“I saw the ‘blossoming’ of OWASP in Portugal’s Spring. From an external viewpoint, OWASP has moved from niche to widely relevant, from localized to global, from pentesting to SDLC, from server to every component of the application’s delivery and use, from infosec to business process relevance.” – Colin Watson, Watson Hall “I enjoyed the sheer energy of the group” “I really liked the format of many sessions that were panel and open discussion around looking at problems and finding solutions” “It was a summit and one of the best security event in the world” – Mohd Fazli Aaran – USDCMY “It worked democratically and made everyone give idea, complaint, planning, critic, and opinion” – Mohd Fazli Aaran – USDCMY “The small working groups got the conversation flowing between many people of different viewpoints” – Chris Wysopal, Veracode “It was so cool to get all these security experts under the same roof and you could pickup anybody’s brain about any security issue” “For those who missed the Summit: you missed out, try to make the next one” “It is a great way to meet and exchange experience with some of the most important IT professionals of the world” – Massimo Biagiotti – Business.E
Professionalize OWASP OWASP funding and CEO discussion EcmaScript 5 Security OWASP Certification HTML5 Security What is an OWASP Leader? Tracking OWASP Participation Mobile Security OWASP Licensing DYNAMIC WORKING SESSIONS Tuesday, February 8 OWASP vs Government vs Universities Building the OWASP Brazilian Leaders Group Common structure and numbering for all guides OWASP Board/Committee Governance XSS and the Frameworks OWASP Academy Portal Browser Security meet up Wednesday, February 9 Formal Risk Assessment Methods OWASP TOP 10 online training in Hacking-Lab Defining AppSensor Detection Points OWASP Asia/Pacific working group Development Guide Defining a minimal appsec program for universities, governments, and standards bodies OWASP Portuguese Language Project ASVS Project Secure development guidelines for smartphone developers Privacy - Personal Data/PII, Legislation and OWASP Mobile Security Should OWASP work directly with OpenSAMM Threat Modeling Governance Part Two Thursday , February 10 How can OWASP reach/talk/engage with auditors Hackademic Challenges OWASP Java Project OWASP Exams Industry - Healthcare Industry - Banking/Finance Developer Outreach Scaling Web Application Security Testing The future of OpenSAMM Corporations at the Summit & funding opportunities Conferences - Improving Conference Planner Support OWASP College Chapter Program Vulnerability Disclosure Policies Global Conferences Committee Monthly Meeting Planning South America/Central America AppSec Chapters O2 Platform ESAPI framework integration Education ATTENDEES Adamski, Lucas Agarwal, Anurag Aguilera, Vicente Agustini, Alexandre Akhmad, Zaki Alamri, Lorna AlBasha, Talal Angal, Rajeev Aniceto, Alexandre Aryavalli, Gandhi Barbato, L. Gustavo C. Barnett, Ryan Baso, Sarah Batista, Marco Bergling,Mattias Bernik, Joe Biagiotti, Massimo Bonver, Edward Booth, Rex Brennan, Tom Brewer, Deb Bristow, Mark Brzozowski, Daniel Buetler, Ivan Calderon, Juan Carlos Campbell, David Casey, Larry Causey, Brad Chalmers, Matthew Chandra, Pravir