Saturday, March 15, 2008

OWASP Italy:The State of the Art of the Web Application Security and the OWASP guidelines for Companies

Back in 2005 my first involvement with OWASP was to help write the OWASP testing guide. The project was successfully lead by Matteo Meucci that is founder and chair of OWASP Italy and CEO of Minded Security. Three years later Matteo invited me to participate to the sponsored event on March 31st at the Congress Center of the University of Rome La Sapienza. The topic of the one-day event is "The State of the Art of the Web Application Security and the OWASP guidelines in the Companies". The topic of my presentation is: "How to start a software security initiative within your organization: a maturity based and metrics driven approach."

As part of the event Matteo will moderate a round table talk on the following topics:
  1. Which are the countermeasures that organizations adopted to mitigate new attacks?
  2. Responsible information disclosure of vulnerabilities: what's the best approach?
  3. How do you implement a security enhanced software development life-cycle that also provides a good Return of Security Investment (ROSI)?
  4. Customers security awareness: does it provide fundamental leverage for implementing security controls?
My presentation can be found herein: http://www.owasp.org/images/a/ab/Owaspday2Morana.pdf
A detail program of the event can be found here

2 comments:

Andy said...

Marco, I didn't see you at OWASP tonight. Does that mean you're spending some time in Italy before the 3/31 presentation? :)

Let your vote count! Take a moment to answer Marco's poll questions.

adam brown said...

Hello I just entered before I have to leave to the airport, it's been very nice to meet you, if you want here is the site I told you about where I type some stuff and make good money (I work from home): here it is