OWASP Belgium

Welcome to the Belgium chapter homepage. The chapter leaders are Sebastien Deleersnyder, Lieven Desmet, Bart De Win, and David Mathy.

With the Belgium chapter, we aim to organize 4 local chapter meetings per year and co-organize the yearly BeNeLux Day. Any suggestions for speakers or venue? Feel free to reach out to us!

Upcoming events

November 24-25th, 2022, Tilburg (NL)

Join us in Tilburg for the 2022 version of Owasp BeNeLux days.

September 13th, 2022, Mechelen

This chapter meeting will take place at the Lamot Congress Center, in Mechelen.

This event is co-located with the CyberSecurity event “Strategic Rsearch and Industry Impact”

Agenda



Our meetings are open to the public, and you do not need to be a member to attend. Please do consider joining OWASP if you find our community, projects, and meetings valuable, or sponsoring this chapter.

More events and info: on the ‘Chapter Meetings’ tab.

Chapter sponsors

OWASP Belgium thanks its structural chapter supporters for 2022 and the OWASP BeNeLux Days 2022

Vest Davisnsi Labs Toreon Guardsquare Micro Focus SIG Contrast Security 42 Crunch Achmea

Example

Put whatever you like here: news, screenshots, features, supporters, or remove this file and don’t use tabs at all.

OWASP Belgium Chapter Meeting 2022

September 13th:

We are please to welcome Victor Le Pochat and Philippe Bogaerts. This meeting is co-located with the CyberSecurity event “Strategic Rsearch and Industry Impact”

Agenda:

A hacker’s view on #containers and #K8S

Kubernetes and the eco-systems around are fundamentally complex systems with lots of different potential attack vectors aimed at data theft, currency mining and other threats. The attack surface is immense.
Current legacy security controls do not offer an acceptable level of protection anymore. By looking at the problem from different angles, we’ll discuss the key concepts of container and Kubernetes security to better and reliably protect our applications, workloads and clusters.

Philippe Bogaerts

Philippe brings more than 20+ years of experience in security. Starting out as a trainer specializing in advanced TCP/IP protocols, networking and security, Philippe quickly became known by colleagues as “Philippe hacks to learn”.
Being a pioneer in network firewall, reverse proxy and load-balancing, Philippe later on specialized in web application security with a focus on penetration testing and web application firewalling.
About 6 years ago, containers and orchestration grabbed his attention and started researching (mostly as a hobby), the architecture and security aspects of these new emerging technologies.
Today, Philippe contributes mostly by writing blog posts, talking at meetups as well as co-organizing a renowned security conference.
During daytime, Philippe is a solution architect focusing on AWS, Kubernetes and cloud protection.

An Audit of Facebook’s Political Ad Policy Enforcement

Major technology companies strive to protect the integrity of political advertising on their platforms by implementing and enforcing self-regulatory policies that impose transparency requirements on political ads. In this paper, we quantify whether Facebook’s current enforcement correctly identifies political ads and ensures compliance by advertisers. In a comprehensive, large-scale analysis of 4.2 million political and 29.6 million non-political ads from 215,030 advertisers, we identify ads correctly detected as political (true positives), ads incorrectly detected (false positives), and ads missed by detection (false negatives).
Facebook’s current enforcement appears imprecise: 61% more ads are missed than are detected worldwide, and 55% of U.S. detected ads are in fact non-political. Detection performance is uneven across countries, with some having up to 53 times higher false negative rates among clearly political pages than in the U.S. Moreover, enforcement appears inadequate for preventing systematic violations of political advertising policies: for example, advertisers were able to continue running political ads without disclosing them while they were temporarily prohibited in the U.S. We attribute these flaws to five gaps in Facebook’s current enforcement and transparency implementation, and close with recommendations to improve the security of the online political ad ecosystem.

Victor Le Pochat

Victor Le Pochat is a PhD researcher in the area of web security and privacy at the imec-DistriNet research group at KU Leuven in Belgium. His interests lie in the exploration of web ecosystems through large-scale measurements, and in web security and privacy research methodology, both analyzing and improving current research practices. Follow @VictorLePochat on Twitter.

June 14th:

For this ON-SITE chapter meeting, we have scheduled Isabelle Mauny and Abhay Bhargav.

Both speakers are faculty of the Secure Application Development (SecAppDev 2022) course held in Leuven from 2022-06-13 to 2022-06-17.

Agenda:

Top 5 of recent API Breaches - What can we learn from them?

We will outline the root causes of some recent API vulnerabilities making the news.

  • A detailed look at the underlying OWASP API security Top 10 flaws.
  • Explain of how the vulnerability occurred and what we could have done to prevent it.

Isabelle Mauny’s bio (Field CTO, 42Crunch)

I have been spending the last 15 years helping people integrate their applications internally and externally. I introduced IBM DataPower in Europe in 2005 and worked with numerous enterprises customers deploying what were the first API Gateways. I have stayed in that field since then, with a stronger focus on security in the past 5 years with 42Crunch.

The Call is coming from inside: Post-Exploitation Scenarios with Kubernetes Webhooks

Admission Controllers are an integral part of Kubernetes Security. Specifically, Access Control. These take the form of mutating and validating web-hooks. Kubernetes clusters use these webhooks to enforce/mutate security policy checks.
Everything from security context to memory limits can be enforced through the use of these webhooks. However, attackers can leverage custom-built webhooks as a way of maintaining persistence in an exploited Kubernetes cluster.
In this talk, I will detail the admission controller implementation in Kubernetes. I will build and deploy both mutating and validating, malicious webhooks to a cluster to demonstrate a bevy of post-exploit persistence approaches that one can leverage, entirely using Kubernetes webhooks.

Abhay Bhargav’s bio (CEO, AppSecEngineer)

Abhay Bhargav is the Founder of we45 and AppSecEngineer. He has created some pioneering works in the area of DevSecOps and AppSec Automation, including the world’s first hands-on training program on DevSecOps. In addition to this, Abhay is active in his research of new technologies and their impact on Application Security.
Abhay is a speaker and trainer at major industry events including DEF CON, BlackHat, OWASP AppSecUSA, EU and AppSecCali. His trainings have been sold-out events at conferences like AppSecUSA, AppSecDay Melbourne, CodeBlue, BlackHat and so on.

May 17th 2022:

Securing a World of Physically Capable Computers by Bruce Schneier

Abstract:

Computer security is no longer about data; it’s about life and property. This change makes an enormous difference, and will shake up our industry in many ways.
First, data authentication and integrity will become more important than confidentiality. And second, our largely regulation-free Internet will become a thing of the past. Soon we will no longer have a choice between government regulation and no government regulation. Our choice is between smart government regulation and stupid government regulation.
Given this future, it’s vital that we look back at what we’ve learned from past attempts to secure these systems, and forward at what technologies, laws, regulations, economic incentives, and social norms we need to secure them in the future.

Bio:

Bruce Schneier is an internationally renowned security technologist, called a “security guru” by the Economist. He is the New York Times best-selling author of 14 books – including * Click Here to Kill Everybody* – as well as hundreds of articles, essays, and academic papers.
His influential newsletter Crypto-Gram and blog Schneier on Security are read by over 250,000 people. Schneier is a fellow at the Berkman-Klein Center for Internet and Society at Harvard University, a Lecturer in Public Policy at the Harvard Kennedy School, a board member of the Electronic Frontier Foundation and AccessNow, and an advisory board member of EPIC and VerifiedVoting.org.
He is the Chief of Security Architecture at Inrupt, Inc.

Meeting archive

2022 chapter meetings

14 June 2022 meeting (Leuven)

17 May 2022 meeting (Antwerpen)

Agenda:

  • 17h-18h: Welcome and refreshments
  • 18h-18h10: OWASP Update
  • 18h10-19h: Securing a World of Physically Capable Computers (by Bruce Schneier)

Venue: Hosted by Karel de Grote University of Applied Sciences and Arts

2021 chapter meetings

OWASP Belgium Virtual Chapter Meeting Series 2021

To kickstart 2021, we plan a series of virtual chapter meetings. Every 3rd Thursday of the month, we invite a renowned, international speaker to join us in a focused evening session.

Previous events of 2021:

Our chapter meetings are open for everyone, and attendance is free of charge. We ask you to Register via the OWASP Belgium Meetup group in order to provide you with last-minute updates, if needed.

16 September 2021: The OWASP Top 10 2021 (by Andrew van der Stock)

This virtual chapter meeting will host Andrew van der Stock!

The OWASP Top 10 2021

The OWASP Top 10 2021 is the latest version of the venerable project. During this session, Andrew will take you through how we designed and improved the data collection, the results of the data analysis, the Top 10 2021 itself - with a brief description of each item, along with how you can best adopt and promote this awareness piece. Also, a brief introduction to the work Andrew is doing on the ASVS 5.0, due in 2022.

Andrew van der Stock

Andrew is a seasoned web application security specialist and enterprise security architect. He is the Executive Director at OWASP, taking the Foundation through organizational change and taking our mission to the next level. Andrew has worked in the IT industry for over 25 years. Andrew has researched and developed the web application security and architecture fields since 1998. He is a Lifetime member of OWASP, former Director, and co-leads the OWASP Application Security Verification Standard and OWASP Top 10 projects. An Australian ex-pat of Melbourne and Sydney, he currently lives in the USA with his family.

21 October 2021: Component Analysis vs SCA - How SBOMs are the driving force for change (by Steve Springett)

This virtual chapter meeting will host Steve Springett!

Component Analysis vs SCA - How SBOMs are the driving force for change

This walk would dive into the CycloneDX Software Bill of Materials specification and world-wide efforts to identify and reduce risk in the global software supply chain.

Steve Springett

Steve educates teams on the strategy and specifics of developing secure software. He practices security at every stage of the development lifecycle by leading sessions on threat modeling, secure architecture and design, static/dynamic/component analysis, offensive research, and defensive programming techniques. Steve’s passionate about helping organizations identify and reduce risk from the use of third-party and open source components. He is an open source advocate and leads the OWASP Dependency-Track project, OWASP Software Component Verification Standard (SCVS) project, CycloneDX software bill of materials standard, and participates in several related projects and working groups.

2020 chapter meetings

23-27 November 2020: OWASP BeNeLux Days

Block your agenda for 4 online evening sessions - more info will follow soon (see https://www.owaspbenelux.eu/)!!

28 October 2020: OWASP BE Local virtual security day

This virtual security day / conference is free to join for everybody and we have an amazing line up of interesting speakers and topics. Also we have multiple workshops you can attend for free.

Agenda Talks

  • 9h - 9h15: OWASP Kickoff (by Sebastien Deleersnyder & Glenn ten Cate)
  • 9h15 - 10h: OWASP SAMM (by Sebastien Deleersnyder)
  • 10h - 11h: Making the web secure by design (by Riccado ten Cate)
  • 11h - 11h45: Zerologon - taking over an AD domain in three seconds (by Tom Tervoort)
  • 11h45 - 12h45 break
  • 12h45 - 13h30: Phoenix - Proactively detect and fight phishing attacks (by Davide Cioccia and Stefan Petrushevski)
  • 13h30 - 14h15: Using oldschool techniques to turn software to malware (by Hidde Westerhof)
  • 14h15 - 15h State of the internet (by Peter Massini)
  • 15h - 15h05: OWASP Closing word

Agenda Workshops

  • Workshop Malware general (by Zsombor Kovacs)
  • Workshop OWASP-SKF (by Riccardo ten Cate)
  • Workshop OWASP-SAMM (by Sebastien Deleersnyder)
  • Workshop Malware / Red Teaming (by Tom Kallo)

6-7 June 2020: OWASP Chapters All Day (24 conference)

Leaders from OWASP Chapters throughout the world invite you to join us for 24 hours of non-stop AppSec!

This OWASP Chapters All Day conference is scheduled for June 6-7, and features among others 2 local speakers: chapter lead Seba Deleersnyder (on OPEN SAMM v2) and PhD researcher Victor Le Pochat (on the Avalanche botnet takedown).

The festivities will kick off with Welcoming Remarks and a Keynote presentation at 2pm local time (12:00 noon UTC) on Saturday, 6 June. Then, each hour, the (virtual) floor will be handed over to a leader from another OWASP Chapter, who will introduce speakers from their chapter/region. At 2pm local time (12:00 noon UTC) on Sunday, 7 June, a brief recap and closing remarks will wrap up the Chapters All Day conference.

The OWASP Belgium time slot (with Sebastian and Victor) is scheduled at 3pm local time on Saturday!!

The full schedule and details are available at https://owasp.org/www-community/social/chapters_all_day/ .

29 April 2020: OWASP - ING Open security conference (Brussels)

POSTPONED Due to the COVID-19 related restrictions, the chapter meeting will be postponed.

ING Belgium is proud to organize an open security conference in collaboration with OWASP.

Venue

The event will take place @ at ING Brussels on 29th of April 2020

  • A couple of workshops will be hosted during the day
  • The event will be for 300 people max
  • No marketing pitches

11 March 2020 meeting (Leuven)

CANCELLED Due to the COVID-19 related cancellation of the Secure Application Development course, the chapter meeting will be cancelled as well.

Venue

Hosted by DistriNet Research Group (KU Leuven)

Both speakers are faculty of the Secure Application Development, a unique AppSec course held in Leuven from 2020-03-09 to 2020-03-13.

Agenda

  • 18h00 - 18h50: Welcome & sandwiches
  • 18h50 - 19h00: OWASP Update
  • 19h00 - 20h00: The hitchhikers guide to secrets for cloud environments by Abhay Bhargav (CEO we45)
  • 20h00 - 20h10: Break
  • 20h10 - 21h10: Blueprint for secure JavaScript development by Marcin Hoppe (Senior Manager, Product Security, Auth0)

2019 chapter meetings

25 November 2019 meeting (Leuven)

Venue

Hosted by DistriNet Research Group (KU Leuven)

The event is co-located with a briefing and industry opportunity meeting of the Flanders Cyber Security impuls program. Feel free to register for this co-located event if interested.

Agenda

23-27 September 2019: Global AppSec Amsterdam

Together with the OWASP staff and the OWASP Netherlands chapter, the OWASP Belgium chapter supports and contributes to the organisation of the Global AppSec Amsterdam 2019. We kindly invite all our chapter members to join us in Amsterdam in September!

Due to focusing our efforts on the Global AppSec Amsterdam conference, we decided to skip this year’s edition of the OWASP BeNeLux Days. Mark your agenda for next year: 26 and 27 November 2020 in the Netherlands.

Summit working session on OWASP SAMM

OWASP Belgium presents a summit working session on OWASP SAMM in Antwerp on 30 April.

Registration is free but mandatory (via EventBrite): https://www.eventbrite.com/e/open-security-summit-working-session-tickets-60456102831

20 February 2019 Meeting

Venue

Hosted by DistriNet Research Group (KU Leuven)

Both speakers are faculty of the Secure Application Development course held in Leuven from 2019-02-18 to 2019-02-22.

Agenda

2018 chapter meetings

OWASP BeNeLux Days 2018

This conference has its own page: OWASP_BeNeLux-Days_2018.

23 October 2018 Meeting (Bruges)

Hosted by Secure Code Warrior

Agenda

7 September 2018 Meeting (Brussels)

Hosted by the European Commission

Agenda

  • 18h00 - 18h50: Welcome & sandwiches
  • 18h50 - 19h00: OWASP Update by Sebastien Deleersnyder (OWASP BE)
  • 19h00 - 19h10: Intro by the EC by Miguel Soria Machado (Head of Sector CSIRC, DIGIT IT Security Directorate, European Commission)
  • 19h10 - 20h00: Docker Threat Modeling and Top 10 by Dirk Wetter
  • 20h00 - 20h10: Break
  • 20h10 - 21h00: Securing Containers on the High Seas by Jack Mannino (nVisium)
  • 21h00 - 21h30: Networking drink

19 March 2018 Meeting (Brussels)

Hosted by ING Belgium

Agenda

  • 18h15 - 19h00: Welcome & sandwiches
  • 19h00 - 19h10: OWASP Update by Sebastien Deleersnyder (OWASP BE)
  • 19h10 - 20h00: KRACKing WPA2 in Practice Using Key Reinstallation Attacks by Mathy Vanhoef (DistriNet, KU Leuven)
  • 20h00 - 20h10: Break
  • 20h10 - 21h00: Making the web secure by design by Glenn Ten Cate (ING Belgium) and Riccardo Ten Cate (Xebia)
  • 21h00 - 21h30: Networking drink

20 February 2018 Meeting (Leuven)

Hosted by DistriNet Research Group (KU Leuven)

Both speakers are faculty of the Secure Application Development course held in Leuven from 2018-02-19 to 2018-02-23.)

Agenda

2017 chapter meetings

19 June 2017 Meeting (Brussels)

Hosted by NVISO

Agenda

29 May 2017 Meeting (Machelen)

Hosted by Ernst & Young

Agenda

  • 18h00 - 18h50: Welcome & sandwiches
  • 18h50 - 19h00: OWASP Update by Lieven Desmet (OWASP BE)
  • 19h00 - 19h45: HTTP for the Good or the Bad by Xavier Mertens (freelance security consultant)
  • 19h45 - 20h30: Reverse engineering with Panopticon: a Libre Cross-Platform Disassembler by Kai Michaelis
  • 20h30 - … : Reception

28 February 2017 Meeting (Leuven)

Hosted by DistriNet Research Group (KU Leuven)

Both speakers are faculty of the Secure Application Development course held in Leuven from 2017-02-27 to 2017-03-03.

Address

2016 chapter meetings

18 October 2016 Meeting (Ghent)

Hosted by UGent

Agenda

8 September 2016 Meeting (Zaventem)

Hosted by PwC

Agenda

23 May 2016 Meeting (Mechelen)

Hosted by is4u at Moonbeat (Mechelen)

Agenda

  • 18h00 - 19h00: Welcome & sandwiches
  • 19h00 - 19h10: OWASP Update
  • 19h10 - 20h00: All Your Biases Belong to Us: Breaking RC4 in WPA-TKIP and TLS by Mathy Vanhoef (DistriNet, KU Leuven)
  • 20h00 - 20h10: Break
  • 20h10 - 21h00: Docker Security by Nils De Moor (CTO at WooRank)
  • 21h00 - … : Networking drink

8 March 2016 Meeting (Leuven)

Hosted by DistriNet Research Group (KU Leuven)

Both speakers are faculty of the Secure Application Development course held in Leuven from 7-11 March 2016.

Agenda

2015 chapter meetings

24 February 2015 Meeting (Leuven)

Hosted by DistriNet Research Group (KU Leuven)

Both speakers are faculty of the Secure Application Development course held in Leuven from 23 to 27 February 2015.

Agenda

2014 chapter meetings

17 December 2014 Meeting (Mechelen)

Hosted by is4u at Moonbeat (Mechelen)

Agenda

  • 18h00 - 18h45: Welcome & sandwiches
  • 18h45 - 19h00: OWASP Update by Sebastien Deleersnyder (OWASP Belgium Board)
  • 19h00 - 20h00: OWASP Top 10 Mobile Risks / demos by Erwin Geirnaert
  • 20h00 - 20h15: Break
  • 20h15 - 20h30: Investigating software security practices by Koen Yskout and Laurens Sion (DistriNet, KU Leuven)
  • 20h30 - 21h30: OpenSAMM Best Practices: Lessons from the Trenches by Sebastien Deleersnyder and Bart De Win

20 May 2014 Meeting (Brussels)

Hosted by NVISO

Agenda

12 February 2014 Meeting (Leuven)

Hosted by DistriNet Research Group (KU Leuven)

Both speakers are faculty of the Secure Application Development course held in Leuven from 10 to 14 February 2014.

Agenda

2013 chapter meetings

17 December 2013 Meeting (Leuven)

Jointly organized with (ISC)2

Hosted by DistriNet Research Group (KU Leuven)

Agenda

8 October 2013 Meeting (Diegem)

Hosted by Ernst & Young

Agenda

6 June 2013 Meeting (Leuven)

Hosted by DistriNet Research Group (KU Leuven)

Agenda

Previous Meeting (5th of March 2013) in Leuven

Hosted by DistriNet Research Group (KU Leuven)

Both speakers are faculty of the Secure Application Development course held in Leuven from 4 March 2013 until 8 March 2013.

Agenda

2012 chapter meetings

26 September 2012 Meeting (Ghent)

Hosted by PWC

Co-organized with the ISSA (Information Systems Security Association)

Address

12 September 2012 Meeting (Leuven)

Hosted by DistriNet Research Group (KU Leuven)

Co-organized with the IWT-project SPION (security and privacy in online social networks)

Agenda

6 March 2012 Meeting (Leuven)

Hosted by DistriNet Research Group (KU Leuven)

Both speakers are faculty of the Secure Application Development course held in Leuven from 5 March 2012 until 9 March 2012.

Agenda

25 January 2012 Meeting (Brussels)

Hosted by Cisco Belgium

Agenda

2011 chapter meetings

16 June 2011 Meeting (Brussels)

Hosted by Deloitte

Agenda

  • 18h00 - 18h30: Welcome & Sandwiches
  • 18h30 - 18h45: OWASP Update (by Sebastien Deleersnyder, SAIT Zenitel, OWASP Board)
  • 18h45 - 19h45: The OWASP AppSensor Project (by Colin Watson, Watson Hall Ltd)
  • 19h45 - 20h00: Break
  • 20h00 - 21h00: How to become Twitter’s admin: An introduction to Modern Web Service Attacks (by Andreas Falkenberg, RUB)

23 May 2011 Meeting (Brussels)

Location: LCM, Brussels

Co-organized with the ISSA (Information Systems Security Association)

Agenda

2010 chapter meetings

21 September 2010 Meeting (Leuven)

Hosted by DistriNet Research Group (KU Leuven). Pizza’s sponsored by F5 Networks.

Agenda

16 June 2010 Meeting (Brussels)

Hoste by Zenitel Belgium.

Agenda

  • 18h00 - 18h30: Welcome & Refreshments
  • 18h30 - 18h45: OWASP Update (by Sebastien Deleersnyder, Zenitel, OWASP Board)
  • 18h45 - 20h00: Advanced SQL Injection (by Joe McCray, Learn Security Online)

1 June 2010 Meeting (Brussels)

Hosted by Cisco Belgium

Agenda

  • 18h00 - 18h30: Welcome & Refreshments
  • 18h30 - 18h45: OWASP Update (by Sebastien Deleersnyder, Zenitel, OWASP Board)
  • 19h00 - 20h00: The Belgian e-ID: hacker vs developer (by Erwin Geirnaert and Frank Cornelis)
  • 20h00 - 20h15: Break
  • 20h15 - 21h15: Analyzing the Accuracy Of Web Application Scanners (by Larry Suto)

1 February 2010 Meeting (Brussels)

Hosted by Ernst & Young

Co-organized with the ISSA (Information Systems Security Association)

Agenda

2009 chapter meetings

15 September 2009 Meeting (Leuven)

Hosted by DistriNet Research Group (KU Leuven). Pizza’s sponsored by F5 Networks.

Agenda

  • 18h30 - 19h00: Welcome & Refreshments
  • 19h00 - 19h15: OWASP Update (by Sebastien Deleersnyder, Telindus, OWASP Board)
  • 19h15 - 20h00: CSRF: the nightmare becomes reality (by Lieven Desmet, DistriNet Research Group (K.U. Leuven))
  • 20h00 - 21h15: Hacking Web 2.0 Streams – Cross Domain Injection and Exploits (by Shreeraj Shah, founder of Blueinfy)

4 March 2009 Meeting (Brussels)

Hosted by Telindus, Belgacom-ICT

Agenda

  • 18h00 - 18h30: Welcome & Refreshments
  • 18h30 - 18h45: OWASP Update (by Sebastien Deleersnyder, Telindus, OWASP Board)
  • 18h45 - 20h45: A Software Security Maturity Model (by Gary McGraw, CTO of Cigital)

4 February 2009 Meeting (Brussels)

Hosted by Ernst & Young

Agenda

  • 18h00 - 18h30: Welcome & Refreshments
  • 18h30 - 18h40: OWASP Update (by Sebastien Deleersnyder, Telindus, OWASP Board)
  • 18h40 - 19h30: Best Practices Guide Web Application Firewalls (by Alexander Meisel, CTO and founder of Art of Defence)
  • 19h30 - 20h00: I thought you were my friend - Evil Markup, browser issues and other obscurities (by Mario Heiderich)
  • 20h00 - 20h10: Break
  • 20h10 - 21h00: Research on Belgian bank trojan attacks (by Richard Bennett, software consultant)

2008 chapter meetings

17 November 2008 Meeting (Brussels)

Hosted by Isabel, the catering was sponsored by ISSA

Co-organized with the ISSA (Information Systems Security Association)

Agenda

  • 18h00 - 18h30: Welcome & Refreshments
  • 18h30 - 19h00: OWASP / ISSA introduction (by Philippe Bogaerts, OWASP Belgium and Bart Moerman, ISSA Brussels-European Chapter)
  • 19h00 - 20h00: Risky PDF [ZIP] (by Didier Stevens, Contraste Europe)
  • 20h00 - 21h00: .NET Rootkits - Backdoors Inside Your Framework (by Erez Metula, 2BSecure)

23 October 2008 Meeting (Huizingen)

Hosted by RealDolmen

Agenda

  • 18h00 - 18h30: Welcome & Refreshments
  • 18h30 - 19h00: OWASP Update (by Sebastien Deleersnyder, OWASP Belgium)
  • 19h00 - 20h00: Building a tool for Security consultants: A story of a customized source code scanner (by Dinis Cruz, OWASP)
  • 20h00 - 21h00: Logging: not just a good idea (by Eddy Vanlerberghe)

21 April 2008 Meeting (Luxembourg, LU)

Location: Centre de Recherche Public Henri Tudor

Agenda

  • 16h00 - 16h30: Welcome & Sandwiches
  • 16h30 - 17h00: OWASP Introduction (by Sebastien Deleersnyder, OWASP BeLux)
  • 17h00 - 18h00: How to break Web Applications (by Philippe Bogaerts, NetAppSec)
  • 18h00 - 18h15: break
  • 18h15 - 19h15: How to secure Web Applications (the OWASP Way) (by Sebastien Deleersnyder, Telindus)

9 April 2008 Meeting (Brussels)

Hosted by Deloitte

Agenda

OWASP at infosecurity.be: 20 March 2008 (Brussels)

OWASP will be present on Infosecurity.be 2008

Agenda:

4 March 2008 Meeting (Leuven)

Hosted by DistriNet Research Group (KU Leuven)

Agenda

  • 18h00 - 18h30: Welcome, Refreshments and drinks
  • 18h30 - 18h45: OWASP Update by Sebastien Deleersnyder (OWASP BeLux)
  • 18h45 - 19h00: CAcert.org and Thawte by Kenneth Van Wyck (KRvW Associates)
  • 19h00 - 20h00: Development life cycle issues by Kenneth Van Wyck (KRvW Associates)
  • 20h00 - 20h15: break
  • 20h15 - 21h15: Structural improvements for SDLs by Bart De Win (DistriNet, KU Leuven)

2007 chapter meetings

20 November 2007 Meeting (Leuven)

Hosted by DistriNet Research Group (KU Leuven). Pizza’s and drinks sponsored by NetAppSec.

Co-organized with the ISSA (Information Systems Security Association)

Agenda

  • 18h00 - 18h30: Welcome, Pizza and drinks
  • 18h30 - 18h45: OWASP Update by Sebastien Deleersnyder (OWASP BeLux)
  • 18h45 - 19h00: ISSA Intro by Tomas Vanhoof (ISSA)
  • 19h00 - 20h00: Operational security impact on developing secure applications by Patrick Debois
  • 20h00 - 20h15: break
  • 20h15 - 21h15: Security awareness programs for development by Herman Stevens & Swa Frantzen (NET2S)

OWASP Day 2007: 6 September 2007 (Brussels)

On September 6th, OWASP organized OWASP Day conferences worldwide triggered by the Global Security Week idea. In Belgium we organized the mini-conference in Brussels.

Hosted by Telindus, Belgacom-ICT at the SURF House

Agenda

22 June 2007 Meeting (Diegem)

Hosted by Deloitte

F5 Networks sponsored Ivan Ristic and Dinis Cruz to come to Brussels.

Agenda

10 May 2007 Meeting (Leuven)

Hosted by ps_testware

Agenda

OWASP at infosecurity.be: 21-22 March 2007 (Brussels)

OWASP will be present on Infosecurity.be 2008

Agenda

23 January 2007 (Brussels)

Hosted by Ernst & Young

Agenda

2006 chapter meetings

JavaPolis 2006: 15/12/2006 (Antwerp)

Stephen de Vries (project leader of the OWASP Java Project) did a talk at JavaPolis in Belgium.

Agenda

  • Security Sins and their Solutions by Spehen de Vries (project lead of the OWASP Java Project)

14 September 2006 Meeting (Antwerp)

Hosted by ING Belgium

Co-organized with the ISSA (Information Systems Security Association)

Agenda

8 May 2006 Meeting (Brussels)

Hosted by Deloitte

Agenda

  • 18h00 - 18h30: Welcome, get drink & snack
  • 18h20 - 18h40: OWASP Update by Sebastien Deleersnyder (Ascure)
  • 18h45 - 19h15: Internet Attack Statistics for Belgium in 2005 by Hillar Leoste (Zone-H)
  • 19h15 - 20h30: Can “Agile” Development Produce Secure Applications? by Johan Peeters (Program Director secappdev.org)

22 February 2006 (Leuven)

Hosted by DistriNet Research Group (KU Leuven). Pizza’s and drinks sponsored by BeeWare.

Agenda

New years drink: 19 January 2006 (Leuven)

On January 19th we had a New Years Drink. It was sponsored by Zion Security

Agenda

2005 chapter meetings

28 September 2005 Meeting (Leuven)

Hosted by Ubizen

Agenda

26 May 2005 Meeting (Ghent)

On 26th of May 2005 we held the first OWASP Belgium Chapter meeting!

It was a big success: we had nearly 40 people attending, despite the Belgium-unlike hot weather.

Agenda

Local sponsors

OWASP Belgium thanks its structural chapter supporters for 2022 and the OWASP BeNeLux Days 2022

Vest Davisnsi Labs Toreon Guardsquare Micro Focus SIG Contrast Security 42 Crunch Achmea

If you want to support our chapter, please contact Seba Deleersnyder.

Watch Star