30 likes | 145 Vues
This document outlines the recent initiatives undertaken by the OWASP Global Industry Committee, including a completed presentation on the fundamentals of application security presented to Frontier Airlines and ongoing efforts such as drafting NIST SP 800-118 on enterprise password management. Additionally, the committee's contributions to the CFPCON 2009 presentation, collaboration with the Intrinsic Security Working Group, and monitoring relevant drafts and standards in the US and UK are discussed. Members are encouraged to participate in OWASP projects and contribute to industry standards.
E N D
Industry Committee – Recently Completed • Presentation to Frontier Airlines (Fundamentals of AppSec and Introduction to OWASP) Outreach
Industry Committee – In Progress • Draft NIST SP 800-118 (Enterprise Password Management) Response to draft • Presentation at CFP Con 2009 Outreach • OWASP ISWG Assistance to Intrinsic Security Working Group with letter to browser vendors • Monitoring draft standards, legislation, etc US (NIST), UK (BERR, British Standards, Central Office of Information, ICO, MoD)
Industry Committee – Contribute • Participate in OWASP projects • Suggest organisations to engage with and documents/standards/drafts to comment on • Provide input to the response creation and review process • Join the Global Industry Committee’s mailing list http://www.owasp.org/index.php/Global_Industry_Committee