OWASP ModSecurity Core Rule Set



Registration | Hotel | Walter E. Washington Convention Center

The presentation
This project just recently achieved Release Quality status as an OWASP Project. http://www.owasp.org/index.php/Category:OWASP_ModSecurity_Core_Rule_Set_Project

This presentation will be an overview of the Core Rule Set functionality, what it does and doesn't do and all of the new features. We will also discuss the project synergies with other OWASP projects such as AppSensor.

Ryan Barnett
Ryan C. Barnett is a senior security researcher on Trustwave's SpiderLabs Team. He is a SANS Institute certified instructor and a member of both the Top 20 Vulnerabilities and CWE/SANS Top 25 Most Dangerous Programming Errors teams. In addition to working with SANS, he is also a WASC Member where he leads the Web Hacking Incidents Database (WHID) and Distributed Open Proxy Honeypots Projects and is also the OWASP ModSecurity Core Rule Set (CRS) project leader. Mr. Barnett has also authored a Web security book for Addison/Wesley Publishing entitled Preventing Web Attacks with Apache.