OWASP EU Summit Outcomes

Last week's Open Web Application Security Project (OWASP) summit in Portugal was a great success. The summit pages will be updated with the presentation materials and working session outcomes over the next few days.

OWASP has the most comprehensive range of information and tools to help development, testing and operation of secure web applications. It's open to everyone and everything is available free of charge. The active contributors to the Summer of Code 2008 Projects were invited to the EU Summit 08 to participate in sharing of information, discussion of issues, development of ideas for solutions and creation of suggested objectives for the organisation next year.

I managed to attend many of the project briefings and the OWASP Documentation Projects, OWASP Testing Guide, OWASP Intra Governmental Affairs, OWASP Live CD and Live DVD, OWASP Certification and OWASP Strategic Planning for 2009 working sessions. I am looking forward to working on providing official OWASP input into draft standards, guidelines and legislation, along with the other people who attended the OWASP Intra Governmental Affairs working session.

Look out for the new version (3) of the OWASP Testing Guide, available within a week. Version 2 was such an impressive piece of work, and it has been completely reviewed and extended.

I'd recommend anyone involved with the specification, development, testing, operation and management of web applications to have a look at OWASP's key resources like the Top 10, Development Guide, Code Review Guide and Testing Guide, view some of the many presentations and go along to local meetings.