Empathy List Archives

WT

Wujek Thorsten [STEIN-IT GmbH]

Mon, Feb 7, 2011 7:28 PM

To all subscribers of this list,

could those of you who want to participate in the WAFEC process please confirm your interest explicitly. It would be nice to get an idea who will attend and plan the ongoing steps.

Thank you in advance.

~Thorsten

Von meinem iPad gesendet
Kleines Gerät, kleine Mails.

To all subscribers of this list, could those of you who want to participate in the WAFEC process please confirm your interest explicitly. It would be nice to get an idea who will attend and plan the ongoing steps. Thank you in advance. ~Thorsten Von meinem iPad gesendet Kleines Gerät, kleine Mails.

HK

Holt, Keith

Mon, Feb 7, 2011 7:30 PM

I would like to remain involved. As a daily user of this technology and the fact that we just had a major installation of WAF technology here at Texas Instruments. I believe there are some topics that I feel need to be addressed in future WAF specifications and technology evals.

Keith Holt
Member Group Technical Staff, CSSLP
IT Security Architecture
email: d-holt4@ti.com
Phone: 214-567-8882

Information Security is a TEAM effort ... it's everyone's responsibility!

-----Original Message-----
From: wasc-wafec-bounces@lists.webappsec.org [mailto:wasc-wafec-bounces@lists.webappsec.org] On Behalf Of Wujek Thorsten [STEIN-IT GmbH]
Sent: Monday, February 07, 2011 1:29 PM
To: wasc-wafec@lists.webappsec.org
Subject: [WASC-WAFEC] WAFEC V2

To all subscribers of this list,

could those of you who want to participate in the WAFEC process please confirm your interest explicitly. It would be nice to get an idea who will attend and plan the ongoing steps.

Thank you in advance.

~Thorsten

Von meinem iPad gesendet
Kleines Gerät, kleine Mails.

wasc-wafec mailing list
wasc-wafec@lists.webappsec.org
http://lists.webappsec.org/mailman/listinfo/wasc-wafec_lists.webappsec.org

I would like to remain involved. As a daily user of this technology and the fact that we just had a major installation of WAF technology here at Texas Instruments. I believe there are some topics that I feel need to be addressed in future WAF specifications and technology evals. Keith Holt Member Group Technical Staff, CSSLP IT Security Architecture email: d-holt4@ti.com Phone: 214-567-8882 Information Security is a TEAM effort ... it's everyone's responsibility! -----Original Message----- From: wasc-wafec-bounces@lists.webappsec.org [mailto:wasc-wafec-bounces@lists.webappsec.org] On Behalf Of Wujek Thorsten [STEIN-IT GmbH] Sent: Monday, February 07, 2011 1:29 PM To: wasc-wafec@lists.webappsec.org Subject: [WASC-WAFEC] WAFEC V2 To all subscribers of this list, could those of you who want to participate in the WAFEC process please confirm your interest explicitly. It would be nice to get an idea who will attend and plan the ongoing steps. Thank you in advance. ~Thorsten Von meinem iPad gesendet Kleines Gerät, kleine Mails. _______________________________________________ wasc-wafec mailing list wasc-wafec@lists.webappsec.org http://lists.webappsec.org/mailman/listinfo/wasc-wafec_lists.webappsec.org

ME

Matthieu Estrade

Mon, Feb 7, 2011 7:38 PM

Hi =)

Ready to help and work on this new version of the document, as vendor and
also as an opensource developer.

Matthieu

-----Message d'origine-----
From: Wujek Thorsten [STEIN-IT GmbH]
Sent: Monday, February 07, 2011 8:28 PM
To: wasc-wafec@lists.webappsec.org
Subject: [WASC-WAFEC] WAFEC V2

To all subscribers of this list,

could those of you who want to participate in the WAFEC process please
confirm your interest explicitly. It would be nice to get an idea who will
attend and plan the ongoing steps.

Thank you in advance.

~Thorsten

Von meinem iPad gesendet
Kleines Gerät, kleine Mails.

wasc-wafec mailing list
wasc-wafec@lists.webappsec.org
http://lists.webappsec.org/mailman/listinfo/wasc-wafec_lists.webappsec.org

Hi =) Ready to help and work on this new version of the document, as vendor and also as an opensource developer. Matthieu -----Message d'origine----- From: Wujek Thorsten [STEIN-IT GmbH] Sent: Monday, February 07, 2011 8:28 PM To: wasc-wafec@lists.webappsec.org Subject: [WASC-WAFEC] WAFEC V2 To all subscribers of this list, could those of you who want to participate in the WAFEC process please confirm your interest explicitly. It would be nice to get an idea who will attend and plan the ongoing steps. Thank you in advance. ~Thorsten Von meinem iPad gesendet Kleines Gerät, kleine Mails. _______________________________________________ wasc-wafec mailing list wasc-wafec@lists.webappsec.org http://lists.webappsec.org/mailman/listinfo/wasc-wafec_lists.webappsec.org

JT

Julian Totzek

Mon, Feb 7, 2011 7:38 PM

Hi,

I will participate

Cheers

Julian Totzek-Hallhuber
Technical Consultant Germany, Austria, Switzerland Deny All

Tel.: +49 (0)6124 70 25 50 2
Mobil:+49 (0)160 97 28 50 04
Email: jtotzek@denyall.com
http://www.denyall.com

Am 07.02.11 20:28 schrieb "Wujek Thorsten [STEIN-IT GmbH]" unter Thorsten.Wujek@stein-edv.de:

To all subscribers of this list,

could those of you who want to participate in the WAFEC process please confirm your interest explicitly. It would be nice to get an idea who will attend and plan the ongoing steps.

Thank you in advance.

~Thorsten

Von meinem iPad gesendet
Kleines Gerät, kleine Mails.

wasc-wafec mailing list
wasc-wafec@lists.webappsec.org
http://lists.webappsec.org/mailman/listinfo/wasc-wafec_lists.webappsec.org

Hi, I will participate Cheers Julian Totzek-Hallhuber Technical Consultant Germany, Austria, Switzerland Deny All Tel.: +49 (0)6124 70 25 50 2 Mobil:+49 (0)160 97 28 50 04 Email: jtotzek@denyall.com http://www.denyall.com Am 07.02.11 20:28 schrieb "Wujek Thorsten [STEIN-IT GmbH]" unter <Thorsten.Wujek@stein-edv.de>: To all subscribers of this list, could those of you who want to participate in the WAFEC process please confirm your interest explicitly. It would be nice to get an idea who will attend and plan the ongoing steps. Thank you in advance. ~Thorsten Von meinem iPad gesendet Kleines Gerät, kleine Mails. _______________________________________________ wasc-wafec mailing list wasc-wafec@lists.webappsec.org http://lists.webappsec.org/mailman/listinfo/wasc-wafec_lists.webappsec.org

PS

Przemyslaw Skowron

Mon, Feb 7, 2011 7:41 PM

2011/2/7 Wujek Thorsten [STEIN-IT GmbH] Thorsten.Wujek@stein-edv.de:

To all subscribers of this list,

could those of you who want to participate in the WAFEC process please confirm your interest explicitly. It would be nice to get an idea who will attend and plan the ongoing steps.

I'm ready :-)

Best regards,

Przemyslaw Skowron, <przemyslaw.skowron {at} gmail.com>

2011/2/7 Wujek Thorsten [STEIN-IT GmbH] <Thorsten.Wujek@stein-edv.de>: > To all subscribers of this list, > > could those of you who want to participate in the WAFEC process please confirm your interest explicitly. It would be nice to get an idea who will attend and plan the ongoing steps. > I'm ready :-) Best regards, -- Przemyslaw Skowron, <przemyslaw.skowron {at} gmail.com>

IB

Ido Breger

Mon, Feb 7, 2011 7:44 PM

Hi Thorsten,
I will represent F5.
BTW,
A while back, Ofer started to draft the 2nd version, we actually made some progress.
I just can't find that work anymore (outlook data files corruption...)
I remember exchanging a few email with Anton and Ivan so maybe they have a copy...
Cheers,
Ido

Ido Breger  |  Product Manager, Security
F5
  P +972.3.7691500
M1 +1.206.272.6482
www.f5.com
  D +972.3.7691504
M2 +972.544.89.1177

-----Original Message-----
From: wasc-wafec-bounces@lists.webappsec.org [mailto:wasc-wafec-bounces@lists.webappsec.org] On Behalf Of Wujek Thorsten [STEIN-IT GmbH]
Sent: Monday, February 07, 2011 9:29 PM
To: wasc-wafec@lists.webappsec.org
Subject: [WASC-WAFEC] WAFEC V2

To all subscribers of this list,

could those of you who want to participate in the WAFEC process please confirm your interest explicitly. It would be nice to get an idea who will attend and plan the ongoing steps.

Thank you in advance.

~Thorsten

Von meinem iPad gesendet
Kleines Gerät, kleine Mails.

wasc-wafec mailing list
wasc-wafec@lists.webappsec.org
http://lists.webappsec.org/mailman/listinfo/wasc-wafec_lists.webappsec.org

Hi Thorsten, I will represent F5. BTW, A while back, Ofer started to draft the 2nd version, we actually made some progress. I just can't find that work anymore (outlook data files corruption...) I remember exchanging a few email with Anton and Ivan so maybe they have a copy... Cheers, Ido Ido Breger | Product Manager, Security F5 P +972.3.7691500 M1 +1.206.272.6482 www.f5.com D +972.3.7691504 M2 +972.544.89.1177 -----Original Message----- From: wasc-wafec-bounces@lists.webappsec.org [mailto:wasc-wafec-bounces@lists.webappsec.org] On Behalf Of Wujek Thorsten [STEIN-IT GmbH] Sent: Monday, February 07, 2011 9:29 PM To: wasc-wafec@lists.webappsec.org Subject: [WASC-WAFEC] WAFEC V2 To all subscribers of this list, could those of you who want to participate in the WAFEC process please confirm your interest explicitly. It would be nice to get an idea who will attend and plan the ongoing steps. Thank you in advance. ~Thorsten Von meinem iPad gesendet Kleines Gerät, kleine Mails. _______________________________________________ wasc-wafec mailing list wasc-wafec@lists.webappsec.org http://lists.webappsec.org/mailman/listinfo/wasc-wafec_lists.webappsec.org

JU

Johanne Ulloa

Tue, Feb 8, 2011 8:50 AM

Hello,

I will participate.

Regards,

Envoyé de mon iPhone

Le 7 févr. 2011 à 20:28, "Wujek Thorsten [STEIN-IT GmbH]" Thorsten.Wujek@stein-edv.de a écrit :

To all subscribers of this list,

could those of you who want to participate in the WAFEC process please confirm your interest explicitly. It would be nice to get an idea who will attend and plan the ongoing steps.

Thank you in advance.

~Thorsten

Von meinem iPad gesendet
Kleines Gerät, kleine Mails.

wasc-wafec mailing list
wasc-wafec@lists.webappsec.org
http://lists.webappsec.org/mailman/listinfo/wasc-wafec_lists.webappsec.org

Hello, I will participate. Regards, Envoyé de mon iPhone Le 7 févr. 2011 à 20:28, "Wujek Thorsten [STEIN-IT GmbH]" <Thorsten.Wujek@stein-edv.de> a écrit : > To all subscribers of this list, > > could those of you who want to participate in the WAFEC process please confirm your interest explicitly. It would be nice to get an idea who will attend and plan the ongoing steps. > > Thank you in advance. > > ~Thorsten > > Von meinem iPad gesendet > Kleines Gerät, kleine Mails. > > _______________________________________________ > wasc-wafec mailing list > wasc-wafec@lists.webappsec.org > http://lists.webappsec.org/mailman/listinfo/wasc-wafec_lists.webappsec.org

IR

Ivan Ristic

Tue, Feb 8, 2011 9:02 AM

I too will contribute.

Yes, we did make some progress on WAFEC2 back then. There was a push
to formalize the criteria, which would make it easier to evaluate
products.

Here are some of the documents I have:

WAFEC2 Section 1: Deployment
http://docs.google.com/View?id=dcx2fmgk_58gxng6qhm

WAF Deployment Method Capabilities Matrix
http://docs.google.com/View?id=dcx2fmgk_67cf3dtvg9

WAFEC2 Section 5: Logging
http://docs.google.com/View?id=dcx2fmgk_3g9gw47

On Mon, Feb 7, 2011 at 7:44 PM, Ido Breger I.Breger@f5.com wrote:

Hi Thorsten,
I will represent F5.
BTW,
A while back, Ofer started to draft the 2nd version, we actually made some progress.
I just can't find that work anymore (outlook data files corruption...)
I remember exchanging a few email with Anton and Ivan so maybe they have a copy...
Cheers,
Ido

Ido Breger  |  Product Manager, Security
F5
  P +972.3.7691500
M1 +1.206.272.6482
www.f5.com
  D +972.3.7691504
M2 +972.544.89.1177

-----Original Message-----
From: wasc-wafec-bounces@lists.webappsec.org [mailto:wasc-wafec-bounces@lists.webappsec.org] On Behalf Of Wujek Thorsten [STEIN-IT GmbH]
Sent: Monday, February 07, 2011 9:29 PM
To: wasc-wafec@lists.webappsec.org
Subject: [WASC-WAFEC] WAFEC V2

To all subscribers of this list,

could those of you who want to participate in the WAFEC process please confirm your interest explicitly. It would be nice to get an idea who will attend and plan the ongoing steps.

Thank you in advance.

~Thorsten

Von meinem iPad gesendet
Kleines Gerät, kleine Mails.

wasc-wafec mailing list
wasc-wafec@lists.webappsec.org
http://lists.webappsec.org/mailman/listinfo/wasc-wafec_lists.webappsec.org

--
Ivan Ristić

I too will contribute. Yes, we did make some progress on WAFEC2 back then. There was a push to formalize the criteria, which would make it easier to evaluate products. Here are some of the documents I have: WAFEC2 Section 1: Deployment http://docs.google.com/View?id=dcx2fmgk_58gxng6qhm WAF Deployment Method Capabilities Matrix http://docs.google.com/View?id=dcx2fmgk_67cf3dtvg9 WAFEC2 Section 5: Logging http://docs.google.com/View?id=dcx2fmgk_3g9gw47 On Mon, Feb 7, 2011 at 7:44 PM, Ido Breger <I.Breger@f5.com> wrote: > Hi Thorsten, > I will represent F5. > BTW, > A while back, Ofer started to draft the 2nd version, we actually made some progress. > I just can't find that work anymore (outlook data files corruption...) > I remember exchanging a few email with Anton and Ivan so maybe they have a copy... > Cheers, > Ido > > > Ido Breger | Product Manager, Security > F5 > P +972.3.7691500 > M1 +1.206.272.6482 > www.f5.com > D +972.3.7691504 > M2 +972.544.89.1177 > > -----Original Message----- > From: wasc-wafec-bounces@lists.webappsec.org [mailto:wasc-wafec-bounces@lists.webappsec.org] On Behalf Of Wujek Thorsten [STEIN-IT GmbH] > Sent: Monday, February 07, 2011 9:29 PM > To: wasc-wafec@lists.webappsec.org > Subject: [WASC-WAFEC] WAFEC V2 > > To all subscribers of this list, > > could those of you who want to participate in the WAFEC process please confirm your interest explicitly. It would be nice to get an idea who will attend and plan the ongoing steps. > > Thank you in advance. > > ~Thorsten > > Von meinem iPad gesendet > Kleines Gerät, kleine Mails. > > _______________________________________________ > wasc-wafec mailing list > wasc-wafec@lists.webappsec.org > http://lists.webappsec.org/mailman/listinfo/wasc-wafec_lists.webappsec.org > _______________________________________________ > wasc-wafec mailing list > wasc-wafec@lists.webappsec.org > http://lists.webappsec.org/mailman/listinfo/wasc-wafec_lists.webappsec.org > -- Ivan Ristić

AM

Alexander Meisel

Tue, Feb 8, 2011 9:28 AM

Hi,

art of defence is in on this too ...
I'll represent the technical contact here

Regards

Alex

On 08.02.11 10:02, Ivan Ristic wrote:

I too will contribute.

Yes, we did make some progress on WAFEC2 back then. There was a push
to formalize the criteria, which would make it easier to evaluate
products.

Here are some of the documents I have:

WAFEC2 Section 1: Deployment
http://docs.google.com/View?id=dcx2fmgk_58gxng6qhm

WAF Deployment Method Capabilities Matrix
http://docs.google.com/View?id=dcx2fmgk_67cf3dtvg9

WAFEC2 Section 5: Logging
http://docs.google.com/View?id=dcx2fmgk_3g9gw47

On Mon, Feb 7, 2011 at 7:44 PM, Ido Breger I.Breger@f5.com wrote:

Hi Thorsten,
I will represent F5.
BTW,
A while back, Ofer started to draft the 2nd version, we actually made some progress.
I just can't find that work anymore (outlook data files corruption...)
I remember exchanging a few email with Anton and Ivan so maybe they have a copy...
Cheers,
Ido

Ido Breger | Product Manager, Security
F5
P +972.3.7691500
M1 +1.206.272.6482
www.f5.com
D +972.3.7691504
M2 +972.544.89.1177

-----Original Message-----
From: wasc-wafec-bounces@lists.webappsec.org [mailto:wasc-wafec-bounces@lists.webappsec.org] On Behalf Of Wujek Thorsten [STEIN-IT GmbH]
Sent: Monday, February 07, 2011 9:29 PM
To: wasc-wafec@lists.webappsec.org
Subject: [WASC-WAFEC] WAFEC V2

To all subscribers of this list,

could those of you who want to participate in the WAFEC process please confirm your interest explicitly. It would be nice to get an idea who will attend and plan the ongoing steps.

Thank you in advance.

~Thorsten

Von meinem iPad gesendet
Kleines Gerät, kleine Mails.

wasc-wafec mailing list
wasc-wafec@lists.webappsec.org
http://lists.webappsec.org/mailman/listinfo/wasc-wafec_lists.webappsec.org

--
Alexander Meisel (CTO) - alexander.meisel@artofdefence.com
T:+49 941 604 889 28 M:+49 160 9644 1812 F:+49 941 604 889 837
art of defence GmbH, Bruderwöhrdstr. 15b, 93055 Regensburg, Germany

Hi, art of defence is in on this too ... I'll represent the technical contact here Regards Alex On 08.02.11 10:02, Ivan Ristic wrote: > I too will contribute. > > Yes, we did make some progress on WAFEC2 back then. There was a push > to formalize the criteria, which would make it easier to evaluate > products. > > Here are some of the documents I have: > > WAFEC2 Section 1: Deployment > http://docs.google.com/View?id=dcx2fmgk_58gxng6qhm > > WAF Deployment Method Capabilities Matrix > http://docs.google.com/View?id=dcx2fmgk_67cf3dtvg9 > > WAFEC2 Section 5: Logging > http://docs.google.com/View?id=dcx2fmgk_3g9gw47 > > > On Mon, Feb 7, 2011 at 7:44 PM, Ido Breger <I.Breger@f5.com> wrote: >> Hi Thorsten, >> I will represent F5. >> BTW, >> A while back, Ofer started to draft the 2nd version, we actually made some progress. >> I just can't find that work anymore (outlook data files corruption...) >> I remember exchanging a few email with Anton and Ivan so maybe they have a copy... >> Cheers, >> Ido >> >> >> Ido Breger | Product Manager, Security >> F5 >> P +972.3.7691500 >> M1 +1.206.272.6482 >> www.f5.com >> D +972.3.7691504 >> M2 +972.544.89.1177 >> >> -----Original Message----- >> From: wasc-wafec-bounces@lists.webappsec.org [mailto:wasc-wafec-bounces@lists.webappsec.org] On Behalf Of Wujek Thorsten [STEIN-IT GmbH] >> Sent: Monday, February 07, 2011 9:29 PM >> To: wasc-wafec@lists.webappsec.org >> Subject: [WASC-WAFEC] WAFEC V2 >> >> To all subscribers of this list, >> >> could those of you who want to participate in the WAFEC process please confirm your interest explicitly. It would be nice to get an idea who will attend and plan the ongoing steps. >> >> Thank you in advance. >> >> ~Thorsten >> >> Von meinem iPad gesendet >> Kleines Gerät, kleine Mails. >> >> _______________________________________________ >> wasc-wafec mailing list >> wasc-wafec@lists.webappsec.org >> http://lists.webappsec.org/mailman/listinfo/wasc-wafec_lists.webappsec.org >> _______________________________________________ >> wasc-wafec mailing list >> wasc-wafec@lists.webappsec.org >> http://lists.webappsec.org/mailman/listinfo/wasc-wafec_lists.webappsec.org >> > > > -- Alexander Meisel (CTO) - alexander.meisel@artofdefence.com T:+49 941 604 889 28 M:+49 160 9644 1812 F:+49 941 604 889 837 art of defence GmbH, Bruderwöhrdstr. 15b, 93055 Regensburg, Germany

RB

Ryan Barnett

Tue, Feb 8, 2011 3:13 PM

I will be participating and representing Trustwave where we have two WAFs
(open source ModSecurity and commercial WebDefend).

Also - please add Achim Hoffman to the group mail-list.

Thanks.

-Ryan

Le 7 févr. 2011 à 20:28, "Wujek Thorsten [STEIN-IT GmbH]"
Thorsten.Wujek@stein-edv.de a écrit :

To all subscribers of this list,

could those of you who want to participate in the WAFEC process please
confirm your interest explicitly. It would be nice to get an idea who
will attend and plan the ongoing steps.

Thank you in advance.

~Thorsten

Von meinem iPad gesendet
Kleines Gerät, kleine Mails.

wasc-wafec mailing list
wasc-wafec@lists.webappsec.org

http://lists.webappsec.org/mailman/listinfo/wasc-wafec_lists.webappsec.or
g

wasc-wafec mailing list
wasc-wafec@lists.webappsec.org
http://lists.webappsec.org/mailman/listinfo/wasc-wafec_lists.webappsec.org

I will be participating and representing Trustwave where we have two WAFs (open source ModSecurity and commercial WebDefend). Also - please add Achim Hoffman to the group mail-list. Thanks. -Ryan > >Le 7 févr. 2011 à 20:28, "Wujek Thorsten [STEIN-IT GmbH]" ><Thorsten.Wujek@stein-edv.de> a écrit : > >> To all subscribers of this list, >> >> could those of you who want to participate in the WAFEC process please >>confirm your interest explicitly. It would be nice to get an idea who >>will attend and plan the ongoing steps. >> >> Thank you in advance. >> >> ~Thorsten >> >> Von meinem iPad gesendet >> Kleines Gerät, kleine Mails. >> >> _______________________________________________ >> wasc-wafec mailing list >> wasc-wafec@lists.webappsec.org >> >>http://lists.webappsec.org/mailman/listinfo/wasc-wafec_lists.webappsec.or >>g >_______________________________________________ >wasc-wafec mailing list >wasc-wafec@lists.webappsec.org >http://lists.webappsec.org/mailman/listinfo/wasc-wafec_lists.webappsec.org