OWASP Switzerland Chapter Meeting December 2013

OWASP Switzerland

Highlights

At our recent chapter meeting (including beer and addictive crisps*), which was kindly hosted by Credit Suisse in Zürich, we had an interesting discussion about application security and OWASP. Obviously no definitive conclusion was reached - but then that is not the point.

Topics included whether OWASP is obsessed with XSS at the expense of other issues. If your application does not have an audit trail, is this as as big a risk as an XSS vulnerability. This could be generalized to ask if there is too much emphasis on the purely technical and not enough on more esoteric issues such as risk etc. It was noted that the OWASP Top 10 is now based on risk and also that the new OWASP CISO project attempts to address more management type concerns.

Discussion was also had about the open/closed source debate and what advantages each had. The consensus seems to be that both are here to stay. Development houses should have programs in place to handle both.

2014  Plans

For 2014 the OWASP Swiss chapter is planning 6 meetings beginning in February and every two months after that. Keep an eye on the mailing list and on the OWASP Switzerland website etc. for more details.

 

As usual if any of you would like to give a talk on any particular topic then don't be shy.

A few ideas:
- Agile development and security
- Risk and application security
- Demos of OWASP products

Useful Links

• OWASP Switzerland
• OWASP Switzerland Twitter: @OWASP_ch 
• OWASP Application Security Guide For CISOs Project
• OWASP Top 10

* Americans call them chips - but they're wrong.

Social: del.icio.us DiggIt! Reddit Stumble Google Bookmarks Technorati Slashdot

Installing Hacking-Lab Live CD

In preparation for the OWASP Switzerland meeting on October 11th you should try to install the Hacking-Lab live CD.

These are the simple steps I followed on a Windows 7 laptop.

• Dowload the Virtual Appliance OVA file to your laptop
• Download and install the Oracle Virtual Box  application onto your laptop
• Double-click the .ova file through Windows Explorer and the appliance import process should commence on the Virtual Box application. You should see something like Fig 1:

Fig. 1: Oracle VM Virtual Box Manager

•  In  theVirtual Box Manager left-hand pane double-click on the LiveCD-Hacking-Lab-V5.55 entry. The LiveCD should start and after a short while  the Welcome screen as shown in Fig 2 should appear.

Fig 2: Welcome Screen

You should be ready to go now at the OWASP meeting.

Social: del.icio.us DiggIt! Reddit Stumble Google Bookmarks Technorati Slashdot

OWASP Switzerland Chapter Meeting - October 11th

 OWASP Switzerland Chapter Meeting
 
When: October 11th, 17:00 - 19:00
Where:   ITACS by Bitterli Consulting AG
               Stampfenbachstrasse 40
               CH-8006 Zurich

Price: Free (but you need to reserve a place)

Topic:
Presentation of the OWASP Top 10 by Cyrill Brunschwiler from Compass
Security (http://www.csnc.ch/en/) followed by a hands-on session.


More Information: OWASP Switzerland

Social: del.icio.us DiggIt! Reddit Stumble Google Bookmarks Technorati Slashdot