OWASP Connector February 2017

[The OWASP Foundation]

FOLLOW US

COMMUNICATIONS |  PROJECTS |  EVENTS |  CHAPTERS |  MEMBERSHIP

Tue, Feb 27, 2017 OWASP CONNECTOR

2016 Top Security Tools! The OWASP Community produces a lot of amazing things. This month we are glad to share that three OWASP Projects have taken spots in 2016 Top Security Tools as voted by ToolsWatch.org Readers. Congratulations and many thanks to the project leaders and many contributors to these projects! For more information, see our blog post. Operations Update The February operations update includes vital information about OWASP's hosting providers, membership models, project activity, and the chapter leader handbook. Read it for an overview of what is happening in OWASP. OWASP in the News! Can Belfast Become The Cyber Security Capital Of Europe? — StartUs Magazine, February 17, 2017 What is OWASP, and why it matters for AppSec — Network World, February 22, 2017 25 Percent of Web Apps Still Vulnerable to Eight of the OWASP Top Ten — Dark Reading, February 13, 2017 INSIDE SOFTWARE DEVELOPMENT OUTSOURCING — CIA, February 13, 2017 Practical Steps for Protecting IoT Devices — Linux.com, February 10, 2017 Ready to be Hacked: Incident Response — Business2Community, February 8, 2017

2017 AppSec Europe Project Summit We are excited to announce the OWASP Project Summit EU May 9th & 10th 2017. OWASP is providing a platform for project leaders on the two full days prior to AppSec Eu 2017. Project Summits are a place for project leaders and contributors to collaborate as well as provide feedback to OWASP. The platform provides an open forum setting for ideas, discussing innovations, gaining project contributors and sharing feedback for projects with the goal of helping them advance to the next level. Use this opportunity to demo your project to others at the summit, promote for sponsorship, gain feedback, or simply brainstorm some ideas and add a few features. For more information, see our blog post.

`

Upcoming Events Global AppSec Events AppSec Europe 2017  8–12 May, 2017, Belfast, UK AppSec USA 2017  19–22 September, 2017, Orlando, Florida, USA Regional and Local Events OWASP Jaipur WAPT '17  6 March, 2017, Jaipur, India OWASP TechDay 2017  11 March, 2017, Hong Kong SnowFROC 2017  16 March, 2017, Denver, CO, USA Latam Tour 2017  3–28 April, 2017, South America OWASP New Zealand Day 2017  19–20 April, 2017, New Zealand OWASP Middle East Cyber Security Conference 2017  3–4 May, 2017, Dubai, UAE New York Metro Joint Cyber Security Conference  5 October, 2017, New York City, NY, USA Project Summits OWASP Summit 2017  12–16 June, 2017, London, UK Developer Summits OWASP Developer Summit  9–10 May, 2017, AppSecEU 2017, Belfast, UK Partner and Promotional Events Mobile+Web DevCon  1–3 March, 2017, San Francisco, CA, USA (OWASP members save 25% by using discount code: MobileDev25) Blackhat Asia 2017  28–31 March, 2017, Singapore (OWASP members save 15% by using discount code: OWas17) CyberCentral  4–6 April, 2017, Prague, Czech Republic QuBit Conference 2017  4–6 April, 2017, Prague, Czech Republic (OWASP members save 10% by using discount code: QB17OWASP) (ISC)2 Secure Summit Benelux  5–6 April, 2017, Amsterdam, Netherlands SC Congress New York  2 May, 2017, New York City, NY, USA SECON 2017  25 May, 2017, Jersey City, NJ, USA Techno Security & Digital Forensics Conference  4–7 June, 2017, Myrtle Beach, SC, USA (OWASP members save 30% by using discount code: OWASP17) GOTO Amsterdam 2017  12–14 June, 2017, Amsterdam, Netherlands SC Congress Toronto  13–14 June, 2017, Toronto, Canada Want to get your event listed here? Enter your event into the OWASP Conference Management System. Contact Us for additional help.

Should Your Chapter Start a Study Group? Guest Post by Josh Sokol Back in 2010, when I first took over as President of the OWASP Austin Chapter, I noticed that there were a number of chapter members who had an interest in getting their CISSP certification (myself included). We knew that it would be a pretty large undertaking, spanning multiple months of effort, but also knew that we would all be more successful if we could work together and support each other through the process. We found a test date that was far enough in the future to meet our goal of spending a week on each domain, plus a couple of weeks for review, and the first-ever OWASP Austin Study Group was born. Each week, a different study group member was responsible for leading the discussion on a topic. Usually it would be accompanied by a lightweight "review" slide deck and then the group would go over different sets of review questions for that week's domain together. It worked out great with over half of the group taking their test on the goal date and almost everyone receiving a passing grade. For more information, see our blog post.

February 2017 Corporate Members We would like to thank the following companies for supporting the OWASP Foundation. The companies listed below have contributed this month by either renewing their existing Corporate Membership or joining OWASP as a new Corporate Member. Interested in becoming a member? We have the perfect membership level for your company. Contributor Corporate Members For more information please visit https://www.nccgroup.trust/us/ NetSPI is a privately held information-security consulting company founded in 2001. By using its consulting team's deep security knowledge and its Correlated VM vulnerability management & reporting solution, the company is a trusted advisor to large enterprises. NetSPI provides a range of assessment and advisory services designed to analyze and mitigate risks and ensure compliance with relevant regulations and industry standards. Clients include large financial services firms, retailers, healthcare organizations and technology companies. For more information, visit http://www.netspi.com Oneconsult AG offers holistic cyber security consulting against external and internal cyber threats such as APT, hacker attacks, malware infection, digital fraud and data leakage. We specialize in information and IT security and are your trustworthy partner for identifying, assessing, preventing and addressing information and IT security threats. Our core services are penetration tests, ISO 27001 security audits and IT forensics. To protect your organization and mitigate specific information security risks, Oneconsult also offers practical security consulting, security training and virtual security officer services. Our technical tests for office IT and SCADA/ICS cover (mobile) application penetration tests, ethical hacking, client audits, configuration and code reviews as well as reverse engineering and targeted exploit development for APT audits. Oneconsult’s dedicated security research team detects dozens of zero-day vulnerabilities per year in standard software. We have already carried out 1000+ security projects since 2003 and have become a trusted provider to 250+ organizations worldwide covering a wide variety of industries. For more information, visit https://www.oneconsult.com/en/ For more information, visit https://www.ptsecurity.com/ww-en/ Twistlock provides the industry’s first enterprise suite for container security. We monitor container activities, manage vulnerabilities, detect and isolate threats targeting containerized applications. Our technologies enable enterprises to enforce consistent security policies from development to production, thus maximizing the benefits of container computing. For more information, please visit https://www.twistlock.com Veracode delivers the application security solutions and services today’s software-driven world requires. Veracode’s unified platform assesses and improves application security from inception through production so that businesses can confidently innovate with the applications they build, buy and deploy as well as the components they integrate into their environments. For more information, visit http://www.veracode.com/ WhiteHat Security has been in the business of securing web applications for 15 years. Combining advanced technology with the expertise of its global Threat Research Center (TRC) team, WhiteHat delivers application security solutions that reduce risk, reduce cost and accelerate the deployment of secure applications and web sites. The company’s flagship product, WhiteHat Sentinel, is a software-as-a-service platform providing dynamic application security testing (DAST), static application security testing (SAST), and mobile application security assessments. The company is headquartered in Santa Clara, Calif., with regional offices across the U.S. and Europe. For more information, visit https://www.whitehatsec.com/ Want your name here? Find out how by visiting our Corporate Member information page, or contact our Membership & Business Liaison, Kelly Santalucia today! Thank you to all of our Premier and Contributor Corporate Members for your support!

The OWASP Foundation, 1200C Agora Drive #232, Bel Air, Maryland, 21014, USA

---

Click to view this email in a browser If you no longer wish to receive these emails, please reply to this message with "Unsubscribe" in the subject line or simply click on the following link: Unsubscribe

---

The OWASP Foundation 1200-C Agora Drive #232 Bel Air, Maryland 21014 US