribution. Of course, you may also request to remain anonymous if you prefer. Act Now to Qualify for an Honorary Membership in 2016Purchase or renew your OWASP Individual Membership for a chance to win! Anyone who purchases a new individual membership, renews their existing individual membership or submits & are approved for an Honorary* Membership between April 1, 2016 and June 20, 2016 will be entered into a raffle to win a prize! Join or Renew today! The raffle will be held June 22, 2016. Winners will be notified and results posted the same day. Prizes include and will be raffled off in this order: *Honorary Membership is now available year round starting April 1, 2016! To learn more about Honorary Membership and to see if you are eligible, please visit our Honorary Membership page here. Submissions will be reviewed and verified by OWASP. OWASP in the NEWS!How to Hack an App: 8 Best Practices for Pen Testing Mobile Apps - Tech Beacon 3/21/2016 OWASP Releases Software Assurance Maturity Model (SAMM ... - PR Newswire 3/16/2016 Black Duck's Open Source 'Rookies of the Year' 2015 - ComputerWeekly 3/16/2016 mHealth App Security is a Myth, New Survey Finds - mHealth Intelligence 3/14/2016 Google offers app to help companies assess their vendors' security - Networks Asia 3/11/2016 OWASP PodcastsOWASP Projects and activities are often the subject of webcasts and podcasts. Sit back and relax as you watch and listen to these recent episodes. Active Deception as a Methodology for Cybersecurity w/ Lawrence Pingree from Gartner Security War Games with Sam Guckenheimer at Rugged DevOps RSAC 2016 |
|
|
|
Google Summer of Code Needs MentorsWe are calling out for more mentors to get involved. We have 81 Proposals and need your participation. Become a Mentor: Do you want to become a mentor for a student?Choose a participating OWASP project from the wiki page listed below preferably the one you are most familiar with. Link: https://www.owasp.org/index.php/GSOC2016_Ideas Touch base with the project leader and ask one of the org admins (Claudia, Kostas or Fabio) to send you an invitation and get you started today. Please let us know if you need help or supporting material. Thank you in advance for your time and look forward to your participation. Konstantinos Papapanagiotou Fabio Cerullo Claudia Aviles-Casanovas OWASP Security Knowledge Framework is Black Duck's Rookie of the YearWe are thrilled, excited and really happy to announce that the OWASP Security Knowledge Framework has won the Rookie of the Year awards and honorable mention from Black Duck! We want to thank everybody that helped us achieving this award especially the contributors and OWASP. More information about the BlackDuck award can be found here: https://info.blackducksoftware.com/OpenSourceRookies2015.html. This is a great milestone for OWASP and the SKF team! PyconPYCON 2016 is coming to the Rose City in Portland, Oregon on May 28th - June 5th! OWASP Developer Survey ranked PyCon #2 Opportunities to attend in behalf of OWASP Sign-up Today! PyCon 2016 has offered us the option to participate and contribute to their Open Spaces and Sprints. Open Spaces How Do I Participate In An Open Space? During PyCon, there will be Open Spaces boards somewhere near the registration desk. The boards acts as a time table for all the Open Spaces, so you know where and when to go for the Open Spaces you're interested in. If a topic is not listed yet, find an open time slot and add it! Open Spaces topic cards are included in the goodie bag you receive at registration. What Open Spaces Are There? Where And When Are The Open Spaces? How Do I Host An Open Space? Planned Open Spaces Development Sprints Development sprints are a key part of PyCon, and a chance for the contributors to open-source projects to get together face-to-face for up to four days of intensive learning, development and camaraderie. Newbies sit with gurus, go out for lunch and dinner together, and have a great time while advancing their project. What's New with the Sprints by Naomi Ceder Come for PyCon, stay for the sprints! PyCon Development Sprints are four days of intensive learning and development on an open source project of your choice, in a team environment. It's a time to come together with colleagues, old and new, to share what you've learned and apply it to an open source project. In the crucible of a sprint room, teaming with both focus and humor, it's a time to test, fix bugs, add new features, and improve documentation. And it's a time to network, make friends, and build relationships that go beyond the conference. PyCon provides the space and infrastructure (network, power, tables & chairs); you bring your skills, humanity, and brainpower (oh! and don't forget your computer). Please sign up on the PyCon 2016 Sign Up Sheet. If you are interested in attending in behalf of OWASP. XML External Entities Resources CleanupA great deal of work has gone into cleaning up and updating the OWASP Wiki XXE ( XML External Entities) resources. Here are the two main updated resources. XXE Prevention Cheatsheet XXE Vulnerability page Thank you to Dave Wichers for leading the charge on XEE as well as John Passki and Xiaoran Wang for their work in this area. Project Releases: Code Review Guide 2.0 Alpha and Dependency Check v.1.3.5Code Review Guide 2.0 Alpha Released The alpha release for the Code Review Guide 2.0 has been released. Please see the project page for more details. plus a shout out to the Long Island OWASP group for helping with a working session. https://www.owasp.org/index.php/Code_review OWASP Dependency Check v.1.3.5 Released The OWASP dependency-check team is pleased to announce the release of version 1.3.5! Thanks to all those who have used the tool and provided feedback via the discussion group and issues in github. A special thanks goes out to those that have submitted pull requests! Please visit the documentation site for information on obtaining the new version (CLI, Maven Plugin, Ant Task, Gradle Plugin, Jenkins Plugin). | |
|
|||
| |||
AppSecEU University ChallengeThe University Challenge is a competition among teams comprised of university students that will be held on June 28th and 29th 2016, during the training days of the conference. There is no admission fee for the University Challenge - participation in the conference is possible at the student rate if applicable. This years UC is a two stage challenge: Day 1: Capture The Flag (CtF), solving hacking challenges. Day 2: Offense/Defense (Blue/Red Team), defending your vulnerable web application whilst attacking the application of the other teams. This year the OWASP University Challenge will be limited to 10 teams. Teams will consist of 4-8 students, with one team per university. All team openings are on a first come first serve basis. If multiple teams are received from the same university the second team will be put on a wait list. =========================================================== Please register your time via this link (Google web form): http://goo.gl/forms/AN6uPS4vAG. Global AppSec EventsAppSec Europe 2016, 30 June - 1 July, 2016, Rome, Italy. Call for Lightning Trainings closes April 30. Call for Activities closes April 30. Local and Regional Events
Latam Tour 2016, April 7, 2016 - April 22, 2016, Latin America Project SummitsOWASP SAMM Summit 2016, April 20-21, 2016, New York, USA Partner and Promotional EventsBlackhat Asia 2016: March 31 - April 1, 2016, Marina Bay Sands Singapore, OWASP members receive a $200/USD discount on Briefings with discount code: OWBR0316 |
|||
Ads are not endorsements and reflect the messages of the advertiser only.They represent co-marketing arrangements
with other organizations in support of the OWASP Community. CLICK HERE for more information on advertising. |
 |
 |
 |
|
|||
New Chapters
Chapter Restarts
Transitions
New Student Chapter
Academic Supporters
Notable Chapter Activity
Share Your Stories! We at the OWASP Global Foundation are looking forward to hearing about more such events in future. Share your chapter's successes! Submit your stories to sup...@owasp.org OWASP Membership is a great way to contribute to our local chapters and projects. A portion of your membership can be allocated to the chapter and/or project of your choice. Please show your support for OWASP Projects and Chapters by becoming an Individual or Corporate member today! |
|||
|
|
Membership DriveAs part of our overall 2016 Membership recruitment and appreciation program, we will be introducing a new incentive on April 1, 2016. Stay tuned! Renewed Corporate Members (Premier Level)
Renewed Corporate Members (Contributor Level)
Become a Corporate Supporter. Find out how by visiting our Corporate Supporters information page. Upcoming Partnership & Co-Marketing Events: |
|
|
|
OWASP Social Media Site |
|
|
Click to view this email in a browser
If you no longer wish to receive these emails, please reply to this message with "Unsubscribe" in the subject line or simply click on the following link: Unsubscribe |
|
The OWASP Foundation 1200-C Agora Drive #232 Bel Air, Maryland 21014 US
|
