Why is that? Virtually everyone in the entire industry is contributing to OWASP. Aspect doesn't own it. I'm pretty sure the reason Matasano is on the list is that Matasano's Stephen Ridley works with Dan on the class. Maybe Aspect just doesn't contribute to his class.
Since you go to NWU, you're in Chicago. You should come to Chicago OWASP. Matasano's Mike Tracy coordinates it.
(Backstory for the rest of you: Aspect "sponsors" OWASP in some manner --- I'm not clear on how --- and drama like this is why CitySec has a no sponsors rule.)
They don't own it, true, but they did start it and give it initial funding. If this only counts those who provide direct contribution to the class, that makes sense though.
Since you go to NWU, you're in Chicago. You should come to Chicago OWASP. Matasano's Mike Tracy coordinates it.
I definitely plan to--Shamiq has mentioned it in the past, I think. Full disclosure: the reason I mention it is because I was hired by Jeff Williams as a cross Aspect/OWASP intern my junior year of high school. I, obviously, take no credit for anything, but I do know that Jeff et al did put significant time and money into the project.
I think cutting press releases taking credit for each year's "OWASP Top Ten" is thanks enough for kickstarting a project that is now overwhelmingly driven by people outside of Aspect. I don't know anybody at Aspect, and I have nothing negative to say about their practice, which I am sure is as solid as anyone's, but again: this is why "sponsorship" is such a skeezy concept.
I don't know anyone from Aspect and they haven't contributed to the class in any way.
I'm well aware of OWASP contributions to web security, I'm actually a board member for the NY/NJ chapter (http://www.owasp.org/index.php/NYNJMetro). If I had a good reason to cite them in this instance, then I would.
