Keynote: 20:20 The History and Future of OWASP
summary
A founding story: a Wall Street Journal XSS at Charles Schwab sparks a no-plan launch of OWASP, the original static guide mutates into a wiki, and projects like OWASP ZAP and Dependency-Track grow into standalone tools while SourceClear is later acquired by Veracode and Open Raven appears. The claim: roughly quarter of a million CVEs lurk in copied open‑source libraries versus ~6,000 reported. Concrete proposals: stitch tools into a product suite or SaaS, embrace CNCF/Linux Foundation partnerships, uphold vendor neutrality and mobilize to fix critical open‑source projects.
AI-written summary · about
chapters (7)
- 0:00Start
- 8:45Firefox
- 14:32The First Owasp Logo
- 21:24Establish Vendor Neutrality
- 29:55Michael Howard
- 43:48The Code Security Project
- 44:47A Mission Statement for the Next 20 Years
related talks
54mConference Keynote - The next 25 years
16mKeynote: There Is Just One Way to Do Open Source Security: Together
36mApp Security Does Not Need To Be Fun: Ignoring OWASP To Have A Terrible Time
57mFrontiers in Securing the Open Source Ecosystem
39mKeynote - The Abridged History of Application Security
38mApplication Security in the age of Open Source
45mLeveraging Projects and Tools to Transform Your SDLC
22mKeynote: Securing the Open Source Ecosystem