The document discusses the OWASP organization, its goals of independence, innovation, integrity, and education. It has over 140 projects and 30,000 subscribers worldwide. Projects include tools like WebScarab, Zed Attack Proxy, and code analysis projects like GoatDroid and Mantra. OWASP creates application security standards, guides for code review, testing, and development.

1. OWASP Community
Lviv
Organization, Methodology,
Projects and Tools
Nazar Tymoshyk, Security Consultant, R&D Team, SoftServe
August, 2012

2. About me
Security consultant @
Security certified:
Security interests: PenTest, SE, WebSec
Researches: VMI,Honeynets, IDS
Member:
Personal interests: Researching, Skiing
and Rock Climbing

3. Standard for Application
security
3

4. Over 140
Projects

5. Over 30,000
Subscribers
5

6. World wide Events
InfoSec Conference
AppSec Conference

7. Goals of organization
Independence Common standard
for application
Innovative security
Integrity App excellence
Education
Linked to Life

8. DETECT
PROTECT
ECOSYSTEM
8

9. Tools
DETECT PROTECT
WebScarab AntiSamy .NET/Java
Zed Attack Proxy ModSecurity CRS
Live CD Enterprise
Security API
Code Crawler

10. Perspective projects
GoatDroid Mobile Security
iGoat Wapiti
Mantra WAF
AppSensor NAXSI

11. TOP 10
11

12. Application Security
Verification Standard
12

13. Code Review Guide
13

14. Testing Guide
14

15. Development Guide
15

16. Software Assurance Maturity
Model (SAMM)
…for next session.