301 reputation
1212
bio website owasp.org/index.php/…
location London, United Kingdom
age 39
visits member for 2 years, 10 months
seen Dec 13 at 15:38
Dinis Cruz is a Security Consultant based in London (UK) and specialized in: ASP.NET/J2EE Application Security, Application Security audits and .NET Security Curriculum Development.

For the past years Dinis has focused on the field of Static Source Code analysis, from May 2007 to Dec 2009 he worked as a independent consultant for Ounce Labs (bought by IBM in July 2009) where during active security engagements using Ounce's technology he developed the Open Source codebase which now is the foundation of the OWASP O2 Platform.

Dinis is currently focused on making the O2 Platform the industry standard for consuming, instrumenting and data-sharing between the multiple WebAppSec tools, the Security consultants and the final developers. Dinis is a also active trainer on .Net security having written and delivered courses for IOActive, Foundstone, Intense School and KPMG (at multiple locations including BlackHat), and has delivered a number of presentations and keynote speeches at multiple OWASP and Security related conferences

At OWASP, Dinis is the leader of the OWASP O2 Platform project, member of the OWASP Global Projects, chair of the OWASP Connections Committee and member of the OWASP Board

Jul
2
awarded  Curious
Jun
27
awarded  Famous Question
May
26
awarded  Nice Question
Feb
3
awarded  Yearling
Dec
15
awarded  Scholar
Dec
15
accepted How to fix SSL 2.0 and BEAST on IIS
Dec
6
awarded  Notable Question
Oct
26
awarded  Teacher
Oct
1
awarded  Popular Question
Sep
22
asked Secure Spring FrameworkUser Management
Sep
16
answered Vulnerable java applications
Jun
21
asked How to best present 'Security Vulnerability Feedback' to devs in the IDE (like VisualStudio)
May
11
awarded  Tumbleweed
May
4
asked Is there a spreadsheet/template for Mapping WebServices Authorization Rules?
Apr
30
awarded  Announcer
Apr
30
asked How to fix SSL 2.0 and BEAST on IIS
Feb
6
awarded  Supporter
Feb
6
comment Are .NET WebServices vulnerable to CSRF?
Fair enough, I will :) Thx for the help
Feb
6
comment Are .NET WebServices vulnerable to CSRF?
In terms of the use of ActionScript, that is the only vector that looks like might work, BUT, only if one can set the ContentType to application/json (for example some browsers do allow the manipulation of content type via form submission, BUT only to a set of values (i.e. not to application/json))
Feb
6
awarded  Editor