[OCC] (today at 2pm GMT) Fwd: Conference Call OWASP-ENISA

Robert Hansen robert at sectheory.com
Tue Feb 23 11:53:18 EST 2010

	Yeah, let's chat about it today.  I'd just like to better understand what OWASP is going to get out of doing this.  $3k is quite a bit, like you said, so we should be clear about what OWASP is getting back or how we are making more connections as a result.

Robert Hansen, CISSP
CEO -- SecTheory Ltd
Cell: (530) 521-2542
FAX: (512) 628-6299

-----Original Message-----
From: owasp-connections-committee-bounces at lists.owasp.org [mailto:owasp-connections-committee-bounces at lists.owasp.org] On Behalf Of dinis cruz
Sent: Tuesday, February 23, 2010 7:17 AM
To: owasp-connections-committee; Shankar Babu Chebrolu (shbabu); Lorna Alamri; Colin Watson
Subject: Re: [OCC] (today at 2pm GMT) Fwd: Conference Call OWASP-ENISA

Hey OCC (OWASP Connections Committee) 

Please see below a request from Shankar (who works for Cisco) about his possible participation at the forthcoming SecureCloud conference in Barcelona.

I think that it is critical for OWASP and OCC that we make this type of connections, and although Cisco is not able to cover Shankar expenses, the fact that he is able to go is already a big gain for OWASP (& in some ways it is Cisco's way of supporting OWASP).

So, the question is how we do this:

*	The $3000 is quite a high value when compared with the normal travel support that OWASP has given in the past. But since OWASP does have the money, the key is in finding a way that this is easily understood by the community.
*	In terms of where the money could come from, we can be creative and 'draw' the money from a couple pots:

	*	OWASP on the Move funds
	*	OWASP Connections Committee (we don't official have a budget (yet) but we could take 'ownership' or part of this cost for example $750)
	*	OWASP Chapters. At last count the OWASP chapters had $46,944 USD on their local budgets (see http://spreadsheets.google.com/pub?key=p6IFyntQTi7t-yH-peiD8Aw) which means that we could try to make the case for a couple them to support this trip (need to figure out what they get in return)
	*	Another company interested in this topic who wish to be 'debrief' on the topic by an OWASP member
	*	OWASP Board (could be use as the last point of finance to 'top-up' the final amount)

*	We need to make sure that we present this to the OWASP community, so for example Shankar and Colin, can you write up a quick overview of the plan and outcomes?

	*	Can you Include the work you are already involved with
	*	Another interesting question is "Are there other benefits for OWASP from this participation?"

		*	Maybe you guys can write a number of blog posts about it
		*	Create a number of PodCasts while you are there
		*	Invite a number of key speakers from ENISA and this community to OWASP Conferences and Chapters

	*	Are we able to organize an event, OWASP meeting, chapter training, or local presentation? (I'm assuming that neither Shankar or Colin are speakers at this event) 

*	Not that this should be a problem, but, it would help on our case if Cisco was an OWASP member (http://www.owasp.org/index.php/Membership). Shankar is that something that you could help with in the future? (note that the current rules are that 40% of the 5,000 USD OWASP membership would to the a Project, Chapter or Committee chosen by the new member, so for example, the OWASP Cloud ‐ 10 Project <http://www.owasp.org/index.php/Category:OWASP_Cloud_‐_10_Project>  (or OCC) could be beneficiary and then use that budget to pay for similar travel expenses)

Lets talk about this on OCC's call tonight (Shankar or Colin, if you want to join, ping Lorna (lorna.alamri at owasp.org) and she will send you the dial-in details)


On 19 February 2010 18:09, Shankar Babu Chebrolu (shbabu) <shbabu at cisco.com> wrote:

	Hi Dinis,

	     Based on what you mentioned on 2/16 mtg about OWASP taking care of our travel expenses, I am wondering whether I can attend SecureCloud conference 2010 in Barcelona, where I get a chance to meet Colin and several other folks working on ENISA-CAM project. As the conference registration itself is free, the expenses are mainly airfare, hotel for 2 nights and food for 3 days (March 15, 16, 17). It may come to about $3000 total. So, please let me know whether OWASP can take care of these expenses and if yes, what is the process to be followed.



	From: dinis cruz [mailto:dinis.cruz at owasp.org] 
	Sent: Tuesday, December 22, 2009 6:46 AM
	To: Vinay Bansal (vibansal); Shankar Babu Chebrolu (shbabu)
	Subject: (today at 2pm GMT) Fwd: Conference Call OWASP-ENISA


	Hi, as leaders of the http://www.owasp.org/index.php/Category:OWASP_Cloud_‐_10_Project <http://www.owasp.org/index.php/Category:OWASP_Cloud_‐_10_Project>  project it would be great if you could also join this call. We meet the Enisa contact at our conference in Spain earlier this month.


	Enisa are a very bug player in EU's security space, and they are very interrested in OWASP's contributions


	The current scheaduled time for this call is today at 2pm GMT (sorry about the late notice)
	Dinis Cruz


	(note: can you forward this request to Jim Born and Martin G. Nystrom (I don't have their emails)



	---------- Forwarded message ----------
	From: Daniele Catteddu <Daniele.Catteddu at enisa.europa.eu>
	Date: 2009/12/20
	Subject: Conference Call OWASP-ENISA
	To: dinis.cruz at owasp.org, Carlos Serrao <carlos.serrao at iscte.pt>, Giles Hogben <Giles.Hogben at enisa.europa.eu>

	Dear Carlos and Diniz 

	It was a pleasure to talk with during the IBWAS Conference in Madrid.

	Now as already  discussed,  I would like to set up a conf call between us to verify the potentiality and feasibility of a possible collaboration between OWASP and ENISA.

	There are 2 main points I would like to discuss with you:

	1)      Involvement of OWASP representatives in ENISA’s project on cloud computing and mobile applications

	2)      Possible medium term actions (from now to 2011)

	You might want to invite for this call other relevant OWASP representative.

	I propose Tuesday the 22nd at 12 GTM.

	Please let me know.




More information about the Owasp-connections-committee mailing list