August 8, 2011/Project Manager Report

OWASP Free Trainning Courses

 * Altogether with Kate Hartmann, I have assisted Fabio Cerullo with the setting up of the LatamTour2011.

New Projects Set Up

 * OWASP GoatDroid Project, led by Jack Mannino


 * OWASP WhatTheFuzz Project, led by Joe Basirico


 * OWASP ESAPI C++ Project, Project leader not yet defined


 * OWASP ESAPI C Project, led by David Anderson
 * OWASP Security Tools for Developers Project, led by Mark Curphey


 * OWASP Data Exchange Format Project, led by Psiinon and Dinis Cruz


 * OWASP Cheat Sheets Project, led by Sherif Koussa and Jim Mannico


 * OWASP SIMBA Project, led by Koen Vanderloock


 * OWASP VFW Project, led by Eduardo S. Scarpellini

Projects Reset Up

 * OWASP WebScarab Project, led by Rogan Dawes

New Releases Set Up

 * OWASP Mantra - Security Framework – Release Mantra Security Toolkit – 0.61 (only the assessment templates), led by Abhi M BalaKrishnan


 * OWASP ESAPI Objective - C Project – Release v0.0.1, led by Deepak Subramanian


 * OWASP ModSecurity Core Rule Set Project - Release - ModSecurity 2.2.0, (only the assessment templates), led by Ryan Barnett


 * OWASP Esapi Ruby, Release 0.30.0, led by Paolo Perego


 * OPA Project, Release Build 218, led by Henri Binsztok and Adam Koprowski


 * OWASP iGoat Project, Release iGoat v1.0, led by Kenneth R. van Wyk

Releases Assessment

 * OWASP Zed Attack Proxy Project – Release ZAP 1.3.0, led by Psiinon

Projects Mailing List

 * Jason Li populated the owasp-projects mailing list with all known projects leaders so the Projects Committee could easily send announcements regarding OWASP projects news. I have supported this activity by gathering all email addresses and filling in projects inventory spreadsheet. By GPC decision, the list is owasp-projects@lists.owasp.org and it is announce-only by the GPC committee members (similar to how OWASP-all is announce-only by Board/staff members) and should be reserved for project announcements only.

OWASP Newsletter

 * I've prepared GPC's data for the next issue of the OWASP Newsletter.

Routine Tasks

 * My daily routine always includes answering a relatively wide range of questions regularly posed by OWASP members and mainly by OWASP Projects leaders; I receive such inquiries either directly or through the OWASP Website Global Feedback & Inquiry Form. The variety of matters that I currently deal with can be checked in my email tool and the tree of folders built to store, follow up and organize them as follows 1,2,3,4,5,6,7,8,9. I would like to note that to perform this task, and all the others projects' related ones, I have always had relevant support and guidance from the OWASP Global Projects Committee.
 * I've kept all OWASP Projects Dashboard 2.0's databases up-to-date as follows:
 * OWASP Reviews Dashboard,
 * OWASP Project Reviewers Database,
 * Projects 2.0/By Set Up Date Order,
 * Projects 2.0/By Alphabetic Order,
 * OWASP Training,
 * OWASP Project Inventory.

Proposal of future activity

 * To continue answering all received projects' related questions.
 * To continue setting up new projects and new releases as requested.
 * To continue spreading the GPC templates through all OWASP projects.
 * To implement all GPC requests and concretely to support its plans to:
 * Carry out the Project Hosting initiative as a tool to provide a centralized repository for OWASP;
 * Build a new OWASP Projects Portal;
 * Design the second leg of the assessment criteria 2.0, i.e., its Project Health component.
 * As soon as the above referred assessment's second leg is designed and approved, to begin a process to evaluate as much Projects as possible.
 * To set up all the OWASP free training courses that may be requested by OWASP Chapters.
 * To work with Dinis Cruz, Carlos Serrão and Konstantinos Papapanagiotou to produce an initial/draft proposal of an OWASP Training Academy.