OWASP AppSec Research 2013

A huge barrier in web security research is the availability of research data. Web traffic data is too sensitive to be shared among the community to allow researchers for developing new methodologies, testing existing approaches or comparing to each other.


The WebSensor project aims at providing a web honeypot that collects data in the format of the ModSecurity audit log. This allows the use of tools like the jwall-tools to replay the recorded HTTP traffic and extract statistics that are valuable for other OWASP projects, like the OWASP ModSecurity Core Rules project.


Community Oriented
------------------------------
The main idea of the WebSensor project to spawn a community for data collection and data sharing. That is, each participant can run one or more sensors and the data will be collected in a central system. The collected data is then accessible to any participant of the project.

http://www.jwall.org/websensor/

ThreadFix is a software vulnerability aggregation and management system that helps organizations coordinate scanning activities, aggregate vulnerability data, generate virtual patches, and interact with software defect tracking systems.

https://code.google.com/p/threadfix/

The OWASP Project Session is a 2 hour meeting and workshop that aims to bring together current and potential OWASP project leaders to discuss project related issues and topics. It is a forum that will be used to bring together project leaders from across the globe in an effort to have participants share valuable insights and recommendations with their fellow members. 
The meeting will be chaired by Simon Bennetts - OWASP ZAP Project leader and Abraham Aranguren: OWASP OWTF Project leader.