The Open Web Application Security Project (OWASP) is an online community that produces freely available articles, methodologies, documentation, tools, and technologies related to web application security. It has over 93 active projects led by volunteer community members. Some of the major OWASP projects include the OWASP Top Ten project, the Application Security Verification Standard, the Web Security Testing Guide, and security tools like ZAP, Dependency Check, and DefectDojo.

1. OWASP Projects
Vandana Verma Sehgal

2. WHO AM I
● Security Architect @ IBM India Software Labs
● OWASP Global Board Member, Bangalore Chapter Leader
● Speaker/Trainer at Defcon(AppSec Village), Asst. Trainer
at Black Hat, OWASP AppSec Conferences and others
● Member of Review Board at Grace Hopper, BSides Conferences, Global AppSec, etc.
● Diversity Initiatives: InfoSec Girls, OWASP WiA, WoSec

3. The Open Web Application Security Project (OWASP), an online community, produces freely-available articles,
methodologies, documentation, tools, and technologies in the field of web application security.
Web site - https://www.owasp.org/
• Tools and Resources
• Community and Networking
• Education & Training

4. Started in December, 2001
Obtained 501c3 (non-profit) Status in April 2004
OWASP Top Ten List
The OWASP foundation has produced many guides, projects, and
publications, since their beginning
OWASP History

5. OWASP
https://www.owasp.org/
Your nearest local OWASP Chapter
https://www.owasp.org/index.php/OWASP_Chapter
Free places to learn AppSec

6. OWASP Projects are a collection of related tasks that have a
defined roadmap and team members. Our projects are open
source and are built by our community of volunteers - people
just like you! OWASP project leaders are responsible for defining
the vision, roadmap, and tasks for the project. The project
leader also promotes the project and builds the team. OWASP
currently has ‘over ‘93’ active projects’, and new project
applications are submitted every week.
OWASP Projects

7. v OWASP Top Ten
https://owasp.org/www-project-top-ten/
v OWASP Application Security Verification Standard (ASVS)
https://owasp.org/www-project-application-security-verification-standard/#
v OWASP Web Security Testing Guide
https://owasp.org/www-project-web-security-testing-guide/
v OWASP Mobile Security Testing Guide
https://owasp.org/www-project-mobile-security-testing-guide/
v OWASP Mobile Top 10
https://owasp.org/www-project-mobile-top-10/
OWASP Documentation Projects

8. OWASP ZAP
v https://owasp.org/www-project-zap/
OWASP Dependency-Check
v https://owasp.org/www-project-dependency-check/
OWASP Defectdojo
v https://owasp.org/www-project-defectdojo/
OWASP Tool Projects

9. OWASP Mutillidae
https://www.owasp.org/index.php/OWASP_Mutillidae_2_Project
OWASP WebGoat
https://www.owasp.org/index.php/Category:OWASP_WebGoat_Project
OWASP Juice Shop
https://owasp.org/www-project-juice-shop/
Practice Platforms

10. OWASP ModSecurity Core Rule
https://owasp.org/www-project-modsecurity-core-rule-set/
Web Application Firewall

11. https://owasp.org/www-project-cheat-sheets/
OWASP Cheat Sheet Series

12. If you wish to contribute to the cheat sheets, or to suggest any improvements or changes, then please do so via
the issue tracker on the GitHub repository. Alternatively, join us in the channels on the OWASP Slack.
Contribute

13. HOW DO WE MOVE FORWARD

14. As a Community
● If you look like you don’t belong, then buckle up,
believe in yourself and engage with the technical
community
● Leverage the many opportunities for scholarships,
travel grants, meetup groups, networks and more.

15. OWASP Juice Shop v10.0.0 released, March 17, 2020
Global AppSec Dublin postponed to 2021, March 12, 2020
Dublin Call for Papers and Trainers, February 18, 2020
OWASP SAMM v2.0 Released, February 11, 2020
Recent OWASP News

16. Virtual AppSec Days, April 27-30, 2020
AppSec Morocco & Africa 2020, June 4-5, 2020
Global AppSec SF October 19th-23rd, 2020
Global AppSec Dublin February 15-19th, 2021
Upcoming Conferences

17. We are Making PROGRESS..
BUT, We Have a Long Way to Go!!

18. Reach Me!
● Twitter: @InfosecVandana
● LinkedIn: vandana-verma
● Email: vandana.infosec@gmail.com

19. Thank you!