The OWASP ModSecurity Core Rule Set (CRS) was a dormant project, when a group of three developers picked it up in 2016. Today, this open source web application firewall project counts 14 active developers, annual sponsoring of over 40K USD and the rules run on over 100Tbit/s. This presentation explains how the new management took over the project and developed it in three key areas: (1) the code, (2) the developers and (3) the users and partners. The growth of OWASP CRS serves as an example how you can grow and mature your project too.

1. Inspirations from a Growing OWASP Project
Never Walk Alone
By @ChrFolini, OWASP CRS Co-Lead

2. Source: XKCD #2347: Dependency

3. Complementary WAF Rule Set • Business Need
Origins of CRS

4. Foundation • Strong Brand • Pain
OWASP Umbrella

5. Experiment • Promising • Essential
The New Idea

6. Usability • Documentation • Power
Vision

7. Corporate Ties • Freedom • Alternative
Disentanglement

9. Developers • Choice • Competition
Market

10. Backgrounds • Resilience • European
Diversity

11. Experience • Pain • Satisfaction
Knowledge

12. Round Table • Innovation • Online Chats
Formalize – But Don’t Formalize

13. Refactoring • Polishing • Aesthetics
Luxury of Perfection

14. Moderating Role • Generosity • Perfectionism
Leadership

15. Cheap • Distracting • Irrelevant
Swag

16. Serious Money • Partnership • Plannable
Sponsors

17. Wandering off • Knowledge • Personal Ties
Retention

18. Review • Remove • Researchers
Quality Assurance

19. Safe Space • Adventure • Friendship
Fun

20. Open • Accessible • Attractive
Transparency

21. Equality • Discussion • Patience
Consensus

22. Developers • Code • Community
Beauty

23. Sources of Photos
● https://unsplash.com/photos/HIKcSp6F3gg
● https://unsplash.com/photos/yxwBJjtgtUs
● https://www.flickr.com/photos/modesrodriguez/51331707503/
● https://unsplash.com/photos/ypyLtW8W1NI
● https://www.flickr.com/photos/realcoolchris/23812863983/
● https://www.flickr.com/photos/saint_george/30015352438/
● https://www.flickr.com/photos/arnaldomedeiros/30490179915
● https://unsplash.com/photos/yUJVHiYZCGQ
https://unsplash.com/photos/BEEyeib-am8
●
● https://www.flickr.com/photos/skosoris/9418117579/
● https://www.flickr.com/photos/omnious100/37166661306/
● https://unsplash.com/photos/kSSC6i5Bnxw
● https://unsplash.com/photos/DAWnMmUSMdU
● https://unsplash.com/photos/UmV2wr-Vbq8
● https://unsplash.com/photos/E4bn9ScilAA
● https://unsplash.com/photos/X45VKpWV7hw