Franziska Bühler
Security Engineer, OWASP CRS Developer, CISSP, CCSP, OPST
Articles and Blog Posts
- Meet the CRS team: Fränzi, the puzzle-loving hard worker with a mission (Author: Alessandro Monachesi) Jan 2023
- Pixi-CRS goes to the Cloud - Part 6 : Summary and Comparison Oct 2020
- Pixi-CRS goes to the Cloud - Part 5 : GitHub Actions Oct 2020
- Pixi-CRS goes to the Cloud - Part 4 : Google Cloud Platform Oct 2020
- Pixi-CRS goes to the Cloud - Part 3 : Microsoft Azure DevOps Oct 2020
- Pixi-CRS goes to the Cloud - Part 2 : Amazon Web Services Sept 2020
- Pixi-CRS goes to the Cloud - Part 1: Intro Sept 2020
- Puzzle Security-Days April 2020 (Co-Author, German) April 2020
- DevSlop’s Pixi-CRS Pipeline Dec 2019
- How the OWASP ModSecurity Core Rule Set protects the vulnerable web application Pixi by OWASP DevSlop Dec 2019
- How the CRS protects the vulnerable web application Pixi by OWASP DevSlop Sep 2019
- What you should know about web application firewall testing May 2019
- Core Rule Set als Teil von DevOps (CI Pipeline) – Teil 2 (German) April 2019
- Der Weg in die IT-Sicherheit – die Story von Franziska Bühler (German) March 2019
- Core Rule Set als Teil von DevOps (CI Pipeline) – Teil 1 (German) Feb 2019
- The Story of Franziska Bühler-Schmocker, Between Web Server Security and Web Application Firewalls Jan 2019
- Core Rule Set Docker Image Dec 2018
- OWASP DevSlop’s journey to TLS and Security Headers Nov 2018
- The Core Rule Set as Part of DevOps (CI pipeline) June 2018
- Disassembling SQLi Rules Nov 2017
Talks
| Title | When | Where | Description |
|---|---|---|---|
| Securing Applications and Managing WAFs at a large scale | Jun 13th 2024 | Kubernetes Community Days Zürich, Switzerland | KCD Zürich |
| WAFs bei der SBB - ein Blick hinter die Kulissen (German) | Jan 24th 2024 | DevOps Meetup Bern, Switzerland | Talk Abstract |
| Wie sich Communities gegenseitig inspirieren (German) | Nov 23rd 2022 | DINAcon Kompakt, Bern, Switzerland | Lightning Talk, Slides |
| CXO Panel - Diversity In Bug Hunting | April 9th 2022 | Nullcon Berlin, Germany | Abstract, Recording |
| Web Application Firewall – Eine Einführung (German) | June 14th 2021 | Guild42.ch, online and Bern, Switzerland | Talk Abstract |
| WAF - Would you like a little more web application security? | canceled | Uphill Conf Mount Gurten, Switzerland | Talk Abstract |
| Web Application Firewall: Friend of your DevOps Pipeline? | Feb 26th 2020 | Developer UnConference, Zurich, Switzerland | Talk Schedule |
| Web Application Firewall: Friend of your DevOps Pipeline? | Feb 11th 2020 | MyDevSecOps, Online | Video |
| Web Application Firewall: Friend of your DevOps Pipeline? | Feb 4th 2020 | ConfigMgmt Camp, Ghent Belgium | Talk Abstract |
| Test Your WAF and Make it Your Friend | Jan 9th 2020 | TestGuild Security Podcast, Online | Link to Episode |
| Web Application Firewall in DevOps | Dec 10th 2019 | German OWASP Day, Karlsruhe Germany | Video in German |
| The Core Rule Set - Crafting a Security focused DevOps Program | Nov 6th 2019 | All Day DevOps, Online | Video with Chaim Sanders |
| Test Your WAF and Make it Your Friend | May 20th 2019 | SecureGuild, Online | Link to Conference, Announcement |
| OWASP ModSecurity Core Rule Set (CRS) | May 10th 2019 | OWASP DevSlop Show, Online | Meetup, Video with Christian Folini |
| Web Application Firewall in DevOps | March 20th 2019 | DevOps Fusion, Zurich, Switzerland | Talk Abstract in German |
| Adding CRS3 and Pixi to CircleCI pipeline | June 2018 | Open Security Summit, London | Talk Abstract |
| WAFs in CI Pipelines (German) | June 18th 2018 | DevOps Meetup Bern, Switzerland | Talk Abstract |
| Web Application Firewall - Friend of your DevOps Chains | May 30th 2018 | Open Cloud Day, Zurich Switzerland | Slides |
| Web Application Firewall - Friend of your DevOps Chains | May 2nd 2018 | DevOpsDays Zurich, Switzerland | Link to Conference/Slides/Video |
Profiles
OWASP Projects
- OWASP CRS
- Role: Developer
- Website: coreruleset.org
- GitHub: CRS GitHub
- OWASP DevSlop
- Role: Team Member 2018 - 2020
- GitHub: DevSlop GitHub
Certifications
- Certified Cloud Security Professional (CCSP) by ISC2, 2024
- Certified Information Systems Security Professional (CISSP) by ISC2, 2021
- Professional Scrum Master I (PSMI), 2017
- OSSTMM Professional Security Tester (OPST) by Isecom, 2011
Education
- BSc in Computer Science with a specialization in IT-Security, 2011
- Computer Scientist with Federal Diploma, 2003