The OWASP Foundationhttp://www.owasp.org

OWASP BeNeLuxDay 2012

Welcome!

Bart De Win / Sebastien Deleersnyder/ Lieven Desmet/ David Mathy, OWASP Belgium

Martin Knobloch / Ferdinand Vroom, OWASP NetherlandsJocelyn Aubert / Andre Adelsbach/ Thierry Zoller, OWASP Luxembourg

Steven van der Baan, OWASP CTF Project

#owaspbnl12

2

Full Program!

Strict timing!

we’ll try

kuleuven-guest

3

Capture the Flag!

•Do you like puzzles?

•Do you like challenges?

•Are you a hacker?

4

Thank you!

We need your Feedback!

6

OWASP On the road to 2013...

30 nov, 2012 - BeNeLux

OWASPby the numbers

88+Government & Industry Citations!

30,000+ participants mailing lists

250,000+ unique visitors per month

800,000+page views (per month)

15,000+ downloads per month

2081 Members

Individual Paid & Honorary Memberships

193+Active Chapters

$591,275.00Budget for 2012

113+Active Projects

55+Paid Corporate Memberships

53+Academic Supporters

4Global AppSec Conferences per year

11Years of community service

NEWSExtra! Extra! Read all about it.

2012 Project Re-Boot

• OWASP Application Security Guide For CISOs - Selected for Reboot

• OWASP Development Guide - Selected for Reboot

• Zed Attack Proxy - Selected for Reboot

• OWASP WebGoat

• OWASP AppSensor

• OWASP Mobile Project - Selected for Reboot

• OWASP Portuguese Language Project

• OWASP_Application_Testing_guide_v4

• OWASP ESAPI

• OWASP Eliminate Vulnerable Code Project

• OWASP_Code_Review_Guide_Reboot

2012 Foundation Accomplishments

• Pushed Association Strategic Goals 2012:o Build the OWASP platformo Expand communication channels o Grow the OWASP community o Financial stability

• 2012 Foundation Global Budget

• Aligned Committee Goals 2012

• 2012 Website Migrated to "The Cloud"

• Hired OWASP Project Manager

• 2013 Strategic Planning

• OWASP Board Election, 3 Seats

Other Accomplishments?

• Security101@lists.owasp.org

• Confirmed Member Linkedin Group

• Marketing of OWASP Foundation

• Monthly Security Blitz• April - SQL Injection• May - Cross Site Scripting• June - Access Control• July - Mobile Security• August - Threat Modeling

OWASP Community Highlights

• OWASP AppSec DC Regional Conference

• OWASP AppSec AsiaPac Global Conference

• Google Summer of Code:o OWASP Zed Attack Proxyo OWASP AppSensoro OWASP Hackademic

• OWASP Global AppSec Europe - Athens, Greece

• Global AppSec North America - Austin, Texas, USA

• Global AppSec Latin America - Montevideo, Uruguay

• 2012 V2 Chapter Handbook Published

• Numerous Cheat Sheet Updates & Podcasts

OWASP “Ops Team”

• Kate Hartmann - Operations Director

• Sarah Baso - Conference Director

• Samantha Groves - Project Manager

• Alison Shrader - OWASP Accounting

• Kelly Santalucia - OWASP Membership

Mark your calendars!

OWASP AppSec APAC 2013Feb. 19, 2013 - Feb. 22, 2013

Jeju, South Korea

Global AppSec EMEA 2013Aug. 20, 2013 - Aug. 23, 2013

Hamburg, Germany

Global AppSec North America Nov. 2013

New York City, New York

But first

Enjoy BeNeLux OWASP Day 2012!

#owaspbnl12