Skip to content

Commit

Permalink
remote update file
Browse files Browse the repository at this point in the history
  • Loading branch information
OWASPFoundation committed Nov 26, 2024
1 parent 488b4a2 commit 879f3e9
Showing 1 changed file with 10 additions and 10 deletions.
20 changes: 10 additions & 10 deletions _data/community_events.json
Original file line number Diff line number Diff line change
Expand Up @@ -179,16 +179,6 @@
"timezone": "America/Lima",
"description": "**OWASP Meeting 2024**\n\nOWASP Lima Chapter Meeting (VIA ZOOM)\n\n**PRESENTACI\u00d3N:**\n**OWASP Projects: A Path to a Secure SDLC**\n\nExplora los principales proyectos de OWASP y c\u00f3mo integrarlos en cada etapa del Ciclo de Vida de Desarrollo de Software (SDLC) para garantizar la seguridad desde el dise\u00f1o hasta la implementaci\u00f3n. Conoce herramientas y est\u00e1ndares como OWASP Top 10, ASVS y ZAP, y su impacto en la construcci\u00f3n de software seguro y eficiente. Una oportunidad para profundizar en las mejores pr\u00e1cticas respaldadas por la comunidad global de OWASP."
},
{
"group": "London",
"repo": "www-chapter-london",
"name": "OWASP London Chapter Meetup [IN-PERSON]",
"date": "2024-11-25",
"time": "18:00Z",
"link": "https://www.meetup.com/owasp-london/events/304531909",
"timezone": "Europe/London",
"description": "**This event is kindly hosted by Civo Tech Junction and sponsored by Security Compass. There is limited seating available for in-person attendees. Registration required.**\n\n**This event will be live-streamed on YouTube. Watch the live-stream here: [https://youtube.com/live/MhQhKa38Ea4](https://youtube.com/live/MhQhKa38Ea4)**\n\n**Recordings will be available on the OWASP London YouTube channel.**\n\n**Venue Location**: Civo Tech Junction, First Floor, 32-37 Cowper Street, London, EC2A 4AW\n**Nearest Tube:** Old Street (Northern Line), Cowper Street exit - 1 min walk\n**Doors Open at 6pm** for registration, pizza, drinks and networking. The talks start at 6:30pm (we start on time!).\n\n**TALKS:**\n\n**OWASP Introduction, Welcome and News** \\- Sam Stepanyan\\, Andra Lezza\\, Sherif Mansour \\- OWASP London Chapter Leaders\n\n**\"Security by Design, Not Injection\"** \u2013 Trevor Young\n\nSecurity by Design encompasses a variety of processes and technologies aimed at embedding security and compliance early in the development lifecycle. We know adopting Security by Design culture and processes can lower risk by preventing vulnerabilities in software, however effectively educating and shifting teams to implement these changes is notoriously difficult. It is a paradigm shift for most organizations, and many of them fail on their first attempt before finding\nsomething that works for them. This discussion will highlight how to explain what Security by Design is and will present strategies for communicating the importance and value it delivers.\n\n**\"OWASP Depscan v6 - The SCA Tool For Agile Builders, Creators, And Doers\"** \\- Prabhu Subramanian\n\nMost SCA tools can be best described as simple SBOM scanners with a backing vulnerability database. This naive design can lead to numerous false positive alerts due to a lack of comprehensive context. To accurately assess an application's security posture, it's crucial to consider its entire lifecycle, from pre-build to post-build, and capture the full-stack information in the form of SBOM, SaaSBOM, CBOM, OBOM etc.\nOWASP depscan v6 is a groundbreaking SCA tool that addresses these limitations by leveraging full-stack information. This innovative approach enables more precise vulnerability triage and prioritization, empowering developers to take informed action.\nJoin us to meet the project leader behind depscan v6, explore live demos, and delve into the technical intricacies of an xBOM-based SCA tool.\n\n**\"I know what you did last summer\"** \\- Shruti Kulkarni\nLearn how cookies and client side storage may impact privacy of end users\n\n**RAFFLE - win a prize kindly donated by our sponsors!**\n\n**SPEAKERS:**\n\n**Trevor Young**\n\nTrevor Young is an entrepreneurial product and technology leader who stays on top of the latest in design, architecture, and creative technologies. Having founded and led companies providing digital offerings, he uncovered his passion for collaborative problem solving, and innovation.He excels at finding inefficiencies in digital markets and disrupting them.\nTrevor combines strategic leadership with technical ability, formed from experience in a broad background of practical applications. Trevor currently serves as Chief Product Officer at Security Compass, where heleads product strategy for the company's Secure by Design platform, and Application Security Training library.\n\n**Prabhu Subramanian (@_prbh)**\n\nPrabhu Subramanian is a distinguished security expert and active contributor to the open-source security community. Prabhu is the author and OWASP Leader behind projects such as OWASP CycloneDX Generator (cdxgen) and OWASP depscan. He specializes in Supply Chain Security and offers consultancy to global clients via his company, AppThreat Ltd.\n\n**Shruti Kulkarni (@[shruti-s-kulkarni](https://github.com/shruti-s-kulkarni))**\n\nShruti is a cyber security / enterprise security architect with experience in ISO27001, PCI-DSS, policies, standards, security tools, threat modelling, risk assessments. Shruti works on security strategies and collaborates with cross-functional groups to implement information security controls in software development life-cycle, service operations, service delivery such that security controls support business requirements.\n\n**TICKETS:**\n\nOWASP meetups are free and open to anyone interested in application security. Please note that you MUST book your place to be admitted to the event by the building security.\n\n**CODE OF CONDUCT:**\n\nWe hope you enjoy the event, we care deeply about inclusivity and diversity so that OWASP is a comfortable and welcoming community for everyone. Please reach out to one of our chapter leaders if you have any feedback/concerns or would like to speak to us, we take these matters very seriously. OWASP Code Of Conduct: [https://owasp.org/www-policy/operational/code-of-conduct](https://owasp.org/www-policy/operational/code-of-conduct)"
},
{
"group": "Los Angeles",
"repo": "www-chapter-los-angeles",
Expand Down Expand Up @@ -279,6 +269,16 @@
"timezone": "Europe/Warsaw",
"description": "Hi,\nThis time we will focus on threat modeling - a proactive technique of risk analysis which could help to determine and fix potential vulnerabilities before they will even appear in the code, configuration or architecture.\nNowadays \"threat modeling\" has become a trendy buzz word. During our meetup we will try to uncover it's real meaning and discuss how to practically implement threat modeling in software development lifecycle.\n\nAgenda:\n\n1. **Threat modeling for application security \u2013 a case study**\n*Marta Rusek (Senior Cloud Security Engineer) & Wiktor Cudek (Principal Cloud Security Engineer) - Pegasystems.*\nThreat modeling is one of the parts of the SDLC process, that embed security throughout early stages of development. Thanks to that, we are able to detect potential problems at the beginning and avoid a lot of changes on the advanced maturity of the product.\nThe goal of this presentation is to compare the most well-known Threat\nModeling methodologies, their strong and weak sides. Based on our knowledge, we will compare these methods with the process and tools that are used in our company, and share our experience based on the work with development teams.\n2. After the break, we will host a **discussion about threat modeling**. Share our experiences with TM. When it's applicable. How to start doing TM in your project? Which techniques and methodologies works and when? What should be our goals? Is it possible to simplify the threat modeling process? That's just example of questions that we want to ask.\n\nPlease RSVP and save the date!\nIf you have a minute, **please share this invitation** with friends and in your social media."
},
{
"group": "San Antonio",
"repo": "www-chapter-san-antonio",
"name": "Event Announcement: Jingle and Mingle - Alamo ISSA, Alamo ISC2, San Antonio ISAC",
"date": "2024-12-05",
"time": "16:30-06:00",
"link": "https://www.meetup.com/owasp-sanantonio/events/304766274",
"timezone": "America/Chicago",
"description": "|\n\nYou are invited to the following [event](https://urldefense.com/v3/__https:/alamoisc2.org/EmailTracker/LinkTracker.ashx?linkAndRecipientCode=KhkvpPlIN8oSQkXcsJiS4eCQW6U2iYiXSaQ8m6aQg0M9dNQjpyHuPOlsKhYhO3Q72jNYoxXc6otLmSrxwh0IdLk68a0995kfT5GR5MGmwso*3d__;JQ!!CiF3mHgEawk!D94IdLBNnUQ_CPByyZ6kbQiffqdXRrSUOT9mmGVd3rZprd3N1j_jmuozjcZSM3Ww7yQuCwAb9XjpQYlIcYz_ew$):\n\nJoint Jingle Mingle Event\n\nWhen: December 05, 2024 4:30 PM, CST\n\nWhere: Scuzzi's Italian Restaurant - 4035 N. Loop 1604 W., San Antonio, TX 78257\n\n**Will you be attending?**\n\n**EVENT DETAILS:**\n\n![](https://alamoisc2.org/resources/Pictures/JIngle%20Mingle%20Event.jpg)\n\nPlease register so we can get a head count. |\n| -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |\n|"
},
{
"group": "Seattle",
"repo": "www-chapter-seattle",
Expand Down

0 comments on commit 879f3e9

Please sign in to comment.