OWASP - User contributions [en]

OWASP Secure Coding Practices - Quick Reference Guide

2013-11-06T03:56:30Z

Keith Turpin:

==== Main ====
== Welcome to the Secure Coding Practices Quick Reference Guide Project ==

The Secure Coding Practices Quick Reference Guide is a technology agnostic set of general software security coding practices, in a comprehensive checklist format, that can be integrated into the development lifecycle. At only 17 pages long, it is easy to read and digest.

The focus is on secure coding requirements, rather then on vulnerabilities and exploits. It includes an introduction to Software Security Principles and a glossary of key terms.

It is designed to serve as a secure coding kick-start tool and easy reference, to help development teams quickly understand secure coding practices.

=== Sections of the Guide: ===

* Table of contents
* Introduction
* Software Security Principles Overview
* Secure Coding Practices Checklist
* Links to useful resources
* Glossary of important terminology

'''Download the current v2 (Stable) release:'''

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.pdf English version PDF]

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.doc English version MS Word]

'''Translations:'''

[https://www.owasp.org/images/b/b3/OWASP_SCP_v1.3_pt-BR.pdf Brazilian Portuguese Translation PDF]

[https://www.owasp.org/images/6/6d/OWASP_SCP_v1.3_pt-PT.pdf Portugal Portuguese Translation PDF]

[https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf Korean Translation PDF]

[http://www.owasp.org/images/c/c8/OWASP_SCP_Quick_Reference_Guide_SPA.doc Spanish Translation doc]

[https://www.owasp.org/images/7/73/OWASP_SCP_Quick_Reference_Guide_%28Chinese%29.pdf Chinese Translation PDF]

'''Related Presentations:''' 
This slide deck incorporates many concepts from the Quick reference guide, but also utilizes other OWASP resources. 
[https://www.owasp.org/images/b/ba/Web_Application_Development_Dos_and_Donts.ppt Web Application Development Dos and Donts - Presentation from the Royal Bank of Scotland]

'''Project Feedback and Disposition History'''

[http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls XLS Feedback Spreadsheet]

----
== Feedback and Participation: ==

I hope you find the OWASP Secure Coding Practices Quick Reference Guide Project useful. Please contribute to the Project by sending your comments, questions, and suggestions to [mailto:Keith.Turpin@owasp.org keith.turpin@owasp.org].

Project mailing list and archives:
[https://lists.owasp.org/mailman/listinfo/owasp-secure-coding-practices subscription page.]

----
== Project Contributors: ==

If you contribute to this Project, please add your name here 
'''Project Lead:'''
* [[user:Keith Turpin|Keith Turpin]]

'''Contributors:''' 
* Dan Kranz
* Walt Pietrowski
* Catherine Spencer
* [mailto:Caleb.mcgary@gmail.com Caleb McGary]
* [mailto:bradcausey@owasp.org Brad Causey]
* [mailto:ludovic.petit@owasp.org Ludovic Petit]
* [mailto:michael.scovetta@gmail.com Michael V. Scovetta]
* [mailto:jim.manico@owasp.org Jim Manico]
* Jason Coleman
* [mailto:anurag.agarwal@yahoo.com Anurag Agarwal]
* [mailto:petand@lvk.cs.msu.su Andrew Petukhov]
 
'''Translation Contributors''' 
'''Portuguese Translation''' 
* [mailto:tarciziovn@gmail.com Tarcizio Vieira Neto]
* [mailto:silviofilhosf@gmail.com Sílvio Correia Filho]
* [mailto:leandrock@gmail.com Leandro Gomes]
'''Korean Translation''' 
* OWASP Korea chapter
'''Spanish Translation''' 
* Canedo,Gerardo
* Flores,Mauro
* Hill,Alberto
* Martinez,Mateo
* Papaleo,Mauricio
* Soarez,Nicolás
* Targetta, Cecilia
'''Chinese Translation''' 
* [mailto:wangj@owasp.org.cn Jie Wang]
* Yongliang He
* Henghui Lin

==== Project About ====
{{:Projects/OWASP Secure Coding Practices - Quick Reference Guide | Project About}}

__NOTOC__ <headertabs />

[[Category:OWASP_Project|Secure Coding Practices - Quick Reference Guide]] [[Category:OWASP_Document]] [[Category:OWASP_Download]] [[Category:OWASP_Release_Quality_Document|OWASP Release Quality Document]]

OWASP Secure Coding Practices - Quick Reference Guide

2013-11-06T03:45:58Z

Keith Turpin:

==== Main ====
== Welcome to the Secure Coding Practices Quick Reference Guide Project ==

The Secure Coding Practices Quick Reference Guide is a technology agnostic set of general software security coding practices, in a comprehensive checklist format, that can be integrated into the development lifecycle. At only 17 pages long, it is easy to read and digest.

The focus is on secure coding requirements, rather then on vulnerabilities and exploits. It includes an introduction to Software Security Principles and a glossary of key terms.

It is designed to serve as a secure coding kick-start tool and easy reference, to help development teams quickly understand secure coding practices.

=== Sections of the Guide: ===

* Table of contents
* Introduction
* Software Security Principles Overview
* Secure Coding Practices Checklist
* Links to useful resources
* Glossary of important terminology

'''Download the current v2 (Stable) release:'''

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.pdf English version PDF]

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.doc English version MS Word]

'''Translations:'''

[https://www.owasp.org/images/b/b3/OWASP_SCP_v1.3_pt-BR.pdf Brazilian Portuguese Translation PDF]

[https://www.owasp.org/images/6/6d/OWASP_SCP_v1.3_pt-PT.pdf Portugal Portuguese Translation PDF]

[https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf Korean Translation PDF]

[http://www.owasp.org/images/c/c8/OWASP_SCP_Quick_Reference_Guide_SPA.doc Spanish Translation doc]

[https://www.owasp.org/images/7/73/OWASP_SCP_Quick_Reference_Guide_%28Chinese%29.pdf Chinese Translation PDF]

'''Related Presentations:'''

[https://www.owasp.org/images/b/ba/Web_Application_Development_Dos_and_Donts.ppt Web Application Development Dos and Donts - Presentation from the Royal Bank of Scotland]

'''Project Feedback and Disposition History'''

[http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls XLS Feedback Spreadsheet]

----
== Feedback and Participation: ==

I hope you find the OWASP Secure Coding Practices Quick Reference Guide Project useful. Please contribute to the Project by sending your comments, questions, and suggestions to [mailto:Keith.Turpin@owasp.org keith.turpin@owasp.org].

Project mailing list and archives:
[https://lists.owasp.org/mailman/listinfo/owasp-secure-coding-practices subscription page.]

----
== Project Contributors: ==

If you contribute to this Project, please add your name here 
'''Project Lead:'''
* [[user:Keith Turpin|Keith Turpin]]

'''Contributors:''' 
* Dan Kranz
* Walt Pietrowski
* Catherine Spencer
* [mailto:Caleb.mcgary@gmail.com Caleb McGary]
* [mailto:bradcausey@owasp.org Brad Causey]
* [mailto:ludovic.petit@owasp.org Ludovic Petit]
* [mailto:michael.scovetta@gmail.com Michael V. Scovetta]
* [mailto:jim.manico@owasp.org Jim Manico]
* Jason Coleman
* [mailto:anurag.agarwal@yahoo.com Anurag Agarwal]
* [mailto:petand@lvk.cs.msu.su Andrew Petukhov]
 
'''Translation Contributors''' 
'''Portuguese Translation''' 
* [mailto:tarciziovn@gmail.com Tarcizio Vieira Neto]
* [mailto:silviofilhosf@gmail.com Sílvio Correia Filho]
* [mailto:leandrock@gmail.com Leandro Gomes]
'''Korean Translation''' 
* OWASP Korea chapter
'''Spanish Translation''' 
* Canedo,Gerardo
* Flores,Mauro
* Hill,Alberto
* Martinez,Mateo
* Papaleo,Mauricio
* Soarez,Nicolás
* Targetta, Cecilia
'''Chinese Translation''' 
* [mailto:wangj@owasp.org.cn Jie Wang]
* Yongliang He
* Henghui Lin

==== Project About ====
{{:Projects/OWASP Secure Coding Practices - Quick Reference Guide | Project About}}

__NOTOC__ <headertabs />

[[Category:OWASP_Project|Secure Coding Practices - Quick Reference Guide]] [[Category:OWASP_Document]] [[Category:OWASP_Download]] [[Category:OWASP_Release_Quality_Document|OWASP Release Quality Document]]

OWASP Secure Coding Practices - Quick Reference Guide

2013-11-06T03:44:25Z

Keith Turpin:

==== Main ====
== Welcome to the Secure Coding Practices Quick Reference Guide Project ==

The Secure Coding Practices Quick Reference Guide is a technology agnostic set of general software security coding practices, in a comprehensive checklist format, that can be integrated into the development lifecycle. At only 17 pages long, it is easy to read and digest.

The focus is on secure coding requirements, rather then on vulnerabilities and exploits. It includes an introduction to Software Security Principles and a glossary of key terms.

It is designed to serve as a secure coding kick-start tool and easy reference, to help development teams quickly understand secure coding practices.

=== Sections of the Guide: ===

* Table of contents
* Introduction
* Software Security Principles Overview
* Secure Coding Practices Checklist
* Links to useful resources
* Glossary of important terminology

'''Download the current v2 (Stable) release:'''

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.pdf English version PDF]

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.doc English version MS Word]

'''Related Presentations:'''

[https://www.owasp.org/images/b/ba/Web_Application_Development_Dos_and_Donts.ppt Web Application Development Dos and Donts - Presentation from the Royal Bank of Scotland]

'''Translations:'''

[https://www.owasp.org/images/b/b3/OWASP_SCP_v1.3_pt-BR.pdf Brazilian Portuguese Translation PDF]

[https://www.owasp.org/images/6/6d/OWASP_SCP_v1.3_pt-PT.pdf Portugal Portuguese Translation PDF]

[https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf Korean Translation PDF]

[http://www.owasp.org/images/c/c8/OWASP_SCP_Quick_Reference_Guide_SPA.doc Spanish Translation doc]

[https://www.owasp.org/images/7/73/OWASP_SCP_Quick_Reference_Guide_%28Chinese%29.pdf Chinese Translation PDF]

'''Project Feedback and Disposition History'''

[http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls XLS Feedback Spreadsheet]

----
== Feedback and Participation: ==

I hope you find the OWASP Secure Coding Practices Quick Reference Guide Project useful. Please contribute to the Project by sending your comments, questions, and suggestions to [mailto:Keith.Turpin@owasp.org keith.turpin@owasp.org].

Project mailing list and archives:
[https://lists.owasp.org/mailman/listinfo/owasp-secure-coding-practices subscription page.]

----
== Project Contributors: ==

If you contribute to this Project, please add your name here 
'''Project Lead:'''
* [[user:Keith Turpin|Keith Turpin]]

'''Contributors:''' 
* Dan Kranz
* Walt Pietrowski
* Catherine Spencer
* [mailto:Caleb.mcgary@gmail.com Caleb McGary]
* [mailto:bradcausey@owasp.org Brad Causey]
* [mailto:ludovic.petit@owasp.org Ludovic Petit]
* [mailto:michael.scovetta@gmail.com Michael V. Scovetta]
* [mailto:jim.manico@owasp.org Jim Manico]
* Jason Coleman
* [mailto:anurag.agarwal@yahoo.com Anurag Agarwal]
* [mailto:petand@lvk.cs.msu.su Andrew Petukhov]
 
'''Translation Contributors''' 
'''Portuguese Translation''' 
* [mailto:tarciziovn@gmail.com Tarcizio Vieira Neto]
* [mailto:silviofilhosf@gmail.com Sílvio Correia Filho]
* [mailto:leandrock@gmail.com Leandro Gomes]
'''Korean Translation''' 
* OWASP Korea chapter
'''Spanish Translation''' 
* Canedo,Gerardo
* Flores,Mauro
* Hill,Alberto
* Martinez,Mateo
* Papaleo,Mauricio
* Soarez,Nicolás
* Targetta, Cecilia
'''Chinese Translation''' 
* [mailto:wangj@owasp.org.cn Jie Wang]
* Yongliang He
* Henghui Lin

==== Project About ====
{{:Projects/OWASP Secure Coding Practices - Quick Reference Guide | Project About}}

__NOTOC__ <headertabs />

[[Category:OWASP_Project|Secure Coding Practices - Quick Reference Guide]] [[Category:OWASP_Document]] [[Category:OWASP_Download]] [[Category:OWASP_Release_Quality_Document|OWASP Release Quality Document]]

File:Web Application Development Dos and Donts.ppt

2013-11-06T03:39:46Z

Keith Turpin: This slide deck incorporates many concepts from the Quick reference guide, but also utilizes other OWASP resources. It has been created to highlight common secure web application development best practice efforts, but also detail where and how coding e...

This slide deck incorporates many concepts from the Quick reference guide, but also utilizes other OWASP resources. It has been created to highlight common secure web application development best practice efforts, but also detail where and how coding errors are made and how they can be avoided.

Do’s and Don’ts examples throughout the slide pack have been grouped by vulnerability categories.

User:Nishi Kumar

2012-06-06T21:46:27Z

Keith Turpin:

Nishi Kumar's Bio:
 

Nishi Kumar IT Architect Specialist, FIS

Nishi Kumar is an Architect with 20 years of broad industry experience. She is part of OWASP Global Industry Committee and project lead for OWASP CBT (Computer based training) project. She is a committed contributor of OWASP. She has spearheaded Secure Code Initiative program in FIS Electronics Payment division. As part of that program, she has delivered OWASP based training to management and development teams to various groups in FIS. She has been involved with PA-DSS certification of several applications in FIS. Since joining FIS in 2004 she has worked as an architect and team lead for several financial payment and fraud applications. She has hands-on accomplishments in design, development and deployment of complex software systems on a variety of platforms.

Prior to joining FIS Nishi Kumar has worked for Pavilion, HNC, Fair Isaac, Trajecta, Nationwide Insurance and Data Junction as Senior Software Engineer, Architect and in Project Management roles.

Nishi can be reached at: nishi787(at)hotmail.com
[mailto:Nishi.Kumar@owasp.org email address] and [[:Special:Contributions/Nishi Kumar|wiki contributions]].

My hobby is oil painting. You can see some of my work from [http://www.creativesolve.com Nishi's Art Gallery]

Projects/OWASP Secure Coding Practices - Quick Reference Guide

2012-05-10T15:37:08Z

Keith Turpin:

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Project About</noinclude>
| project_name = OWASP Secure Coding Practices - Quick Reference Guide
| project_home_page = :OWASP Secure Coding Practices - Quick Reference Guide

| project_description =

This document provides a quick high level reference for secure coding practices. It is technology agnostic and defines a set of general software security coding practices, in a checklist format, that can be integrated into the development lifecycle. Implementation of these practices will mitigate most common software vulnerabilities.

| project_license = [http://creativecommons.org/licenses/by-sa/3.0/ '''Creative Commons Attribution Share Alike 3.0''']

| leader_name1 = Keith Turpin
| leader_email1 = keith.turpin@owasp.org
| leader_username1 = Keith Turpin

| contributor_name1 = Dan Kranz
| contributor_email1 =
| contributor_username1 =

| contributor_name2 = Walt Pietrowski
| contributor_email2 =
| contributor_username2 =

| contributor_name3 = Catherine Spencer
| contributor_email3 =
| contributor_username3 =

| contributor_name4 = Caleb McGary
| contributor_email4 = Caleb.mcgary@gmail.com
| contributor_username4 =

| contributor_name5 = Jim Manico
| contributor_email5 = jim.manico@owasp.org
| contributor_username5 = Jmanico

| contributor_name6 = Brad Causey
| contributor_email6 = bradcausey@owasp.org
| contributor_username6 = Bradcausey

| contributor_name7 = Ludovic Petit
| contributor_email7 = ludovic.petit@owasp.org
| contributor_username7 = Ludovic Petit

| contributor_name8 = Michael V. Scovetta
| contributor_email8 = michael.scovetta@gmail.com
| contributor_username8 =

| contributor_name9 = Jason Coleman
| contributor_email9 =
| contributor_username9 =

| contributor_name10 = Tarcizio Vieira Neto
| contributor_email10 =
| contributor_username10 =

| contributor_name11 = OWASP Korea chapter
| contributor_email11 =
| contributor_username11 =

| pamphlet_link = http://www.owasp.org/images/3/35/Flyer_Secure_Coding_Practices_Quick_Reference_Guide_V2.pdf

| presentation_link = https://www.owasp.org/images/f/fd/Secure_Coding_Practices_Quick_Ref_6.ppt

| mailing_list_name = https://lists.owasp.org/mailman/listinfo/owasp-secure-coding-practices

| project_road_map = http://www.owasp.org/index.php/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide/Roadmap

| links_url1 = http://vimeo.com/17018329
| links_name1 = Video - Keith Turpin presenting the Quick Reference Guide on OWASP AppSec USA 2010

| links_url2 = https://www.owasp.org/images/b/b3/OWASP_SCP_v1.3_pt-BR.pdf
| links_name2 = SCP v2 > Brazilian Portuguese Translation > PDF file

| links_url3 = https://www.owasp.org/images/6/6d/OWASP_SCP_v1.3_pt-PT.pdf
| links_name3 = SCP v2 > Portugal Portuguese Translation > PDF file

| links_url4 = https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf
| links_name4 = SCP v2 > Korean Translation > PDF file

| links_url5 = http://www.owasp.org/images/c/c8/OWASP_SCP_Quick_Reference_Guide_SPA.doc
| links_name5 = SCP v2 > Spanish Translation > doc file

| release_1 = SCP v1

| release_2 = SCP v1.1

| release_3 = SCP v2

| release_4 =

| project_about_page = Projects/OWASP Secure Coding Practices - Quick Reference Guide
}}

Projects/OWASP Secure Coding Practices - Quick Reference Guide

2012-02-28T02:31:23Z

Keith Turpin:

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Project About</noinclude>
| project_name = OWASP Secure Coding Practices - Quick Reference Guide
| project_home_page = :OWASP Secure Coding Practices - Quick Reference Guide

| project_description =

This document provides a quick high level reference for secure coding practices. It is technology agnostic and defines a set of general software security coding practices, in a checklist format, that can be integrated into the development lifecycle. Implementation of these practices will mitigate most common software vulnerabilities.

| project_license = [http://creativecommons.org/licenses/by-sa/3.0/ '''Creative Commons Attribution Share Alike 3.0''']

| leader_name1 = Keith Turpin
| leader_email1 = keith.turpin@owasp.org
| leader_username1 = Keith Turpin

| contributor_name1 = Dan Kranz
| contributor_email1 =
| contributor_username1 =

| contributor_name2 = Walt Pietrowski
| contributor_email2 =
| contributor_username2 =

| contributor_name3 = Catherine Spencer
| contributor_email3 =
| contributor_username3 =

| contributor_name4 = Caleb McGary
| contributor_email4 = Caleb.mcgary@gmail.com
| contributor_username4 =

| contributor_name5 = Jim Manico
| contributor_email5 = jim.manico@owasp.org
| contributor_username5 = Jmanico

| contributor_name6 = Brad Causey
| contributor_email6 = bradcausey@owasp.org
| contributor_username6 = Bradcausey

| contributor_name7 = Ludovic Petit
| contributor_email7 = ludovic.petit@owasp.org
| contributor_username7 = Ludovic Petit

| contributor_name8 = Michael V. Scovetta
| contributor_email8 = michael.scovetta@gmail.com
| contributor_username8 =

| contributor_name9 = Jason Coleman
| contributor_email9 =
| contributor_username9 =

| contributor_name10 = Tarcizio Vieira Neto
| contributor_email10 =
| contributor_username10 =

| contributor_name11 = OWASP Korea chapter
| contributor_email11 =
| contributor_username11 =

| pamphlet_link = http://www.owasp.org/images/3/35/Flyer_Secure_Coding_Practices_Quick_Reference_Guide_V2.pdf

| presentation_link = https://www.owasp.org/images/f/fd/Secure_Coding_Practices_Quick_Ref_6.ppt

| mailing_list_name = https://lists.owasp.org/mailman/listinfo/owasp-secure-coding-practices

| project_road_map = http://www.owasp.org/index.php/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide/Roadmap

| links_url1 = http://vimeo.com/17018329
| links_name1 = Video - Keith Turpin preseting the Quick Reference Guide on OWASP AppSec USA 2010

| links_url2 = https://www.owasp.org/images/b/b3/OWASP_SCP_v1.3_pt-BR.pdf
| links_name2 = SCP v2 > Brazilian Portuguese Translation > PDF file

| links_url3 = https://www.owasp.org/images/6/6d/OWASP_SCP_v1.3_pt-PT.pdf
| links_name3 = SCP v2 > Portugal Portuguese Translation > PDF file

| links_url4 = https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf
| links_name4 = SCP v2 > Korean Translation > PDF file

| links_url5 = http://www.owasp.org/images/c/c8/OWASP_SCP_Quick_Reference_Guide_SPA.doc
| links_name5 = SCP v2 > Spanish Translation > doc file

| release_1 = SCP v1

| release_2 = SCP v1.1

| release_3 = SCP v2

| release_4 =

| project_about_page = Projects/OWASP Secure Coding Practices - Quick Reference Guide
}}

Projects/OWASP Secure Coding Practices - Quick Reference Guide/Releases/SCP v2

2012-02-28T02:27:27Z

Keith Turpin:

{{Template: <includeonly>{{{1}}}</includeonly><noinclude>Release About</noinclude>
| project_name = OWASP Secure Coding Practices - Quick Reference Guide
| project_home_page = :OWASP Secure Coding Practices - Quick Reference Guide

| release_name = SCP v2
| release_date = 8 November 2010
| release_download_link = http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.pdf

| release_description =

*Now available in Portuguese: [http://www.owasp.org/images/d/d8/OWASP_SCP_Quick_Reference_PT-BR_v1.1.pdf Updated Portuguese Version PDF]

*Sections of the guide were re-ordered, renamed and new sections were added to map more closely to the ASVS. However input and output handling was left at the beginning, as apposed to be lower in the list as it is with ASVS, since this is the source of the most common vulnerabilities and ones that effect even very simple applications.
*Entirely new sections include:
**Cryptographic Practices,
**Error Handling and Logging".
*The guide's "Data Validation" section was split to match ASVS and is now represented as two separate sections "Input Validation" and "Output Encoding",
*The guide's "Authorization and Access Management" section was renamed to Access Control,
*The guide's "Sensitive Information Storage or Transmission" section was split to match ASVS and is now two new sections "Data Protection" and "Communication Security",
*Additional practices were added to most sections to account for requirements in ASVS that the guide did not specifically cover and some rewording of existing practices was also done.
*Additional terms were added to the glossary.
*Several improvements were made thanks to new contributors.

| release_license = [http://creativecommons.org/licenses/by-sa/3.0/ '''Creative Commons Attribution Share Alike 3.0''']

| leader_name1 = Keith Turpin
| leader_email1 = keith.n.turpin@boeing.com
| leader_username1 = Keith Turpin

| contributor_name1 = Brad Causey (As GPC's Reviewer)
| contributor_email1 = bradcausey@owasp.org
| contributor_username1 = Bradcausey

| contributor_name2 = Anurag Agarwal (As peer Reviewer)
| contributor_email2 = anurag.agarwal@yahoo.com
| contributor_username2 =

| contributor_name3 = Andrew Petukhov
| contributor_email3 = petand@lvk.cs.msu.su
| contributor_username3 = Petand

| contributor_name4 = Jason Coleman
| contributor_email4 =
| contributor_username4 =

| contributor_name5 = Leandro Gomes (as Portuguese Translator)
| contributor_email5 = leandrock@gmail.com
| contributor_username5 =

| contributor_name6 = Sílvio Correia Filho (as Portuguese Translator)
| contributor_email6 = silviofilhosf@gmail.com
| contributor_username6 =

| contributor_name7 = Tarcizio Vieira Neto (as Portuguese Translator)
| contributor_email7 = tarciziovn@gmail.com
| contributor_username7 =

| contributor_name8 = Canedo,Gerardo (as Spanish Translator)

| contributor_name9 = Flores,Mauro (as Spanish Translator)

| contributor_name10 = Hill,Alberto (as Spanish Translator)

| contributor_name11 = Martinez,Mateo (as Spanish Translator)

| contributor_name12 = Papaleo,Mauricio (as Spanish Translator)

| contributor_name13 = Soarez,Nicolás (as Spanish Translator)

| contributor_name14 = Targetta, Cecilia (as Spanish Translator)

| release_notes = http://www.owasp.org/index.php/Projects/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide/Releases/SCP_v2/Notes

| links_url1 = http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.doc
| links_name1 = SCP v2 > English Version > Word file

| links_url2 = https://www.owasp.org/images/b/b3/OWASP_SCP_v1.3_pt-BR.pdf
| links_name2 = SCP v2 > Brazilian Portuguese Translation > Pdf file

| links_url3 = https://www.owasp.org/images/6/6d/OWASP_SCP_v1.3_pt-PT.pdf
| links_name3 = SCP v2 > Portugal Portuguese Translation > Pdf file

| links_url4 = https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf
| links_name4 = SCP v2 > Korean Translation > Pdf file

| links_url5 = http://www.owasp.org/images/c/c8/OWASP_SCP_Quick_Reference_Guide_SPA.doc
| links_name5 = SCP v2 > Spanish Translation > doc file

| links_url6 = http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls
| links_name6 = Secure coding guide assessment feedback disposition

| links_url7 = http://www.owasp.org/index.php/GPC_Project_Assessment/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide_-_SCP_v2
| links_name7 = Assessment Control/Progress and Links

}}

OWASP Secure Coding Practices - Quick Reference Guide

2012-02-28T02:23:21Z

Keith Turpin:

==== Main ====
== Welcome to the Secure Coding Practices Quick Reference Guide Project ==

The Secure Coding Practices Quick Reference Guide is a technology agnostic set of general software security coding practices, in a comprehensive checklist format, that can be integrated into the development lifecycle. At only 17 pages long, it is easy to read and digest.

The focus is on secure coding requirements, rather then on vulnerabilities and exploits. It includes an introduction to Software Security Principles and a glossary of key terms.

It is designed to serve as a secure coding kick-start tool and easy reference, to help development teams quickly understand secure coding practices.

=== Sections of the Guide: ===

* Table of contents
* Introduction
* Software Security Principles Overview
* Secure Coding Practices Checklist
* Links to useful resources
* Glossary of important terminology

'''Download the current v2 (Stable) release:'''

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.pdf English version PDF]

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.doc English version MS Word]

'''Translations:'''

[https://www.owasp.org/images/b/b3/OWASP_SCP_v1.3_pt-BR.pdf Brazilian Portuguese Translation PDF]

[https://www.owasp.org/images/6/6d/OWASP_SCP_v1.3_pt-PT.pdf Portugal Portuguese Translation PDF]

[https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf Korean Translation PDF]

[http://www.owasp.org/images/c/c8/OWASP_SCP_Quick_Reference_Guide_SPA.doc Spanish Translation doc]

'''Project Feedback and Disposition History'''

[http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls XLS Feedback Spreadsheet]

----
== Feedback and Participation: ==

I hope you find the OWASP Secure Coding Practices Quick Reference Guide Project useful. Please contribute to the Project by sending your comments, questions, and suggestions to [mailto:Keith.Turpin@owasp.org keith.turpin@owasp.org].

Project mailing list and archives:
[https://lists.owasp.org/mailman/listinfo/owasp-secure-coding-practices subscription page.]

----
== Project Contributors: ==

If you contribute to this Project, please add your name here 
'''Project Lead:'''
* [[user:Keith Turpin|Keith Turpin]]

'''Contributors:''' 
* Dan Kranz
* Walt Pietrowski
* Catherine Spencer
* [mailto:Caleb.mcgary@gmail.com Caleb McGary]
* [mailto:bradcausey@owasp.org Brad Causey]
* [mailto:ludovic.petit@owasp.org Ludovic Petit]
* [mailto:michael.scovetta@gmail.com Michael V. Scovetta]
* [mailto:jim.manico@owasp.org Jim Manico]
* Jason Coleman
* [mailto:anurag.agarwal@yahoo.com Anurag Agarwal]
* [mailto:petand@lvk.cs.msu.su Andrew Petukhov]
 
'''Translation Contributors''' 
'''Portuguese Translation''' 
* [mailto:tarciziovn@gmail.com Tarcizio Vieira Neto]
* [mailto:silviofilhosf@gmail.com Sílvio Correia Filho]
* [mailto:leandrock@gmail.com Leandro Gomes]
'''Korean Translation''' 
* OWASP Korea chapter
'''Spanish Translation''' 
* Canedo,Gerardo
* Flores,Mauro
* Hill,Alberto
* Martinez,Mateo
* Papaleo,Mauricio
* Soarez,Nicolás
* Targetta, Cecilia

==== Project About ====
{{:Projects/OWASP Secure Coding Practices - Quick Reference Guide | Project About}}

__NOTOC__ <headertabs />

[[Category:OWASP_Project|Secure Coding Practices - Quick Reference Guide]] [[Category:OWASP_Document]] [[Category:OWASP_Download]] [[Category:OWASP_Release_Quality_Document|OWASP Release Quality Document]]

OWASP Secure Coding Practices - Quick Reference Guide

2012-02-28T02:04:32Z

Keith Turpin:

==== Main ====
== Welcome to the Secure Coding Practices Quick Reference Guide Project ==

The Secure Coding Practices Quick Reference Guide is a technology agnostic set of general software security coding practices, in a comprehensive checklist format, that can be integrated into the development lifecycle. At only 17 pages long, it is easy to read and digest.

The focus is on secure coding requirements, rather then on vulnerabilities and exploits. It includes an introduction to Software Security Principles and a glossary of key terms.

It is designed to serve as a secure coding kick-start tool and easy reference, to help development teams quickly understand secure coding practices.

=== Sections of the Guide: ===

* Table of contents
* Introduction
* Software Security Principles Overview
* Secure Coding Practices Checklist
* Links to useful resources
* Glossary of important terminology

'''Download the current v2 (Stable) release:'''

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.pdf English version PDF]

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.doc English version MS Word]

'''Translations:'''

[http://www.owasp.org/images/d/d8/OWASP_SCP_Quick_Reference_PT-BR_v1.1.pdf Updated Portuguese Translation PDF]

[https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf Korean Translation PDF]

[http://www.owasp.org/images/c/c8/OWASP_SCP_Quick_Reference_Guide_SPA.doc Spanish Translation doc]

'''Project Feedback and Disposition History'''

[http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls XLS Feedback Spreadsheet]

----
== Feedback and Participation: ==

I hope you find the OWASP Secure Coding Practices Quick Reference Guide Project useful. Please contribute to the Project by sending your comments, questions, and suggestions to [mailto:Keith.Turpin@owasp.org keith.turpin@owasp.org].

Project mailing list and archives:
[https://lists.owasp.org/mailman/listinfo/owasp-secure-coding-practices subscription page.]

----
== Project Contributors: ==

If you contribute to this Project, please add your name here 
'''Project Lead:'''
* [[user:Keith Turpin|Keith Turpin]]

'''Contributors:''' 
* Dan Kranz
* Walt Pietrowski
* Catherine Spencer
* [mailto:Caleb.mcgary@gmail.com Caleb McGary]
* [mailto:bradcausey@owasp.org Brad Causey]
* [mailto:ludovic.petit@owasp.org Ludovic Petit]
* [mailto:michael.scovetta@gmail.com Michael V. Scovetta]
* [mailto:jim.manico@owasp.org Jim Manico]
* Jason Coleman
* [mailto:anurag.agarwal@yahoo.com Anurag Agarwal]
* [mailto:petand@lvk.cs.msu.su Andrew Petukhov]
 
'''Translation Contributors''' 
'''Portuguese Translation''' 
* [mailto:tarciziovn@gmail.com Tarcizio Vieira Neto]
* [mailto:silviofilhosf@gmail.com Sílvio Correia Filho]
* [mailto:leandrock@gmail.com Leandro Gomes]
'''Korean Translation''' 
* OWASP Korea chapter
'''Spanish Translation''' 
* Canedo,Gerardo
* Flores,Mauro
* Hill,Alberto
* Martinez,Mateo
* Papaleo,Mauricio
* Soarez,Nicolás
* Targetta, Cecilia

==== Project About ====
{{:Projects/OWASP Secure Coding Practices - Quick Reference Guide | Project About}}

__NOTOC__ <headertabs />

[[Category:OWASP_Project|Secure Coding Practices - Quick Reference Guide]] [[Category:OWASP_Document]] [[Category:OWASP_Download]] [[Category:OWASP_Release_Quality_Document|OWASP Release Quality Document]]

OWASP Secure Coding Practices - Quick Reference Guide

2012-01-07T23:02:14Z

Keith Turpin:

==== Main ====
== Welcome to the Secure Coding Practices Quick Reference Guide Project ==

'''NEW Release:''' version 2.0 published November 9th.

The Secure Coding Practices Quick Reference Guide is a technology agnostic set of general software security coding practices, in a comprehensive checklist format, that can be integrated into the development lifecycle. At only 17 pages long, it is easy to read and digest.

The focus is on secure coding requirements, rather then on vulnerabilities and exploits. It includes an introduction to Software Security Principles and a glossary of key terms.

It is designed to serve as a secure coding kick-start tool and easy reference, to help development teams quickly understand secure coding practices.

=== Sections of the Guide: ===

* Table of contents
* Introduction
* Software Security Principles Overview
* Secure Coding Practices Checklist
* Links to useful resources
* Glossary of important terminology

'''Download the current v2 (Stable) release:'''

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.pdf English version PDF]

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.doc English version MS Word]

'''Translations:'''

[http://www.owasp.org/images/d/d8/OWASP_SCP_Quick_Reference_PT-BR_v1.1.pdf Updated Portuguese Translation PDF]

[https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf Korean Translation PDF]

[http://www.owasp.org/images/c/c8/OWASP_SCP_Quick_Reference_Guide_SPA.doc Spanish Translation doc]

'''Project Feedback and Disposition History'''

[http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls XLS Feedback Spreadsheet]

----
== Feedback and Participation: ==

I hope you find the OWASP Secure Coding Practices Quick Reference Guide Project useful. Please contribute to the Project by sending your comments, questions, and suggestions to [mailto:Keith.Turpin@owasp.org keith.turpin@owasp.org].

Project mailing list and archives:
[https://lists.owasp.org/mailman/listinfo/owasp-secure-coding-practices subscription page.]

----
== Project Contributors: ==

If you contribute to this Project, please add your name here 
'''Project Lead:'''
* [[user:Keith Turpin|Keith Turpin]]

'''Contributors:''' 
* Dan Kranz
* Walt Pietrowski
* Catherine Spencer
* [mailto:Caleb.mcgary@gmail.com Caleb McGary]
* [mailto:bradcausey@owasp.org Brad Causey]
* [mailto:ludovic.petit@owasp.org Ludovic Petit]
* [mailto:michael.scovetta@gmail.com Michael V. Scovetta]
* [mailto:jim.manico@owasp.org Jim Manico]
* Jason Coleman
* [mailto:anurag.agarwal@yahoo.com Anurag Agarwal]
* [mailto:petand@lvk.cs.msu.su Andrew Petukhov]
 
'''Translation Contributors''' 
'''Portuguese Translation''' 
* [mailto:tarciziovn@gmail.com Tarcizio Vieira Neto]
* [mailto:silviofilhosf@gmail.com Sílvio Correia Filho]
* [mailto:leandrock@gmail.com Leandro Gomes]
'''Korean Translation''' 
* OWASP Korea chapter
'''Spanish Translation''' 
* Canedo,Gerardo
* Flores,Mauro
* Hill,Alberto
* Martinez,Mateo
* Papaleo,Mauricio
* Soarez,Nicolás
* Targetta, Cecilia

==== Project About ====
{{:Projects/OWASP Secure Coding Practices - Quick Reference Guide | Project About}}

__NOTOC__ <headertabs />

[[Category:OWASP_Project|Secure Coding Practices - Quick Reference Guide]] [[Category:OWASP_Document]] [[Category:OWASP_Download]] [[Category:OWASP_Release_Quality_Document|OWASP Release Quality Document]]

Projects/OWASP Secure Coding Practices - Quick Reference Guide/Releases/SCP v2

2012-01-07T23:00:47Z

Keith Turpin:

{{Template: <includeonly>{{{1}}}</includeonly><noinclude>Release About</noinclude>
| project_name = OWASP Secure Coding Practices - Quick Reference Guide
| project_home_page = :OWASP Secure Coding Practices - Quick Reference Guide

| release_name = SCP v2
| release_date = 8 November 2010
| release_download_link = http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.pdf

| release_description =

*Now available in Portuguese: [http://www.owasp.org/images/d/d8/OWASP_SCP_Quick_Reference_PT-BR_v1.1.pdf Updated Portuguese Version PDF]

*Sections of the guide were re-ordered, renamed and new sections were added to map more closely to the ASVS. However input and output handling was left at the beginning, as apposed to be lower in the list as it is with ASVS, since this is the source of the most common vulnerabilities and ones that effect even very simple applications.
*Entirely new sections include:
**Cryptographic Practices,
**Error Handling and Logging".
*The guide's "Data Validation" section was split to match ASVS and is now represented as two separate sections "Input Validation" and "Output Encoding",
*The guide's "Authorization and Access Management" section was renamed to Access Control,
*The guide's "Sensitive Information Storage or Transmission" section was split to match ASVS and is now two new sections "Data Protection" and "Communication Security",
*Additional practices were added to most sections to account for requirements in ASVS that the guide did not specifically cover and some rewording of existing practices was also done.
*Additional terms were added to the glossary.
*Several improvements were made thanks to new contributors.

| release_license = [http://creativecommons.org/licenses/by-sa/3.0/ '''Creative Commons Attribution Share Alike 3.0''']

| leader_name1 = Keith Turpin
| leader_email1 = keith.n.turpin@boeing.com
| leader_username1 = Keith Turpin

| contributor_name1 = Brad Causey (As GPC's Reviewer)
| contributor_email1 = bradcausey@owasp.org
| contributor_username1 = Bradcausey

| contributor_name2 = Anurag Agarwal (As peer Reviewer)
| contributor_email2 = anurag.agarwal@yahoo.com
| contributor_username2 =

| contributor_name3 = Andrew Petukhov
| contributor_email3 = petand@lvk.cs.msu.su
| contributor_username3 = Petand

| contributor_name4 = Jason Coleman
| contributor_email4 =
| contributor_username4 =

| contributor_name5 = Leandro Gomes (as Portuguese Translator)
| contributor_email5 = leandrock@gmail.com
| contributor_username5 =

| contributor_name6 = Sílvio Correia Filho (as Portuguese Translator)
| contributor_email6 = silviofilhosf@gmail.com
| contributor_username6 =

| contributor_name7 = Tarcizio Vieira Neto (as Portuguese Translator)
| contributor_email7 = tarciziovn@gmail.com
| contributor_username7 =

| contributor_name8 = Canedo,Gerardo (as Spanish Translator)

| contributor_name9 = Flores,Mauro (as Spanish Translator)

| contributor_name10 = Hill,Alberto (as Spanish Translator)

| contributor_name11 = Martinez,Mateo (as Spanish Translator)

| contributor_name12 = Papaleo,Mauricio (as Spanish Translator)

| contributor_name13 = Soarez,Nicolás (as Spanish Translator)

| contributor_name14 = Targetta, Cecilia (as Spanish Translator)

| release_notes = http://www.owasp.org/index.php/Projects/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide/Releases/SCP_v2/Notes

| links_url1 = http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.doc
| links_name1 = SCP v2 > English Version > Word file

| links_url2 = http://www.owasp.org/images/e/e2/OWASP_SCP_Quick_Reference_PT-BR_v1.0.pdf
| links_name2 = SCP v2 > Portuguese Translation > Pdf file

| links_url3 = https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf
| links_name3 = SCP v2 > Korean Translation > Pdf file

| links_url4 = http://www.owasp.org/images/c/c8/OWASP_SCP_Quick_Reference_Guide_SPA.doc
| links_name4 = SCP v2 > Spanish Translation > doc file

| links_url5 = http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls
| links_name5 = Secure coding guide assessment feedback disposition

| links_url6 = http://www.owasp.org/index.php/GPC_Project_Assessment/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide_-_SCP_v2
| links_name6 = Assessment Control/Progress and Links

}}

Projects/OWASP Secure Coding Practices - Quick Reference Guide/Releases/SCP v2

2012-01-07T22:59:12Z

Keith Turpin:

{{Template: <includeonly>{{{1}}}</includeonly><noinclude>Release About</noinclude>
| project_name = OWASP Secure Coding Practices - Quick Reference Guide
| project_home_page = :OWASP Secure Coding Practices - Quick Reference Guide

| release_name = SCP v2
| release_date = 8 November 2010
| release_download_link = http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.pdf

| release_description =

*Now available in Portuguese: [http://www.owasp.org/images/d/d8/OWASP_SCP_Quick_Reference_PT-BR_v1.1.pdf Updated Portuguese Version PDF]

*Sections of the guide were re-ordered, renamed and new sections were added to map more closely to the ASVS. However input and output handling was left at the beginning, as apposed to be lower in the list as it is with ASVS, since this is the source of the most common vulnerabilities and ones that effect even very simple applications.
*Entirely new sections include:
**Cryptographic Practices,
**Error Handling and Logging".
*The guide's "Data Validation" section was split to match ASVS and is now represented as two separate sections "Input Validation" and "Output Encoding",
*The guide's "Authorization and Access Management" section was renamed to Access Control,
*The guide's "Sensitive Information Storage or Transmission" section was split to match ASVS and is now two new sections "Data Protection" and "Communication Security",
*Additional practices were added to most sections to account for requirements in ASVS that the guide did not specifically cover and some rewording of existing practices was also done.
*Additional terms were added to the glossary.
*Several improvements were made thanks to new contributors.

| release_license = [http://creativecommons.org/licenses/by-sa/3.0/ '''Creative Commons Attribution Share Alike 3.0''']

| leader_name1 = Keith Turpin
| leader_email1 = keith.n.turpin@boeing.com
| leader_username1 = Keith Turpin

| contributor_name1 = Brad Causey (As GPC's Reviewer)
| contributor_email1 = bradcausey@owasp.org
| contributor_username1 = Bradcausey

| contributor_name2 = Anurag Agarwal (As peer Reviewer)
| contributor_email2 = anurag.agarwal@yahoo.com
| contributor_username2 =

| contributor_name3 = Andrew Petukhov
| contributor_email3 = petand@lvk.cs.msu.su
| contributor_username3 = Petand

| contributor_name4 = Jason Coleman
| contributor_email4 =
| contributor_username4 =

| contributor_name5 = Leandro Gomes (as Portuguese Translator)
| contributor_email5 = leandrock@gmail.com
| contributor_username5 =

| contributor_name6 = Sílvio Correia Filho (as Portuguese Translator)
| contributor_email6 = silviofilhosf@gmail.com
| contributor_username6 =

| contributor_name7 = Tarcizio Vieira Neto (as Portuguese Translator)
| contributor_email7 = tarciziovn@gmail.com
| contributor_username7 =

| contributor_name8 = Canedo,Gerardo (as Spanish Translator)

| contributor_name9 = Flores,Mauro (as Spanish Translator)

| contributor_name10 = Hill,Alberto (as Spanish Translator)

| contributor_name11 = Martinez,Mateo (as Spanish Translator)
| contributor_email11 =
| contributor_username11 =

| contributor_name12 = Papaleo,Mauricio (as Spanish Translator)

| contributor_name13 = Soarez,Nicolás (as Spanish Translator)

| contributor_name14 = Targetta, Cecilia (as Spanish Translator)

| release_notes = http://www.owasp.org/index.php/Projects/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide/Releases/SCP_v2/Notes

| links_url1 = http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.doc
| links_name1 = SCP v2 > English Version > Word file

| links_url2 = http://www.owasp.org/images/e/e2/OWASP_SCP_Quick_Reference_PT-BR_v1.0.pdf
| links_name2 = SCP v2 > Portuguese Translation > Pdf file

| links_url3 = https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf
| links_name3 = SCP v2 > Korean Translation > Pdf file

| links_url4 = http://www.owasp.org/images/c/c8/OWASP_SCP_Quick_Reference_Guide_SPA.doc
| links_name4 = SCP v2 > Spanish Translation > doc file

| links_url5 = http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls
| links_name5 = Secure coding guide assessment feedback disposition

| links_url6 = http://www.owasp.org/index.php/GPC_Project_Assessment/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide_-_SCP_v2
| links_name6 = Assessment Control/Progress and Links

}}

Projects/OWASP Secure Coding Practices - Quick Reference Guide/Releases/SCP v2

2012-01-07T22:53:00Z

Keith Turpin:

{{Template: <includeonly>{{{1}}}</includeonly><noinclude>Release About</noinclude>
| project_name = OWASP Secure Coding Practices - Quick Reference Guide
| project_home_page = :OWASP Secure Coding Practices - Quick Reference Guide

| release_name = SCP v2
| release_date = 8 November 2010
| release_download_link = http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.pdf

| release_description =

*Now available in Portuguese: [http://www.owasp.org/images/d/d8/OWASP_SCP_Quick_Reference_PT-BR_v1.1.pdf Updated Portuguese Version PDF]

*Sections of the guide were re-ordered, renamed and new sections were added to map more closely to the ASVS. However input and output handling was left at the beginning, as apposed to be lower in the list as it is with ASVS, since this is the source of the most common vulnerabilities and ones that effect even very simple applications.
*Entirely new sections include:
**Cryptographic Practices,
**Error Handling and Logging".
*The guide's "Data Validation" section was split to match ASVS and is now represented as two separate sections "Input Validation" and "Output Encoding",
*The guide's "Authorization and Access Management" section was renamed to Access Control,
*The guide's "Sensitive Information Storage or Transmission" section was split to match ASVS and is now two new sections "Data Protection" and "Communication Security",
*Additional practices were added to most sections to account for requirements in ASVS that the guide did not specifically cover and some rewording of existing practices was also done.
*Additional terms were added to the glossary.
*Several improvements were made thanks to new contributors.

| release_license = [http://creativecommons.org/licenses/by-sa/3.0/ '''Creative Commons Attribution Share Alike 3.0''']

| leader_name1 = Keith Turpin
| leader_email1 = keith.n.turpin@boeing.com
| leader_username1 = Keith Turpin

| contributor_name1 = Brad Causey (As GPC's Reviewer)
| contributor_email1 = bradcausey@owasp.org
| contributor_username1 = Bradcausey

| contributor_name2 = Anurag Agarwal (As peer Reviewer)
| contributor_email2 = anurag.agarwal@yahoo.com
| contributor_username2 =

| contributor_name3 = Andrew Petukhov
| contributor_email3 = petand@lvk.cs.msu.su
| contributor_username3 = Petand

| contributor_name4 = Jason Coleman
| contributor_email4 =
| contributor_username4 =

| contributor_name5 = Leandro Gomes (as Portuguese Translator)
| contributor_email5 = leandrock@gmail.com
| contributor_username5 =

| contributor_name6 = Sílvio Correia Filho (as Portuguese Translator)
| contributor_email6 = silviofilhosf@gmail.com
| contributor_username6 =

| contributor_name7 = Tarcizio Vieira Neto (as Portuguese Translator)
| contributor_email7 = tarciziovn@gmail.com
| contributor_username7 =

| contributor_name8 = Canedo,Gerardo (as Spanish Translator)

| contributor_name9 = Flores,Mauro (as Spanish Translator)

| contributor_name10 = Hill,Alberto (as Spanish Translator)

| contributor_name11 = Martinez,Mateo (as Spanish Translator)

| contributor_name12 = Papaleo,Mauricio (as Spanish Translator)

| contributor_name13 = Soarez,Nicolás (as Spanish Translator)

| contributor_name14 = Targetta, Cecilia (as Spanish Translator)

| release_notes = http://www.owasp.org/index.php/Projects/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide/Releases/SCP_v2/Notes

| links_url1 = http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.doc
| links_name1 = SCP v2 > English Version > Word file

| links_url2 = http://www.owasp.org/images/e/e2/OWASP_SCP_Quick_Reference_PT-BR_v1.0.pdf
| links_name2 = SCP v2 > Portuguese Translation > Pdf file

| links_url3 = https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf
| links_name3 = SCP v2 > Korean Translation > Pdf file

| links_url4 = http://www.owasp.org/images/c/c8/OWASP_SCP_Quick_Reference_Guide_SPA.doc
| links_name4 = SCP v2 > Spanish Translation > doc file

| links_url5 = http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls
| links_name5 = Secure coding guide assessment feedback disposition

| links_url6 = http://www.owasp.org/index.php/GPC_Project_Assessment/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide_-_SCP_v2
| links_name6 = Assessment Control/Progress and Links

}}

OWASP Secure Coding Practices - Quick Reference Guide

2012-01-07T22:49:46Z

Keith Turpin:

==== Main ====
== Welcome to the Secure Coding Practices Quick Reference Guide Project ==

'''NEW Release:''' version 2.0 published November 9th.

The Secure Coding Practices Quick Reference Guide is a technology agnostic set of general software security coding practices, in a comprehensive checklist format, that can be integrated into the development lifecycle. At only 17 pages long, it is easy to read and digest.

The focus is on secure coding requirements, rather then on vulnerabilities and exploits. It includes an introduction to Software Security Principles and a glossary of key terms.

It is designed to serve as a secure coding kick-start tool and easy reference, to help development teams quickly understand secure coding practices.

=== Sections of the Guide: ===

* Table of contents
* Introduction
* Software Security Principles Overview
* Secure Coding Practices Checklist
* Links to useful resources
* Glossary of important terminology

'''Download the current v2 (Stable) release:'''

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.pdf English version PDF]

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.doc English version MS Word]

'''Translations:'''

[http://www.owasp.org/images/d/d8/OWASP_SCP_Quick_Reference_PT-BR_v1.1.pdf Updated Portuguese Translation PDF]

[https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf Korean Translation PDF]

[http://www.owasp.org/images/c/c8/OWASP_SCP_Quick_Reference_Guide_SPA.doc Spanish Translation doc]

'''Project Feedback and Disposition History'''

[http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls XLS Feedback Spreadsheet]

----
== Feedback and Participation: ==

I hope you find the OWASP Secure Coding Practices Quick Reference Guide Project useful. Please contribute to the Project by sending your comments, questions, and suggestions to [mailto:Keith.Turpin@owasp.org keith.turpin@owasp.org].

Project mailing list and archives:
[https://lists.owasp.org/mailman/listinfo/owasp-secure-coding-practices subscription page.]

----
== Project Contributors: ==

If you contribute to this Project, please add your name here 
'''Project Lead:'''
* [[user:Keith Turpin|Keith Turpin]]

'''Contributors:''' 
* Dan Kranz
* Walt Pietrowski
* Catherine Spencer
* [mailto:Caleb.mcgary@gmail.com Caleb McGary]
* [mailto:bradcausey@owasp.org Brad Causey]
* [mailto:ludovic.petit@owasp.org Ludovic Petit]
* [mailto:michael.scovetta@gmail.com Michael V. Scovetta]
* [mailto:jim.manico@owasp.org Jim Manico]
* Jason Coleman
* [mailto:anurag.agarwal@yahoo.com Anurag Agarwal]
* [mailto:petand@lvk.cs.msu.su Andrew Petukhov]
 
'''Translation Contributors''' 
'''Portuguese Translation''' 
* [mailto:tarciziovn@gmail.com Tarcizio Vieira Neto]
* [mailto:silviofilhosf@gmail.com Sílvio Correia Filho]
* [mailto:leandrock@gmail.com Leandro Gomes]
'''Korean Translation''' 
* OWASP Korea chapter
'''Spanish Translation''' 
* Canedo,Gerardo
* Flores,Mauro
* Hill,Alberto
* Martinez,Mateo
* Papaleo,Mauricio
* Soarez,Nicolás
* Targetta, Cecilia

==== Project About ====
{{:Projects/OWASP Secure Coding Practices - Quick Reference Guide | Project About}}

__NOTOC__ <headertabs />

[[Category:OWASP_Project|Secure Coding Practices - Quick Reference Guide]] [[Category:OWASP_Document]] [[Category:OWASP_Download]] [[Category:OWASP_Release_Quality_Document|OWASP Release Quality Document]]

OWASP Secure Coding Practices - Quick Reference Guide

2012-01-07T22:46:02Z

Keith Turpin:

==== Main ====
== Welcome to the Secure Coding Practices Quick Reference Guide Project ==

'''NEW Release:''' version 2.0 published November 9th.

The Secure Coding Practices Quick Reference Guide is a technology agnostic set of general software security coding practices, in a comprehensive checklist format, that can be integrated into the development lifecycle. At only 17 pages long, it is easy to read and digest.

The focus is on secure coding requirements, rather then on vulnerabilities and exploits. It includes an introduction to Software Security Principles and a glossary of key terms.

It is designed to serve as a secure coding kick-start tool and easy reference, to help development teams quickly understand secure coding practices.

=== Sections of the Guide: ===

* Table of contents
* Introduction
* Software Security Principles Overview
* Secure Coding Practices Checklist
* Links to useful resources
* Glossary of important terminology

'''Download the current v2 (Stable) release:'''

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.pdf English version PDF]

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.doc English version MS Word]

'''Translations:'''

[http://www.owasp.org/images/d/d8/OWASP_SCP_Quick_Reference_PT-BR_v1.1.pdf Updated Portuguese Translation PDF]

[https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf Korean Translation PDF]

[http://www.owasp.org/images/c/c8/OWASP_SCP_Quick_Reference_Guide_SPA.doc Spanish Translation doc]

'''Project Feedback and Disposition History'''

[http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls XLS Feedback Spreadsheet]

----
== Feedback and Participation: ==

I hope you find the OWASP Secure Coding Practices Quick Reference Guide Project useful. Please contribute to the Project by sending your comments, questions, and suggestions to [mailto:Keith.Turpin@owasp.org keith.turpin@owasp.org].

Project mailing list and archives:
[https://lists.owasp.org/mailman/listinfo/owasp-secure-coding-practices subscription page.]

----
== Project Contributors: ==

If you contribute to this Project, please add your name here 
'''Project Lead:'''
* [[user:Keith Turpin|Keith Turpin]]

'''Contributors:''' 
* Dan Kranz
* Walt Pietrowski
* Catherine Spencer
* [mailto:Caleb.mcgary@gmail.com Caleb McGary]
* [mailto:bradcausey@owasp.org Brad Causey]
* [mailto:ludovic.petit@owasp.org Ludovic Petit]
* [mailto:michael.scovetta@gmail.com Michael V. Scovetta]
* [mailto:jim.manico@owasp.org Jim Manico]
* Jason Coleman
* [mailto:anurag.agarwal@yahoo.com Anurag Agarwal]
* [mailto:petand@lvk.cs.msu.su Andrew Petukhov]
 
'''Translation Contributors''' 
* [mailto:tarciziovn@gmail.com Tarcizio Vieira Neto]
* [mailto:silviofilhosf@gmail.com Sílvio Correia Filho]
* [mailto:leandrock@gmail.com Leandro Gomes]
* OWASP Korea chapter

==== Project About ====
{{:Projects/OWASP Secure Coding Practices - Quick Reference Guide | Project About}}

__NOTOC__ <headertabs />

[[Category:OWASP_Project|Secure Coding Practices - Quick Reference Guide]] [[Category:OWASP_Document]] [[Category:OWASP_Download]] [[Category:OWASP_Release_Quality_Document|OWASP Release Quality Document]]

Projects/OWASP Secure Coding Practices - Quick Reference Guide/Releases/SCP v2

2012-01-07T22:44:11Z

Keith Turpin:

{{Template: <includeonly>{{{1}}}</includeonly><noinclude>Release About</noinclude>
| project_name = OWASP Secure Coding Practices - Quick Reference Guide
| project_home_page = :OWASP Secure Coding Practices - Quick Reference Guide

| release_name = SCP v2
| release_date = 8 November 2010
| release_download_link = http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.pdf

| release_description =

*Now available in Portuguese: [http://www.owasp.org/images/d/d8/OWASP_SCP_Quick_Reference_PT-BR_v1.1.pdf Updated Portuguese Version PDF]

*Sections of the guide were re-ordered, renamed and new sections were added to map more closely to the ASVS. However input and output handling was left at the beginning, as apposed to be lower in the list as it is with ASVS, since this is the source of the most common vulnerabilities and ones that effect even very simple applications.
*Entirely new sections include:
**Cryptographic Practices,
**Error Handling and Logging".
*The guide's "Data Validation" section was split to match ASVS and is now represented as two separate sections "Input Validation" and "Output Encoding",
*The guide's "Authorization and Access Management" section was renamed to Access Control,
*The guide's "Sensitive Information Storage or Transmission" section was split to match ASVS and is now two new sections "Data Protection" and "Communication Security",
*Additional practices were added to most sections to account for requirements in ASVS that the guide did not specifically cover and some rewording of existing practices was also done.
*Additional terms were added to the glossary.
*Several improvements were made thanks to new contributors.

| release_license = [http://creativecommons.org/licenses/by-sa/3.0/ '''Creative Commons Attribution Share Alike 3.0''']

| leader_name1 = Keith Turpin
| leader_email1 = keith.n.turpin@boeing.com
| leader_username1 = Keith Turpin

| contributor_name1 = Brad Causey (As GPC's Reviewer)
| contributor_email1 = bradcausey@owasp.org
| contributor_username1 = Bradcausey

| contributor_name2 = Anurag Agarwal (As peer Reviewer)
| contributor_email2 = anurag.agarwal@yahoo.com
| contributor_username2 =

| contributor_name3 = Andrew Petukhov
| contributor_email3 = petand@lvk.cs.msu.su
| contributor_username3 = Petand

| contributor_name4 = Jason Coleman
| contributor_email4 =
| contributor_username4 =

| contributor_name5 = Leandro Gomes (as Portuguese Translator)
| contributor_email5 = leandrock@gmail.com
| contributor_username5 =

| contributor_name6 = Sílvio Correia Filho (as Portuguese Translator)
| contributor_email6 = silviofilhosf@gmail.com
| contributor_username6 =

| contributor_name7 = Tarcizio Vieira Neto (as Portuguese Translator)
| contributor_email7 = tarciziovn@gmail.com
| contributor_username7 =

| release_notes = http://www.owasp.org/index.php/Projects/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide/Releases/SCP_v2/Notes

| links_url1 = http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.doc
| links_name1 = SCP v2 > English Version > Word file

| links_url2 = http://www.owasp.org/images/e/e2/OWASP_SCP_Quick_Reference_PT-BR_v1.0.pdf
| links_name2 = SCP v2 > Portuguese Translation > Pdf file

| links_url3 = https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf
| links_name3 = SCP v2 > Korean Translation > Pdf file

| links_url4 = http://www.owasp.org/images/c/c8/OWASP_SCP_Quick_Reference_Guide_SPA.doc
| links_name4 = SCP v2 > Spanish Translation > doc file

| links_url5 = http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls
| links_name5 = Secure coding guide assessment feedback disposition

| links_url6 = http://www.owasp.org/index.php/GPC_Project_Assessment/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide_-_SCP_v2
| links_name6 = Assessment Control/Progress and Links

}}

Projects/OWASP Secure Coding Practices - Quick Reference Guide

2012-01-07T22:42:02Z

Keith Turpin:

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Project About</noinclude>
| project_name = OWASP Secure Coding Practices - Quick Reference Guide
| project_home_page = :OWASP Secure Coding Practices - Quick Reference Guide

| project_description =

This document provides a quick high level reference for secure coding practices. It is technology agnostic and defines a set of general software security coding practices, in a checklist format, that can be integrated into the development lifecycle. Implementation of these practices will mitigate most common software vulnerabilities.

| project_license = [http://creativecommons.org/licenses/by-sa/3.0/ '''Creative Commons Attribution Share Alike 3.0''']

| leader_name1 = Keith Turpin
| leader_email1 = keith.turpin@owasp.org
| leader_username1 = Keith Turpin

| contributor_name1 = Dan Kranz
| contributor_email1 =
| contributor_username1 =

| contributor_name2 = Walt Pietrowski
| contributor_email2 =
| contributor_username2 =

| contributor_name3 = Catherine Spencer
| contributor_email3 =
| contributor_username3 =

| contributor_name4 = Caleb McGary
| contributor_email4 = Caleb.mcgary@gmail.com
| contributor_username4 =

| contributor_name5 = Jim Manico
| contributor_email5 = jim.manico@owasp.org
| contributor_username5 = Jmanico

| contributor_name6 = Brad Causey
| contributor_email6 = bradcausey@owasp.org
| contributor_username6 = Bradcausey

| contributor_name7 = Ludovic Petit
| contributor_email7 = ludovic.petit@owasp.org
| contributor_username7 = Ludovic Petit

| contributor_name8 = Michael V. Scovetta
| contributor_email8 = michael.scovetta@gmail.com
| contributor_username8 =

| contributor_name9 = Jason Coleman
| contributor_email9 =
| contributor_username9 =

| contributor_name10 = Tarcizio Vieira Neto
| contributor_email10 =
| contributor_username10 =

| contributor_name11 = OWASP Korea chapter
| contributor_email11 =
| contributor_username11 =

| pamphlet_link = http://www.owasp.org/images/3/35/Flyer_Secure_Coding_Practices_Quick_Reference_Guide_V2.pdf

| presentation_link = https://www.owasp.org/images/f/fd/Secure_Coding_Practices_Quick_Ref_6.ppt

| mailing_list_name = https://lists.owasp.org/mailman/listinfo/owasp-secure-coding-practices

| project_road_map = http://www.owasp.org/index.php/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide/Roadmap

| links_url1 = http://vimeo.com/17018329
| links_name1 = Video - Keith Turpin preseting the Quick Reference Guide on OWASP AppSec USA 2010

| links_url2 = http://www.owasp.org/images/d/d8/OWASP_SCP_Quick_Reference_PT-BR_v1.1.pdf
| links_name2 = SCP v2 > Updated Portuguese Translation > PDF file

| links_url3 = https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf
| links_name3 = SCP v2 > Korean Translation > PDF file

| links_url4 = http://www.owasp.org/images/c/c8/OWASP_SCP_Quick_Reference_Guide_SPA.doc
| links_name4 = SCP v2 > Spanish Translation > doc file

| release_1 = SCP v1

| release_2 = SCP v1.1

| release_3 = SCP v2

| release_4 =

| project_about_page = Projects/OWASP Secure Coding Practices - Quick Reference Guide
}}

Projects/OWASP Secure Coding Practices - Quick Reference Guide

2012-01-07T22:40:53Z

Keith Turpin:

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Project About</noinclude>
| project_name = OWASP Secure Coding Practices - Quick Reference Guide
| project_home_page = :OWASP Secure Coding Practices - Quick Reference Guide

| project_description =

This document provides a quick high level reference for secure coding practices. It is technology agnostic and defines a set of general software security coding practices, in a checklist format, that can be integrated into the development lifecycle. Implementation of these practices will mitigate most common software vulnerabilities.

| project_license = [http://creativecommons.org/licenses/by-sa/3.0/ '''Creative Commons Attribution Share Alike 3.0''']

| leader_name1 = Keith Turpin
| leader_email1 = keith.turpin@owasp.org
| leader_username1 = Keith Turpin

| contributor_name1 = Dan Kranz
| contributor_email1 =
| contributor_username1 =

| contributor_name2 = Walt Pietrowski
| contributor_email2 =
| contributor_username2 =

| contributor_name3 = Catherine Spencer
| contributor_email3 =
| contributor_username3 =

| contributor_name4 = Caleb McGary
| contributor_email4 = Caleb.mcgary@gmail.com
| contributor_username4 =

| contributor_name5 = Jim Manico
| contributor_email5 = jim.manico@owasp.org
| contributor_username5 = Jmanico

| contributor_name6 = Brad Causey
| contributor_email6 = bradcausey@owasp.org
| contributor_username6 = Bradcausey

| contributor_name7 = Ludovic Petit
| contributor_email7 = ludovic.petit@owasp.org
| contributor_username7 = Ludovic Petit

| contributor_name8 = Michael V. Scovetta
| contributor_email8 = michael.scovetta@gmail.com
| contributor_username8 =

| contributor_name9 = Jason Coleman
| contributor_email9 =
| contributor_username9 =

| contributor_name10 = Tarcizio Vieira Neto
| contributor_email10 =
| contributor_username10 =

| contributor_name11 = OWASP Korea chapter
| contributor_email11 =
| contributor_username11 =

| pamphlet_link = http://www.owasp.org/images/3/35/Flyer_Secure_Coding_Practices_Quick_Reference_Guide_V2.pdf

| presentation_link = https://www.owasp.org/images/f/fd/Secure_Coding_Practices_Quick_Ref_6.ppt

| mailing_list_name = https://lists.owasp.org/mailman/listinfo/owasp-secure-coding-practices

| project_road_map = http://www.owasp.org/index.php/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide/Roadmap

| links_url1 = http://vimeo.com/17018329
| links_name1 = Video - Keith Turpin preseting the Quick Reference Guide on OWASP AppSec USA 2010

| links_url2 = http://www.owasp.org/images/d/d8/OWASP_SCP_Quick_Reference_PT-BR_v1.1.pdf
| links_name2 = SCP v2 > Updated Portuguese Translation > PDF file

| links_url3 = https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf
| links_name3 = SCP v2 > Korean Translation > PDF file

| links_url2 = http://www.owasp.org/images/c/c8/OWASP_SCP_Quick_Reference_Guide_SPA.doc
| links_name2 = SCP v2 > Spanish Translation > PDF file

| release_1 = SCP v1

| release_2 = SCP v1.1

| release_3 = SCP v2

| release_4 =

| project_about_page = Projects/OWASP Secure Coding Practices - Quick Reference Guide
}}

File:OWASP SCP Quick Reference Guide SPA.doc

2012-01-07T22:35:06Z

Keith Turpin: Spanish translation of Secure Coding Practices Quick Reference Guide

Spanish translation of Secure Coding Practices Quick Reference Guide

Projects/OWASP Secure Coding Practices - Quick Reference Guide/Releases/SCP v2

2011-08-15T23:40:14Z

Keith Turpin:

{{Template: <includeonly>{{{1}}}</includeonly><noinclude>Release About</noinclude>
| project_name = OWASP Secure Coding Practices - Quick Reference Guide
| project_home_page = :OWASP Secure Coding Practices - Quick Reference Guide

| release_name = SCP v2
| release_date = 8 November 2010
| release_download_link = http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.pdf

| release_description =

*Now available in Portuguese: [http://www.owasp.org/images/d/d8/OWASP_SCP_Quick_Reference_PT-BR_v1.1.pdf Updated Portuguese Version PDF]

*Sections of the guide were re-ordered, renamed and new sections were added to map more closely to the ASVS. However input and output handling was left at the beginning, as apposed to be lower in the list as it is with ASVS, since this is the source of the most common vulnerabilities and ones that effect even very simple applications.
*Entirely new sections include:
**Cryptographic Practices,
**Error Handling and Logging".
*The guide's "Data Validation" section was split to match ASVS and is now represented as two separate sections "Input Validation" and "Output Encoding",
*The guide's "Authorization and Access Management" section was renamed to Access Control,
*The guide's "Sensitive Information Storage or Transmission" section was split to match ASVS and is now two new sections "Data Protection" and "Communication Security",
*Additional practices were added to most sections to account for requirements in ASVS that the guide did not specifically cover and some rewording of existing practices was also done.
*Additional terms were added to the glossary.
*Several improvements were made thanks to new contributors.

| release_license = [http://creativecommons.org/licenses/by-sa/3.0/ '''Creative Commons Attribution Share Alike 3.0''']

| leader_name1 = Keith Turpin
| leader_email1 = keith.n.turpin@boeing.com
| leader_username1 = Keith Turpin

| contributor_name1 = Brad Causey (As GPC's Reviewer)
| contributor_email1 = bradcausey@owasp.org
| contributor_username1 = Bradcausey

| contributor_name2 = Anurag Agarwal (As peer Reviewer)
| contributor_email2 = anurag.agarwal@yahoo.com
| contributor_username2 =

| contributor_name3 = Andrew Petukhov
| contributor_email3 = petand@lvk.cs.msu.su
| contributor_username3 = Petand

| contributor_name4 = Jason Coleman
| contributor_email4 =
| contributor_username4 =

| contributor_name5 = Leandro Gomes (as Portuguese Translator)
| contributor_email5 = leandrock@gmail.com
| contributor_username5 =

| contributor_name6 = Sílvio Correia Filho (as Portuguese Translator)
| contributor_email6 = silviofilhosf@gmail.com
| contributor_username6 =

| contributor_name7 = Tarcizio Vieira Neto (as Portuguese Translator)
| contributor_email7 = tarciziovn@gmail.com
| contributor_username7 =

| release_notes = http://www.owasp.org/index.php/Projects/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide/Releases/SCP_v2/Notes

| links_url1 = http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.doc
| links_name1 = SCP v2 > English Version > Word file

| links_url2 = http://www.owasp.org/images/e/e2/OWASP_SCP_Quick_Reference_PT-BR_v1.0.pdf
| links_name2 = SCP v2 > Portuguese Translation > Pdf file

| links_url3 = https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf
| links_name3 = SCP v2 > Korean Translation > Pdf file

| links_url4 = http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls
| links_name4 = Secure coding guide assessment feedback disposition

| links_url5 = http://www.owasp.org/index.php/GPC_Project_Assessment/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide_-_SCP_v2
| links_name5 = Assessment Control/Progress and Links

}}

Projects/OWASP Secure Coding Practices - Quick Reference Guide/Releases/SCP v2

2011-08-15T23:39:38Z

Keith Turpin:

{{Template: <includeonly>{{{1}}}</includeonly><noinclude>Release About</noinclude>
| project_name = OWASP Secure Coding Practices - Quick Reference Guide
| project_home_page = :OWASP Secure Coding Practices - Quick Reference Guide

| release_name = SCP v2
| release_date = 8 November 2010
| release_download_link = http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.pdf

| release_description =

*Now available in Portuguese: [http://www.owasp.org/images/d/d8/OWASP_SCP_Quick_Reference_PT-BR_v1.1.pdf Updated Portuguese Version PDF]

*Sections of the guide were re-ordered, renamed and new sections were added to map more closely to the ASVS. However input and output handling was left at the beginning, as apposed to be lower in the list as it is with ASVS, since this is the source of the most common vulnerabilities and ones that effect even very simple applications.
*Entirely new sections include:
**Cryptographic Practices,
**Error Handling and Logging".
*The guide's "Data Validation" section was split to match ASVS and is now represented as two separate sections "Input Validation" and "Output Encoding",
*The guide's "Authorization and Access Management" section was renamed to Access Control,
*The guide's "Sensitive Information Storage or Transmission" section was split to match ASVS and is now two new sections "Data Protection" and "Communication Security",
*Additional practices were added to most sections to account for requirements in ASVS that the guide did not specifically cover and some rewording of existing practices was also done.
*Additional terms were added to the glossary.
*Several improvements were made thanks to new contributors.

| release_license = [http://creativecommons.org/licenses/by-sa/3.0/ '''Creative Commons Attribution Share Alike 3.0''']

| leader_name1 = Keith Turpin
| leader_email1 = keith.n.turpin@boeing.com
| leader_username1 = Keith Turpin

| contributor_name1 = Brad Causey (As GPC's Reviewer)
| contributor_email1 = bradcausey@owasp.org
| contributor_username1 = Bradcausey

| contributor_name2 = Anurag Agarwal (As peer Reviewer)
| contributor_email2 = anurag.agarwal@yahoo.com
| contributor_username2 =

| contributor_name3 = Andrew Petukhov
| contributor_email3 = petand@lvk.cs.msu.su
| contributor_username3 = Petand

| contributor_name4 = Jason Coleman
| contributor_email4 =
| contributor_username4 =

| contributor_name5 = Leandro Gomes (as Portuguese Translator)
| contributor_email5 = leandrock@gmail.com
| contributor_username5 =

| contributor_name6 = Sílvio Correia Filho (as Portuguese Translator)
| contributor_email6 = silviofilhosf@gmail.com
| contributor_username6 =

| contributor_name7 = Tarcizio Vieira Neto (as Portuguese Translator)
| contributor_email7 = tarciziovn@gmail.com
| contributor_username7 =

| release_notes = http://www.owasp.org/index.php/Projects/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide/Releases/SCP_v2/Notes

| links_url1 = http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.doc
| links_name1 = SCP v2 > English Version > Word file

| links_url2 = http://www.owasp.org/images/e/e2/OWASP_SCP_Quick_Reference_PT-BR_v1.0.pdf
| links_name2 = SCP v2 > Portuguese Translation > Pdf file

| links_url3 = https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf
| links_name3 = SCP v2 > Korean Translation > Pdf file

| links_url3 = http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls
| links_name3 = Secure coding guide assessment feedback disposition

| links_url4 = http://www.owasp.org/index.php/GPC_Project_Assessment/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide_-_SCP_v2
| links_name4 = Assessment Control/Progress and Links

}}

Projects/OWASP Secure Coding Practices - Quick Reference Guide/Releases/SCP v2

2011-08-15T23:39:02Z

Keith Turpin:

{{Template: <includeonly>{{{1}}}</includeonly><noinclude>Release About</noinclude>
| project_name = OWASP Secure Coding Practices - Quick Reference Guide
| project_home_page = :OWASP Secure Coding Practices - Quick Reference Guide

| release_name = SCP v2
| release_date = 8 November 2010
| release_download_link = http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.pdf

| release_description =

*Now available in Portuguese: [http://www.owasp.org/images/d/d8/OWASP_SCP_Quick_Reference_PT-BR_v1.1.pdf Updated Portuguese Version PDF]

*Sections of the guide were re-ordered, renamed and new sections were added to map more closely to the ASVS. However input and output handling was left at the beginning, as apposed to be lower in the list as it is with ASVS, since this is the source of the most common vulnerabilities and ones that effect even very simple applications.
*Entirely new sections include:
**Cryptographic Practices,
**Error Handling and Logging".
*The guide's "Data Validation" section was split to match ASVS and is now represented as two separate sections "Input Validation" and "Output Encoding",
*The guide's "Authorization and Access Management" section was renamed to Access Control,
*The guide's "Sensitive Information Storage or Transmission" section was split to match ASVS and is now two new sections "Data Protection" and "Communication Security",
*Additional practices were added to most sections to account for requirements in ASVS that the guide did not specifically cover and some rewording of existing practices was also done.
*Additional terms were added to the glossary.
*Several improvements were made thanks to new contributors.

| release_license = [http://creativecommons.org/licenses/by-sa/3.0/ '''Creative Commons Attribution Share Alike 3.0''']

| leader_name1 = Keith Turpin
| leader_email1 = keith.n.turpin@boeing.com
| leader_username1 = Keith Turpin

| contributor_name1 = Brad Causey (As GPC's Reviewer)
| contributor_email1 = bradcausey@owasp.org
| contributor_username1 = Bradcausey

| contributor_name2 = Anurag Agarwal (As peer Reviewer)
| contributor_email2 = anurag.agarwal@yahoo.com
| contributor_username2 =

| contributor_name3 = Andrew Petukhov
| contributor_email3 = petand@lvk.cs.msu.su
| contributor_username3 = Petand

| contributor_name4 = Jason Coleman
| contributor_email4 =
| contributor_username4 =

| contributor_name5 = Leandro Gomes (as Portuguese Translator)
| contributor_email5 = leandrock@gmail.com
| contributor_username5 =

| contributor_name6 = Sílvio Correia Filho (as Portuguese Translator)
| contributor_email6 = silviofilhosf@gmail.com
| contributor_username6 =

| contributor_name7 = Tarcizio Vieira Neto (as Portuguese Translator)
| contributor_email7 = tarciziovn@gmail.com
| contributor_username7 =

| release_notes = http://www.owasp.org/index.php/Projects/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide/Releases/SCP_v2/Notes

| links_url1 = http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.doc
| links_name1 = SCP v2 > English Version > Word file

| links_url2 = http://www.owasp.org/images/e/e2/OWASP_SCP_Quick_Reference_PT-BR_v1.0.pdf
| links_name2 = SCP v2 > Portuguese Translation > Pdf file

| links_url2 = https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf
| links_name2 = SCP v2 > Korean Translation > Pdf file

| links_url3 = http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls
| links_name3 = Secure coding guide assessment feedback disposition

| links_url4 = http://www.owasp.org/index.php/GPC_Project_Assessment/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide_-_SCP_v2
| links_name4 = Assessment Control/Progress and Links

}}

OWASP Secure Coding Practices - Quick Reference Guide

2011-08-15T23:36:36Z

Keith Turpin:

==== Main ====
== Welcome to the Secure Coding Practices Quick Reference Guide Project ==

'''NEW Release:''' version 2.0 published November 9th.

The Secure Coding Practices Quick Reference Guide is a technology agnostic set of general software security coding practices, in a comprehensive checklist format, that can be integrated into the development lifecycle. At only 17 pages long, it is easy to read and digest.

The focus is on secure coding requirements, rather then on vulnerabilities and exploits. It includes an introduction to Software Security Principles and a glossary of key terms.

It is designed to serve as a secure coding kick-start tool and easy reference, to help development teams quickly understand secure coding practices.

=== Sections of the Guide: ===

* Table of contents
* Introduction
* Software Security Principles Overview
* Secure Coding Practices Checklist
* Links to useful resources
* Glossary of important terminology

'''Download the current v2 (Stable) release:'''

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.pdf English version PDF]

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.doc English version MS Word]

'''Translations:'''

[http://www.owasp.org/images/d/d8/OWASP_SCP_Quick_Reference_PT-BR_v1.1.pdf Updated Portuguese Translation PDF]

[https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf Korean Translation PDF]

'''Project Feedback and Disposition History'''

[http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls XLS Feedback Spreadsheet]

----
== Feedback and Participation: ==

I hope you find the OWASP Secure Coding Practices Quick Reference Guide Project useful. Please contribute to the Project by sending your comments, questions, and suggestions to [mailto:Keith.Turpin@owasp.org keith.turpin@owasp.org].

Project mailing list and archives:
[https://lists.owasp.org/mailman/listinfo/owasp-secure-coding-practices subscription page.]

----
== Project Contributors: ==

If you contribute to this Project, please add your name here 
'''Project Lead:'''
* [[user:Keith Turpin|Keith Turpin]]

'''Contributors:''' 
* Dan Kranz
* Walt Pietrowski
* Catherine Spencer
* [mailto:Caleb.mcgary@gmail.com Caleb McGary]
* [mailto:bradcausey@owasp.org Brad Causey]
* [mailto:ludovic.petit@owasp.org Ludovic Petit]
* [mailto:michael.scovetta@gmail.com Michael V. Scovetta]
* [mailto:jim.manico@owasp.org Jim Manico]
* Jason Coleman
* [mailto:anurag.agarwal@yahoo.com Anurag Agarwal]
* [mailto:petand@lvk.cs.msu.su Andrew Petukhov]
 
'''Translation Contributors''' 
* [mailto:tarciziovn@gmail.com Tarcizio Vieira Neto]
* [mailto:silviofilhosf@gmail.com Sílvio Correia Filho]
* [mailto:leandrock@gmail.com Leandro Gomes]
* OWASP Korea chapter

==== Project About ====
{{:Projects/OWASP Secure Coding Practices - Quick Reference Guide | Project About}}

__NOTOC__ <headertabs />

[[Category:OWASP_Project|Secure Coding Practices - Quick Reference Guide]] [[Category:OWASP_Document]] [[Category:OWASP_Download]] [[Category:OWASP_Release_Quality_Document|OWASP Release Quality Document]]

OWASP Secure Coding Practices - Quick Reference Guide

2011-08-15T23:34:29Z

Keith Turpin:

==== Main ====
== Welcome to the Secure Coding Practices Quick Reference Guide Project ==

'''NEW Release:''' version 2.0 published November 9th.

The Secure Coding Practices Quick Reference Guide is a technology agnostic set of general software security coding practices, in a comprehensive checklist format, that can be integrated into the development lifecycle. At only 17 pages long, it is easy to read and digest.

The focus is on secure coding requirements, rather then on vulnerabilities and exploits. It includes an introduction to Software Security Principles and a glossary of key terms.

It is designed to serve as a secure coding kick-start tool and easy reference, to help development teams quickly understand secure coding practices.

=== Sections of the Guide: ===

* Table of contents
* Introduction
* Software Security Principles Overview
* Secure Coding Practices Checklist
* Links to useful resources
* Glossary of important terminology

'''Download the current v2 (Stable) release:'''

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.pdf English version PDF]

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.doc English version MS Word]

'''Translations:'''

[http://www.owasp.org/images/d/d8/OWASP_SCP_Quick_Reference_PT-BR_v1.1.pdf Updated Portuguese Translation PDF]

[https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf Korean Translation PDF]

'''Project Feedback and Disposition History'''

[http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls XLS Feedback Spreadsheet]

----
== Feedback and Participation: ==

I hope you find the OWASP Secure Coding Practices Quick Reference Guide Project useful. Please contribute to the Project by sending your comments, questions, and suggestions to [mailto:Keith.Turpin@owasp.org keith.turpin@owasp.org].

Project mailing list and archives:
[https://lists.owasp.org/mailman/listinfo/owasp-secure-coding-practices subscription page.]

----
== Project Contributors: ==

If you contribute to this Project, please add your name here 
'''Project Lead:'''
* [[user:Keith Turpin|Keith Turpin]]

'''Contributors:''' 
* Dan Kranz
* Walt Pietrowski
* Catherine Spencer
* [mailto:Caleb.mcgary@gmail.com Caleb McGary]
* [mailto:bradcausey@owasp.org Brad Causey]
* [mailto:ludovic.petit@owasp.org Ludovic Petit]
* [mailto:michael.scovetta@gmail.com Michael V. Scovetta]
* [mailto:jim.manico@owasp.org Jim Manico]
* Jason Coleman
* [mailto:anurag.agarwal@yahoo.com Anurag Agarwal]
* [mailto:petand@lvk.cs.msu.su Andrew Petukhov]
* [mailto:tarciziovn@gmail.com Tarcizio Vieira Neto]
* [mailto:silviofilhosf@gmail.com Sílvio Correia Filho]
* [mailto:leandrock@gmail.com Leandro Gomes]
* OWASP Korea chapter

==== Project About ====
{{:Projects/OWASP Secure Coding Practices - Quick Reference Guide | Project About}}

__NOTOC__ <headertabs />

[[Category:OWASP_Project|Secure Coding Practices - Quick Reference Guide]] [[Category:OWASP_Document]] [[Category:OWASP_Download]] [[Category:OWASP_Release_Quality_Document|OWASP Release Quality Document]]

Projects/OWASP Secure Coding Practices - Quick Reference Guide

2011-08-15T23:25:51Z

Keith Turpin:

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Project About</noinclude>
| project_name = OWASP Secure Coding Practices - Quick Reference Guide
| project_home_page = :OWASP Secure Coding Practices - Quick Reference Guide

| project_description =

This document provides a quick high level reference for secure coding practices. It is technology agnostic and defines a set of general software security coding practices, in a checklist format, that can be integrated into the development lifecycle. Implementation of these practices will mitigate most common software vulnerabilities.

| project_license = [http://creativecommons.org/licenses/by-sa/3.0/ '''Creative Commons Attribution Share Alike 3.0''']

| leader_name1 = Keith Turpin
| leader_email1 = keith.turpin@owasp.org
| leader_username1 = Keith Turpin

| contributor_name1 = Dan Kranz
| contributor_email1 =
| contributor_username1 =

| contributor_name2 = Walt Pietrowski
| contributor_email2 =
| contributor_username2 =

| contributor_name3 = Catherine Spencer
| contributor_email3 =
| contributor_username3 =

| contributor_name4 = Caleb McGary
| contributor_email4 = Caleb.mcgary@gmail.com
| contributor_username4 =

| contributor_name5 = Jim Manico
| contributor_email5 = jim.manico@owasp.org
| contributor_username5 = Jmanico

| contributor_name6 = Brad Causey
| contributor_email6 = bradcausey@owasp.org
| contributor_username6 = Bradcausey

| contributor_name7 = Ludovic Petit
| contributor_email7 = ludovic.petit@owasp.org
| contributor_username7 = Ludovic Petit

| contributor_name8 = Michael V. Scovetta
| contributor_email8 = michael.scovetta@gmail.com
| contributor_username8 =

| contributor_name9 = Jason Coleman
| contributor_email9 =
| contributor_username9 =

| contributor_name10 = Tarcizio Vieira Neto
| contributor_email10 =
| contributor_username10 =

| contributor_name11 = OWASP Korea chapter
| contributor_email11 =
| contributor_username11 =

| pamphlet_link = http://www.owasp.org/images/3/35/Flyer_Secure_Coding_Practices_Quick_Reference_Guide_V2.pdf

| presentation_link = https://www.owasp.org/images/f/fd/Secure_Coding_Practices_Quick_Ref_6.ppt

| mailing_list_name = https://lists.owasp.org/mailman/listinfo/owasp-secure-coding-practices

| project_road_map = http://www.owasp.org/index.php/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide/Roadmap

| links_url1 = http://vimeo.com/17018329
| links_name1 = Video - Keith Turpin preseting the Quick Reference Guide on OWASP AppSec USA 2010

| links_url2 = http://www.owasp.org/images/d/d8/OWASP_SCP_Quick_Reference_PT-BR_v1.1.pdf
| links_name2 = SCP v2 > Updated Portuguese Translation > PDF file

| links_url3 = https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf
| links_name3 = SCP v2 > Korean Translation > PDF file

| release_1 = SCP v1

| release_2 = SCP v1.1

| release_3 = SCP v2

| release_4 =

| project_about_page = Projects/OWASP Secure Coding Practices - Quick Reference Guide
}}

Projects/OWASP Secure Coding Practices - Quick Reference Guide

2011-08-15T23:24:59Z

Keith Turpin:

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Project About</noinclude>
| project_name = OWASP Secure Coding Practices - Quick Reference Guide
| project_home_page = :OWASP Secure Coding Practices - Quick Reference Guide

| project_description =

This document provides a quick high level reference for secure coding practices. It is technology agnostic and defines a set of general software security coding practices, in a checklist format, that can be integrated into the development lifecycle. Implementation of these practices will mitigate most common software vulnerabilities.

| project_license = [http://creativecommons.org/licenses/by-sa/3.0/ '''Creative Commons Attribution Share Alike 3.0''']

| leader_name1 = Keith Turpin
| leader_email1 = keith.turpin@owasp.org
| leader_username1 = Keith Turpin

| contributor_name1 = Dan Kranz
| contributor_email1 =
| contributor_username1 =

| contributor_name2 = Walt Pietrowski
| contributor_email2 =
| contributor_username2 =

| contributor_name3 = Catherine Spencer
| contributor_email3 =
| contributor_username3 =

| contributor_name4 = Caleb McGary
| contributor_email4 = Caleb.mcgary@gmail.com
| contributor_username4 =

| contributor_name5 = Jim Manico
| contributor_email5 = jim.manico@owasp.org
| contributor_username5 = Jmanico

| contributor_name6 = Brad Causey
| contributor_email6 = bradcausey@owasp.org
| contributor_username6 = Bradcausey

| contributor_name7 = Ludovic Petit
| contributor_email7 = ludovic.petit@owasp.org
| contributor_username7 = Ludovic Petit

| contributor_name8 = Michael V. Scovetta
| contributor_email8 = michael.scovetta@gmail.com
| contributor_username8 =

| contributor_name9 = Jason Coleman
| contributor_email9 =
| contributor_username9 =

| contributor_name10 = Tarcizio Vieira Neto
| contributor_email10 =
| contributor_username10 =

| contributor_name11 = OWASP Korea chapter
| contributor_email11 =
| contributor_username11 =

| pamphlet_link = http://www.owasp.org/images/3/35/Flyer_Secure_Coding_Practices_Quick_Reference_Guide_V2.pdf

| presentation_link = https://www.owasp.org/images/f/fd/Secure_Coding_Practices_Quick_Ref_6.ppt

| mailing_list_name = https://lists.owasp.org/mailman/listinfo/owasp-secure-coding-practices

| project_road_map = http://www.owasp.org/index.php/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide/Roadmap

| links_url1 = http://vimeo.com/17018329
| links_name1 = Video - Keith Turpin preseting the Quick Reference Guide on OWASP AppSec USA 2010

| links_url2 = http://www.owasp.org/images/d/d8/OWASP_SCP_Quick_Reference_PT-BR_v1.1.pdf
| links_name2 = SCP v2 > Updated Portuguese Translation > PDF file

| links_url3 = https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf
| links_name3 = SCP v2 > Korean Translation > PDF file

| release_1 = SCP v1

| release_2 = SCP v1.1

| release_3 = SCP v2

| release_4 =

| project_about_page = Projects/OWASP Secure Coding Practices - Quick Reference Guide
}}

Projects/OWASP Secure Coding Practices - Quick Reference Guide

2011-08-15T23:03:23Z

Keith Turpin:

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Project About</noinclude>
| project_name = OWASP Secure Coding Practices - Quick Reference Guide
| project_home_page = :OWASP Secure Coding Practices - Quick Reference Guide

| project_description =

This document provides a quick high level reference for secure coding practices. It is technology agnostic and defines a set of general software security coding practices, in a checklist format, that can be integrated into the development lifecycle. Implementation of these practices will mitigate most common software vulnerabilities.

| project_license = [http://creativecommons.org/licenses/by-sa/3.0/ '''Creative Commons Attribution Share Alike 3.0''']

| leader_name1 = Keith Turpin
| leader_email1 = keith.turpin@owasp.org
| leader_username1 = Keith Turpin

| contributor_name1 = Dan Kranz
| contributor_email1 =
| contributor_username1 =

| contributor_name2 = Walt Pietrowski
| contributor_email2 =
| contributor_username2 =

| contributor_name3 = Catherine Spencer
| contributor_email3 =
| contributor_username3 =

| contributor_name4 = Caleb McGary
| contributor_email4 = Caleb.mcgary@gmail.com
| contributor_username4 =

| contributor_name5 = Jim Manico
| contributor_email5 = jim.manico@owasp.org
| contributor_username5 = Jmanico

| contributor_name6 = Brad Causey
| contributor_email6 = bradcausey@owasp.org
| contributor_username6 = Bradcausey

| contributor_name7 = Ludovic Petit
| contributor_email7 = ludovic.petit@owasp.org
| contributor_username7 = Ludovic Petit

| contributor_name8 = Michael V. Scovetta
| contributor_email8 = michael.scovetta@gmail.com
| contributor_username8 =

| contributor_name9 = Jason Coleman
| contributor_email9 =
| contributor_username9 =

| pamphlet_link = http://www.owasp.org/images/3/35/Flyer_Secure_Coding_Practices_Quick_Reference_Guide_V2.pdf

| presentation_link = https://www.owasp.org/images/f/fd/Secure_Coding_Practices_Quick_Ref_6.ppt

| mailing_list_name = https://lists.owasp.org/mailman/listinfo/owasp-secure-coding-practices

| project_road_map = http://www.owasp.org/index.php/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide/Roadmap

| links_url1 = http://vimeo.com/17018329
| links_name1 = Video - Keith Turpin preseting the Quick Reference Guide on OWASP AppSec USA 2010

| links_url2 = http://www.owasp.org/images/d/d8/OWASP_SCP_Quick_Reference_PT-BR_v1.1.pdf
| links_name2 = SCP v2 > Updated Portuguese Translation > PDF file

| links_url3 = https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf
| links_name3 = SCP v2 > Korean Translation > PDF file

| release_1 = SCP v1

| release_2 = SCP v1.1

| release_3 = SCP v2

| release_4 =

| project_about_page = Projects/OWASP Secure Coding Practices - Quick Reference Guide
}}

File:2011년6월 OWASP 시큐어코딩규칙 v2 KOR.pdf

2011-08-15T22:59:38Z

Keith Turpin: Secure Coding Practices Quick Reference Guide - Korean Translation

Secure Coding Practices Quick Reference Guide - Korean Translation

Projects/OWASP Secure Coding Practices - Quick Reference Guide

2011-06-14T01:55:00Z

Keith Turpin: update presentation link

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Project About</noinclude>
| project_name = OWASP Secure Coding Practices - Quick Reference Guide
| project_home_page = :OWASP Secure Coding Practices - Quick Reference Guide

| project_description =

This document provides a quick high level reference for secure coding practices. It is technology agnostic and defines a set of general software security coding practices, in a checklist format, that can be integrated into the development lifecycle. Implementation of these practices will mitigate most common software vulnerabilities.

| project_license = [http://creativecommons.org/licenses/by-sa/3.0/ '''Creative Commons Attribution Share Alike 3.0''']

| leader_name1 = Keith Turpin
| leader_email1 = keith.turpin@owasp.org
| leader_username1 = Keith Turpin

| contributor_name1 = Dan Kranz
| contributor_email1 =
| contributor_username1 =

| contributor_name2 = Walt Pietrowski
| contributor_email2 =
| contributor_username2 =

| contributor_name3 = Catherine Spencer
| contributor_email3 =
| contributor_username3 =

| contributor_name4 = Caleb McGary
| contributor_email4 = Caleb.mcgary@gmail.com
| contributor_username4 =

| contributor_name5 = Jim Manico
| contributor_email5 = jim.manico@owasp.org
| contributor_username5 = Jmanico

| contributor_name6 = Brad Causey
| contributor_email6 = bradcausey@owasp.org
| contributor_username6 = Bradcausey

| contributor_name7 = Ludovic Petit
| contributor_email7 = ludovic.petit@owasp.org
| contributor_username7 = Ludovic Petit

| contributor_name8 = Michael V. Scovetta
| contributor_email8 = michael.scovetta@gmail.com
| contributor_username8 =

| contributor_name9 = Jason Coleman
| contributor_email9 =
| contributor_username9 =

| pamphlet_link = http://www.owasp.org/images/3/35/Flyer_Secure_Coding_Practices_Quick_Reference_Guide_V2.pdf

| presentation_link = https://www.owasp.org/images/f/fd/Secure_Coding_Practices_Quick_Ref_6.ppt

| mailing_list_name = https://lists.owasp.org/mailman/listinfo/owasp-secure-coding-practices

| project_road_map = http://www.owasp.org/index.php/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide/Roadmap

| links_url1 = http://vimeo.com/17018329
| links_name1 = Video - Keith Turpin preseting the Quick Reference Guide on OWASP AppSec USA 2010

| links_url2 = http://www.owasp.org/images/d/d8/OWASP_SCP_Quick_Reference_PT-BR_v1.1.pdf
| links_name2 = SCP v2 > Updated Portuguese Version > PDF file

| release_1 = SCP v1

| release_2 = SCP v1.1

| release_3 = SCP v2

| release_4 =

| project_about_page = Projects/OWASP Secure Coding Practices - Quick Reference Guide
}}

File:Secure Coding Practices Quick Ref 6.ppt

2011-06-14T01:50:09Z

Keith Turpin: Update to Secure Coding Practices presentation following AppSecEU

Update to Secure Coding Practices presentation following AppSecEU

OWASP Connections Committee - Application 8

2011-03-26T15:25:51Z

Keith Turpin:

[[How to Join a Committee|Click here to return to 'How to Join a Committee' page]]

----
{| style="width:100%" border="0" align="center"
! colspan="2" align="center" style="background:#4058A0; color:white"|'''COMMITTEE APPLICATION FORM'''
|-
| style="width:25%; background:#7B8ABD" align="center"|'''Applicant's Name'''
| colspan="1" style="width:85%; background:#cccccc" align="left"|Ludovic Petit.
|-
| style="width:25%; background:#7B8ABD" align="center"| '''Current and past OWASP Roles'''
| colspan="1" style="width:85%; background:#cccccc" align="left"|'''Chapter Leader, OWASP France'''

Translator: Top Ten 2010, 2007 and 2004 in French

Reviewer: OWASP Secure Coding Practices - Quick Reference Guide

Contributor: OWASP Mobile Security Project

Contributor: OWASP Cloud - Top10 Project

|-
| style="width:25%; background:#7B8ABD" align="center"| '''Committee Applying for'''
| colspan="1" style="width:85%; background:#cccccc" align="left"|OWASP Connection Committee
|}
----

----
As Chapter Leader, I evangelize for quite a long time now, always with team spirit and commitment. I work at Group level in multinational corporation with a proven track record of working effectively with staff at all levels and managing international teams with team spirit and commitment. (TEAM stands for... Together Each Achieves More). As such, I'm very keen to develop initiatives for the Foundation and build lasting relationships with corporations through this Connections Committee. I'm currently working on an approach for a multinational corporation, in the perspective to (maybe) involve several local Chapters around the world...
Feel free to take a look at my public LinkedIn page to see more about me, background, areas of expertise including snapshots of achievements in France and Europe: http://www.linkedin.com/in/lpetit.

As requested, recommendations will follow in the coming days.

Ludovic
http://www.owasp.org/index.php/User:Ludovic_Petit

----

----
{| style="width:100%" border="0" align="center"
! colspan="8" align="center" style="background:#4058A0; color:white"|'''COMMITTEE RECOMMENDATIONS'''
|-
! align="center" style="background:white; color:white"|
! align="center" style="background:#7B8ABD; color:white"|'''Who Recommends/Name'''
! align="center" style="background:#7B8ABD; color:white"|'''Role in OWASP'''
! align="center" style="background:#7B8ABD; color:white"|'''Recommendation Content'''
|-
| style="width:3%; background:#cccccc" align="center"|'''1'''
| style="width:20%; background:#cccccc" align="center"| Sébastien GIORIA
| style="width:20%; background:#cccccc" align="center"| CoChapter Leader France and Global Education Committee Member
| style="width:57%; background:#cccccc" align="center"| Ludovic is a amazing leader in making connections between organization and is also a great technical security guy with a strong executive view. His actual role in Vodafone Group totally reflect this. I totally approve his membership in a comittee.
|-
| style="width:3%; background:#cccccc" align="center"|'''2'''
| style="width:20%; background:#cccccc" align="center"| Fabio Cerullo
| style="width:20%; background:#cccccc" align="center"| OWASP Ireland Chapter Leader
| style="width:57%; background:#cccccc" align="center"| I endorse Ludovic to be a member of the connections committee due to his extensive experience, broad network of like-minded professionals and passion for OWASP.
|-
| style="width:3%; background:#cccccc" align="center"|'''3'''
| style="width:20%; background:#cccccc" align="center"| Jocelyn Aubert
| style="width:20%; background:#cccccc" align="center"| OWASP Luxembourg Chapter Leader
| style="width:57%; background:#cccccc" align="center"| I participed with Ludovic in the Top2010 French translation. As a project leader, he has demonstrated his leadership capacity, dedication to OWASP, team spirit but also his human qualities. Thus, I can only endorse him to be a member of the connections committee.
|-
| style="width:3%; background:#cccccc" align="center"|'''4'''
| style="width:20%; background:#cccccc" align="center"| Lorna Alamri
| style="width:20%; background:#cccccc" align="center"| OWASP MSP Chapter Leader
| style="width:57%; background:#cccccc" align="center"| Ludovic has been involved in several OWASP projects as OWASP leader I endorse him to be a member of the connections committee.
|-
| style="width:3%; background:#cccccc" align="center"|'''5'''
| style="width:20%; background:#cccccc" align="center"| Keith Turpin
| style="width:20%; background:#cccccc" align="center"| OWASP Project Leader
| style="width:57%; background:#cccccc" align="center"| Ludovic would make an excellent member of the connections committee. His dedication to supporting OWASP and the industry in general, combined with his experience will make him a valuable contributor. I fully support him being a member of the connections committee.
|}
----

Projects/OWASP Secure Coding Practices - Quick Reference Guide/Releases/SCP v2

2011-02-20T00:54:39Z

Keith Turpin:

{{Template: <includeonly>{{{1}}}</includeonly><noinclude>Release About</noinclude>
| project_name = OWASP Secure Coding Practices - Quick Reference Guide
| project_home_page = :OWASP Secure Coding Practices - Quick Reference Guide

| release_name = SCP v2
| release_date = 8 November 2010
| release_download_link = http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.pdf

| release_description =

*Now available in Portuguese: [http://www.owasp.org/images/d/d8/OWASP_SCP_Quick_Reference_PT-BR_v1.1.pdf Updated Portuguese Version PDF]

*Sections of the guide were re-ordered, renamed and new sections were added to map more closely to the ASVS. However input and output handling was left at the beginning, as apposed to be lower in the list as it is with ASVS, since this is the source of the most common vulnerabilities and ones that effect even very simple applications.
*Entirely new sections include:
**Cryptographic Practices,
**Error Handling and Logging".
*The guide's "Data Validation" section was split to match ASVS and is now represented as two separate sections "Input Validation" and "Output Encoding",
*The guide's "Authorization and Access Management" section was renamed to Access Control,
*The guide's "Sensitive Information Storage or Transmission" section was split to match ASVS and is now two new sections "Data Protection" and "Communication Security",
*Additional practices were added to most sections to account for requirements in ASVS that the guide did not specifically cover and some rewording of existing practices was also done.
*Additional terms were added to the glossary.
*Several improvements were made thanks to new contributors.

| release_license = [http://creativecommons.org/licenses/by-sa/3.0/ '''Creative Commons Attribution Share Alike 3.0''']

| leader_name1 = Keith Turpin
| leader_email1 = keith.n.turpin@boeing.com
| leader_username1 = Keith Turpin

| contributor_name1 = Brad Causey (As GPC's Reviewer)
| contributor_email1 = bradcausey@owasp.org
| contributor_username1 = Bradcausey

| contributor_name2 = Anurag Agarwal (As peer Reviewer)
| contributor_email2 = anurag.agarwal@yahoo.com
| contributor_username2 =

| contributor_name3 = Andrew Petukhov
| contributor_email3 = petand@lvk.cs.msu.su
| contributor_username3 = Petand

| contributor_name4 = Jason Coleman
| contributor_email4 =
| contributor_username4 =

| contributor_name5 = Leandro Gomes (as Portuguese Translator)
| contributor_email5 = leandrock@gmail.com
| contributor_username5 =

| contributor_name6 = Sílvio Correia Filho (as Portuguese Translator)
| contributor_email6 = silviofilhosf@gmail.com
| contributor_username6 =

| contributor_name7 = Tarcizio Vieira Neto (as Portuguese Translator)
| contributor_email7 = tarciziovn@gmail.com
| contributor_username7 =

| release_notes = http://www.owasp.org/index.php/Projects/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide/Releases/SCP_v2/Notes

| links_url1 = http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.doc
| links_name1 = SCP v2 > English Version > Word file

| links_url2 = http://www.owasp.org/images/e/e2/OWASP_SCP_Quick_Reference_PT-BR_v1.0.pdf
| links_name2 = SCP v2 > Portuguese Version > Pdf file

| links_url3 = http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls
| links_name3 = Secure coding guide assessment feedback disposition

| links_url4 = http://www.owasp.org/index.php/GPC_Project_Assessment/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide_-_SCP_v2
| links_name4 = Assessment Control/Progress and Links

}}

Projects/OWASP Secure Coding Practices - Quick Reference Guide

2011-02-20T00:53:59Z

Keith Turpin:

{{Template:Project About
| project_name = OWASP Secure Coding Practices - Quick Reference Guide
| project_home_page = :OWASP Secure Coding Practices - Quick Reference Guide

| project_description =

This document provides a quick high level reference for secure coding practices. It is technology agnostic and defines a set of general software security coding practices, in a checklist format, that can be integrated into the development lifecycle. Implementation of these practices will mitigate most common software vulnerabilities.

| project_license = [http://creativecommons.org/licenses/by-sa/3.0/ '''Creative Commons Attribution Share Alike 3.0''']

| leader_name1 = Keith Turpin
| leader_email1 = keith.turpin@owasp.org
| leader_username1 = Keith Turpin

| contributor_name1 = Dan Kranz
| contributor_email1 =
| contributor_username1 =

| contributor_name2 = Walt Pietrowski
| contributor_email2 =
| contributor_username2 =

| contributor_name3 = Catherine Spencer
| contributor_email3 =
| contributor_username3 =

| contributor_name4 = Caleb McGary
| contributor_email4 = Caleb.mcgary@gmail.com
| contributor_username4 =

| contributor_name5 = Jim Manico
| contributor_email5 = jim.manico@owasp.org
| contributor_username5 = Jmanico

| contributor_name6 = Brad Causey
| contributor_email6 = bradcausey@owasp.org
| contributor_username6 = Bradcausey

| contributor_name7 = Ludovic Petit
| contributor_email7 = ludovic.petit@owasp.org
| contributor_username7 = Ludovic Petit

| contributor_name8 = Michael V. Scovetta
| contributor_email8 = michael.scovetta@gmail.com
| contributor_username8 =

| contributor_name9 = Jason Coleman
| contributor_email9 =
| contributor_username9 =

| pamphlet_link = http://www.owasp.org/images/3/35/Flyer_Secure_Coding_Practices_Quick_Reference_Guide_V2.pdf

| presentation_link = http://www.owasp.org/images/5/54/Secure_Coding_Practices_Quick_Ref_5.ppt

| mailing_list_name = https://lists.owasp.org/mailman/listinfo/owasp-secure-coding-practices

| project_road_map = http://www.owasp.org/index.php/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide/Roadmap

| links_url1 = http://vimeo.com/17018329
| links_name1 = Video - Keith Turpin preseting the Quick Reference Guide on OWASP AppSec USA 2010

| links_url2 = http://www.owasp.org/images/d/d8/OWASP_SCP_Quick_Reference_PT-BR_v1.1.pdf
| links_name2 = SCP v2 > Updated Portuguese Version > PDF file

| release_1 = SCP v1

| release_2 = SCP v1.1

| release_3 = SCP v2

| release_4 =
}}

OWASP Secure Coding Practices - Quick Reference Guide

2011-02-20T00:52:07Z

Keith Turpin:

==== Main ====
== Welcome to the Secure Coding Practices Quick Reference Guide Project ==

'''NEW Release:''' version 2.0 published November 9th.

The Secure Coding Practices Quick Reference Guide is a technology agnostic set of general software security coding practices, in a comprehensive checklist format, that can be integrated into the development lifecycle. At only 17 pages long, it is easy to read and digest.

The focus is on secure coding requirements, rather then on vulnerabilities and exploits. It includes an introduction to Software Security Principles and a glossary of key terms.

It is designed to serve as a secure coding kick-start tool and easy reference, to help development teams quickly understand secure coding practices.

=== Sections of the Guide: ===

* Table of contents
* Introduction
* Software Security Principles Overview
* Secure Coding Practices Checklist
* Links to useful resources
* Glossary of important terminology

'''Download the current v2 (Stable) release:'''

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.pdf English version PDF]

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.doc English version MS Word]

'''Translations:'''

[http://www.owasp.org/images/d/d8/OWASP_SCP_Quick_Reference_PT-BR_v1.1.pdf Updated Portuguese Version PDF]

'''Project Feedback and Disposition History'''

[http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls XLS Feedback Spreadsheet]

----
== Feedback and Participation: ==

I hope you find the OWASP Secure Coding Practices Quick Reference Guide Project useful. Please contribute to the Project by sending your comments, questions, and suggestions to [mailto:Keith.Turpin@owasp.org keith.turpin@owasp.org].

Project mailing list and archives:
[https://lists.owasp.org/mailman/listinfo/owasp-secure-coding-practices subscription page.]

----
== Project Contributors: ==

If you contribute to this Project, please add your name here 
'''Project Lead:'''
* [[user:Keith Turpin|Keith Turpin]]

'''Contributors:''' 
* Dan Kranz
* Walt Pietrowski
* Catherine Spencer
* [mailto:Caleb.mcgary@gmail.com Caleb McGary]
* [mailto:bradcausey@owasp.org Brad Causey]
* [mailto:ludovic.petit@owasp.org Ludovic Petit]
* [mailto:michael.scovetta@gmail.com Michael V. Scovetta]
* [mailto:jim.manico@owasp.org Jim Manico]
* Jason Coleman
* [mailto:anurag.agarwal@yahoo.com Anurag Agarwal]
* [mailto:petand@lvk.cs.msu.su Andrew Petukhov]

==== Project About ====
{{:Projects/OWASP Secure Coding Practices - Quick Reference Guide | Project About}}

__NOTOC__ <headertabs />

[[Category:OWASP_Project|Secure Coding Practices - Quick Reference Guide]] [[Category:OWASP_Document]] [[Category:OWASP_Download]] [[Category:OWASP_Release_Quality_Document|OWASP Release Quality Document]]

OWASP Secure Coding Practices - Quick Reference Guide

2011-02-20T00:48:16Z

Keith Turpin:

==== Main ====
== Welcome to the Secure Coding Practices Quick Reference Guide Project ==

'''NEW Release:''' version 2.0 published November 9th.

The Secure Coding Practices Quick Reference Guide is a technology agnostic set of general software security coding practices, in a comprehensive checklist format, that can be integrated into the development lifecycle. At only 17 pages long, it is easy to read and digest.

The focus is on secure coding requirements, rather then on vulnerabilities and exploits. It includes an introduction to Software Security Principles and a glossary of key terms.

It is designed to serve as a secure coding kick-start tool and easy reference, to help development teams quickly understand secure coding practices.

=== Sections of the Guide: ===

* Table of contents
* Introduction
* Software Security Principles Overview
* Secure Coding Practices Checklist
* Links to useful resources
* Glossary of important terminology

'''Download the current v2 (Stable) release:'''

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.pdf English version PDF]

[http://www.owasp.org/index.php/File:OWASP_SCP_Quick_Reference_Guide_v2.doc English version MS Word]

'''Translations:'''

[http://www.owasp.org/images/e/e2/OWASP_SCP_Quick_Reference_PT-BR_v1.0.pdf Portuguese Version PDF]

'''Project Feedback and Disposition History'''

[http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls XLS Feedback Spreadsheet]

----
== Feedback and Participation: ==

I hope you find the OWASP Secure Coding Practices Quick Reference Guide Project useful. Please contribute to the Project by sending your comments, questions, and suggestions to [mailto:Keith.Turpin@owasp.org keith.turpin@owasp.org].

Project mailing list and archives:
[https://lists.owasp.org/mailman/listinfo/owasp-secure-coding-practices subscription page.]

----
== Project Contributors: ==

If you contribute to this Project, please add your name here 
'''Project Lead:'''
* [[user:Keith Turpin|Keith Turpin]]

'''Contributors:''' 
* Dan Kranz
* Walt Pietrowski
* Catherine Spencer
* [mailto:Caleb.mcgary@gmail.com Caleb McGary]
* [mailto:bradcausey@owasp.org Brad Causey]
* [mailto:ludovic.petit@owasp.org Ludovic Petit]
* [mailto:michael.scovetta@gmail.com Michael V. Scovetta]
* [mailto:jim.manico@owasp.org Jim Manico]
* Jason Coleman
* [mailto:anurag.agarwal@yahoo.com Anurag Agarwal]
* [mailto:petand@lvk.cs.msu.su Andrew Petukhov]

==== Project About ====
{{:Projects/OWASP Secure Coding Practices - Quick Reference Guide | Project About}}

__NOTOC__ <headertabs />

[[Category:OWASP_Project|Secure Coding Practices - Quick Reference Guide]] [[Category:OWASP_Document]] [[Category:OWASP_Download]] [[Category:OWASP_Release_Quality_Document|OWASP Release Quality Document]]

Global Industry Committee - Application 6

2011-02-15T17:40:56Z

Keith Turpin:

Global Industry Committee - Application 6

2011-02-15T17:40:15Z

Keith Turpin:

Summit 2011 Working Sessions/Session077

2011-02-09T20:35:54Z

Keith Turpin:

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Summit 2011 Working Sessions test tab</noinclude>
|-

| summit_session_attendee_name1 = Matthew Chalmers
| summit_session_attendee_email1 = matthew.chalmers@owasp.org
| summit_session_attendee_username1 =
| summit_session_attendee_company1=[http://www.rockwellautomation.com/ http://www.rockwellautomation.com/lib/images/ralogo_web.gif]
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed1=

| summit_session_attendee_name2 = Dinis Cruz
| summit_session_attendee_email2 = dinis.cruz@owasp.org
| summit_session_attendee_username2 =
| summit_session_attendee_company2=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed2=

| summit_session_attendee_name3 = Mark Bristow
| summit_session_attendee_email3 = mark.bristow@owasp.org
| summit_session_attendee_username3 =
| summit_session_attendee_company3= Securicon LLC
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed3=

| summit_session_attendee_name4 = Doug Wilson
| summit_session_attendee_email4 = dougDOTwilsonATowaspDOTorg
| summit_session_attendee_username4 = Dallendoug
| summit_session_attendee_company4= [http://www.mandiant.com Mandiant]
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed4= Concern about balancing growth of OWASP with evolutionary requirements. Most organizations fail to manage their growth, would like to see OWASP not go the same way.

| summit_session_attendee_name5 = Martin Knobloch
| summit_session_attendee_email5 = martin.knobloch@owasp.org
| summit_session_attendee_username5 = knoblochmartin
| summit_session_attendee_company5= PervaSec
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed5=

| summit_session_attendee_name6 =
| summit_session_attendee_email6 =
| summit_session_attendee_username6 =
| summit_session_attendee_company6=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed6=

| summit_session_attendee_name7 =
| summit_session_attendee_email7 =
| summit_session_attendee_username7 =
| summit_session_attendee_company7=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed7=

| summit_session_attendee_name8 =
| summit_session_attendee_email8 =
| summit_session_attendee_username8 =
| summit_session_attendee_company8=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed8=

| summit_session_attendee_name9 =
| summit_session_attendee_email9 =
| summit_session_attendee_username9 =
| summit_session_attendee_company9=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed9=

| summit_session_attendee_name10 =
| summit_session_attendee_email10 =
| summit_session_attendee_username10 =
| summit_session_attendee_company10=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed10=

| summit_session_attendee_name11 =
| summit_session_attendee_email11 =
| summit_session_attendee_username11 =
| summit_session_attendee_company11=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed11=

| summit_session_attendee_name12 =
| summit_session_attendee_email12 =
| summit_session_attendee_username12 =
| summit_session_attendee_company12=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed12=

| summit_session_attendee_name13 =
| summit_session_attendee_email13 =
| summit_session_attendee_username13 =
| summit_session_attendee_company13=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed13=

| summit_session_attendee_name14 =
| summit_session_attendee_email14 =
| summit_session_attendee_username14 =
| summit_session_attendee_company14=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed14=

| summit_session_attendee_name15 =
| summit_session_attendee_email15 =
| summit_session_attendee_username15 =
| summit_session_attendee_company15=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed15=

| summit_session_attendee_name16 =
| summit_session_attendee_email16 =
| summit_session_attendee_username16 =
| summit_session_attendee_company16=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed16=

| summit_session_attendee_name17 =
| summit_session_attendee_email17 =
| summit_session_attendee_username17 =
| summit_session_attendee_company17=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed17=

| summit_session_attendee_name18 =
| summit_session_attendee_email18 =
| summit_session_attendee_username18 =
| summit_session_attendee_company18=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed18=

| summit_session_attendee_name19 =
| summit_session_attendee_email19 =
| summit_session_attendee_username19 =
| summit_session_attendee_company19=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed19=

| summit_session_attendee_name20 =
| summit_session_attendee_email20 =
| summit_session_attendee_username20 =
| summit_session_attendee_company20=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed20=

|-
| summit_track_logo = [[Image:T._owasp.jpg]]
| summit_ws_logo = [[Image:WS._owasp.jpg]]
| summit_session_name = OWASP funding and CEO discussion
| summit_session_url = http://www.owasp.org/index.php/Summit_2011_Working_Sessions/Session077
| mailing_list =
|-

| short_working_session_description= As OWASP grows, a number of critical decisions needs to be made in terms of where OWASP allocates its limited financial resources. For example should OWASP hire a CEO or should it hire other type of staff? This working session will cover both sides of the question and hopefully reach a conclusion and proposal for OWASP Board vote

See the [[Talk:Summit_2011_Working_Sessions/Session077]] page for Arguments for and against OWASP Hiring a CEO

|-

| related_project_name1 =
| related_project_url_1 =

| related_project_name2 =
| related_project_url_2 =

| related_project_name3 =
| related_project_url_3 =

| related_project_name4 =
| related_project_url_4 =

| related_project_name5 =
| related_project_url_5 =

|-

| summit_session_objective_name1=

| summit_session_objective_name2 =

| summit_session_objective_name3 =

| summit_session_objective_name4 =

| summit_session_objective_name5 =

|-

| working_session_date_and_time =

|-

| discussion_model = participants and attendees

|-

| operational_resources = Projector, whiteboards, markers, Internet connectivity, power

|-

| working_session_additional_details = For information related to the CEO discussion please see the '''[[Talk:Summit 2011 Working Sessions/Session077|Discussion]]''' page.

|-

|summit_session_deliverable_name1 = A white paper analyzing the governance structure of OWASP and recommending whether or not the investment in a CEO would be cost-effective.

|summit_session_deliverable_name2 =

|summit_session_deliverable_name3 =

|summit_session_deliverable_name4 =

|summit_session_deliverable_name5 =

|summit_session_deliverable_name6 =

|summit_session_deliverable_name7 =

|summit_session_deliverable_name8 =

|-

| summit_session_leader_name1 = Keith Turpin
| summit_session_leader_email1 = keith.turpin@owasp.org
| summit_session_leader_username1 = Keith_Turpin

| summit_session_leader_name2 =
| summit_session_leader_email2 =
| summit_session_leader_username2 =

| summit_session_leader_name3 =
| summit_session_leader_email3 =
| summit_session_leader_username3 =

|-

| operational_leader_name1 =
| operational_leader_email1 =
| operational_leader_username1 =

|-

| meeting_notes =

|-
| session_name_mask =  Session077
| session_home_page =  Summit_2011_Working_Sessions/Session077
}}

Summit 2011 Working Sessions/Session085

2011-02-03T21:22:09Z

Keith Turpin:

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Summit 2011 Working Sessions test tab</noinclude>
|-

| summit_session_attendee_name1 = Lucas C. Ferreira
| summit_session_attendee_email1 = lucas.ferreira@owasp.org
| summit_session_attendee_username1 = sapao
| summit_session_attendee_company1=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed1=

| summit_session_attendee_name2 =
| summit_session_attendee_email2 =
| summit_session_attendee_username2 =
| summit_session_attendee_company2=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed2=

| summit_session_attendee_name3 =
| summit_session_attendee_email3 =
| summit_session_attendee_username3 =
| summit_session_attendee_company3=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed3=

| summit_session_attendee_name4 =
| summit_session_attendee_email4 =
| summit_session_attendee_username4 =
| summit_session_attendee_company4=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed4=

| summit_session_attendee_name5 =
| summit_session_attendee_email5 =
| summit_session_attendee_username5 =
| summit_session_attendee_company5=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed5=

| summit_session_attendee_name6 =
| summit_session_attendee_email6 =
| summit_session_attendee_username6 =
| summit_session_attendee_company6=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed6=

| summit_session_attendee_name7 =
| summit_session_attendee_email7 =
| summit_session_attendee_username7 =
| summit_session_attendee_company7=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed7=

| summit_session_attendee_name8 =
| summit_session_attendee_email8 =
| summit_session_attendee_username8 =
| summit_session_attendee_company8=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed8=

| summit_session_attendee_name9 =
| summit_session_attendee_email9 =
| summit_session_attendee_username9 =
| summit_session_attendee_company9=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed9=

| summit_session_attendee_name10 =
| summit_session_attendee_email10 =
| summit_session_attendee_username10 =
| summit_session_attendee_company10=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed10=

| summit_session_attendee_name11 =
| summit_session_attendee_email11 =
| summit_session_attendee_username11 =
| summit_session_attendee_company11=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed11=

| summit_session_attendee_name12 =
| summit_session_attendee_email12 =
| summit_session_attendee_username12 =
| summit_session_attendee_company12=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed12=

| summit_session_attendee_name13 =
| summit_session_attendee_email13 =
| summit_session_attendee_username13 =
| summit_session_attendee_company13=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed13=

| summit_session_attendee_name14 =
| summit_session_attendee_email14 =
| summit_session_attendee_username14 =
| summit_session_attendee_company14=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed14=

| summit_session_attendee_name15 =
| summit_session_attendee_email15 =
| summit_session_attendee_username15 =
| summit_session_attendee_company15=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed15=

| summit_session_attendee_name16 =
| summit_session_attendee_email16 =
| summit_session_attendee_username16 =
| summit_session_attendee_company16=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed16=

| summit_session_attendee_name17 =
| summit_session_attendee_email17 =
| summit_session_attendee_username17 =
| summit_session_attendee_company17=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed17=

| summit_session_attendee_name18 =
| summit_session_attendee_email18 =
| summit_session_attendee_username18 =
| summit_session_attendee_company18=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed18=

| summit_session_attendee_name19 =
| summit_session_attendee_email19 =
| summit_session_attendee_username19 =
| summit_session_attendee_company19=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed19=

| summit_session_attendee_name20 =
| summit_session_attendee_email20 =
| summit_session_attendee_username20 =
| summit_session_attendee_company20=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed20=

|-
| summit_track_logo = [[Image:T._metrics.jpg]]
| summit_ws_logo = [[Image:WS._metrics.jpg]]
| summit_session_name = Common structure and numbering for all guides
| summit_session_url = http://www.owasp.org/index.php/Summit_2011_Working_Sessions/Session085
| mailing_list =
|-

| short_working_session_description=
The purpose of this session is to bring together the various document project leaders and other interested parties to discuss the establishment of a common document numbering system. This will also require that applicable document projects have a similar structure, at least in the areas associated with the numbering. That means this session will drive revisions to current projects. Additionally, this is an opportunity to discuss the overall alignment of the release document projects and how they fit into a secure development life cycle.

Some of the document projects that would benefit from this activity include the following, but there are several others not listed :
*[[OWASP Secure Coding Practices - Quick Reference Guide|OWASP Secure Coding Practices - Quick Reference Guide]].........(What to do - Requirements),
*[[OWASP Guide Project|OWASP Development Guide]].......................................(How to do it – Coding guidance),
*[[:Category:OWASP Ruby on Rails Security Guide V2|OWASP Ruby on Rails Security Guide V2]].........................(How to do it – Ruby specific),
*[[OWASP Testing Project|OWASP Testing Guide]]...........................................(How to test it – Pen Testing),
*[[:Category:OWASP Code Review Project|OWASP Code Review Guide]].......................................( How to test it – Code Review),
*[[:Category:OWASP Application Security Verification Standard Project|OWASP Application Security Verification Standard Project]]......(Verify and rate what was done),

|-

| related_project_name1 =
| related_project_url_1 =

| related_project_name2 =
| related_project_url_2 =

| related_project_name3 =
| related_project_url_3 =

| related_project_name4 =
| related_project_url_4 =

| related_project_name5 =
| related_project_url_5 =

|-

| summit_session_objective_name1 = Discuss and review current document project structures and key elements.

| summit_session_objective_name2 = Review proposal to align to ASVS and discuss whether the current version of ASVS provides an adequate baseline.

| summit_session_objective_name3 = Review other options for structure and numbering.

| summit_session_objective_name4 = Develop a draft structure and numbering plan.

| summit_session_objective_name5 = Discuss any dependencies which may exist, such as common nomenclature and definitions.

|-

| working_session_date_and_time =

|-

| discussion_model = participants and attendees

|-

| operational_resources = Projector, whiteboards, markers, Internet connectivity, power

|-

| working_session_additional_details = The presence on this session of the participants of the Working Sessions below is advisable
* [[Summit 2011 Working Sessions/Session052|'''OWASP Testing Guide''']]
* [[Summit 2011 Working Sessions/Session066|'''Development Guide''']]
* [[Summit 2011 Working Sessions/Session053|'''OWASP Java Project''']]
* [[Summit 2011 Working Sessions/Session200|'''OWASP Secure Coding Practices Project''']]

|-

|summit_session_deliverable_name1 = A written recommendation for a unified category and numbering system for applicable document projects.

|summit_session_deliverable_name2 = Agreement from applicable document project leaders to adopt the finalized version of the system.

|summit_session_deliverable_name3 = An implementation plan discussing when projects will implement the new system.

|summit_session_deliverable_name4 =

|summit_session_deliverable_name5 =

|summit_session_deliverable_name6 =

|summit_session_deliverable_name7 =

|summit_session_deliverable_name8 =

|-

| summit_session_leader_name1 = Keith Turpin
| summit_session_leader_email1 = keith.n.turpin@boeing.com
| summit_session_leader_username1 = Keith Turpin

| summit_session_leader_name2 = Matteo Meucci
| summit_session_leader_email2 = matteo.meucci@owasp.org
| summit_session_leader_username2 = Mmeucci

| summit_session_leader_name3 = Vishal Garg
| summit_session_leader_email3 = vishalgrg@gmail.com
| summit_session_leader_username3 = Vishal_Garg

|-

| operational_leader_name1 = Jim Manico
| operational_leader_email1 = jim.manico@owasp.org
| operational_leader_username1 = jmanico

|-

| meeting_notes =

|-
| session_name_mask =  Session085
| session_home_page =  Summit_2011_Working_Sessions/Session085
}}

Summit 2011 Working Sessions/Session201

2011-02-03T18:07:26Z

Keith Turpin:

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Summit 2011 Working Sessions test tab</noinclude>
|-

| summit_session_attendee_name1 = Vishal Garg
| summit_session_attendee_email1 = vishalgrg@gmail.com
| summit_session_attendee_username1 = Vishal_Garg
| summit_session_attendee_company1= AppSecure Labs
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed1=

| summit_session_attendee_name2 = Keith Turpin
| summit_session_attendee_email2 = keith.turpin@owasp.org
| summit_session_attendee_username2 = Keith_Turpin
| summit_session_attendee_company2=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed2=

| summit_session_attendee_name3 =
| summit_session_attendee_email3 =
| summit_session_attendee_username3 =
| summit_session_attendee_company3=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed3=

| summit_session_attendee_name4 =
| summit_session_attendee_email4 =
| summit_session_attendee_username4 =
| summit_session_attendee_company4=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed4=

| summit_session_attendee_name5 =
| summit_session_attendee_email5 =
| summit_session_attendee_username5=
| summit_session_attendee_company5=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed5=

| summit_session_attendee_name6 =
| summit_session_attendee_email6 =
| summit_session_attendee_username6=
| summit_session_attendee_company6=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed6=

| summit_session_attendee_name7 =
| summit_session_attendee_email7 =
| summit_session_attendee_username7=
| summit_session_attendee_company7=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed7=

| summit_session_attendee_name8 =
| summit_session_attendee_email8 =
| summit_session_attendee_username8=
| summit_session_attendee_company8=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed8=

| summit_session_attendee_name9 =
| summit_session_attendee_email9 =
| summit_session_attendee_username9=
| summit_session_attendee_company9=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed9=

| summit_session_attendee_name10 =
| summit_session_attendee_email10 =
| summit_session_attendee_username10=
| summit_session_attendee_company10=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed10=

| summit_session_attendee_name11 =
| summit_session_attendee_email11 =
| summit_session_attendee_username11=
| summit_session_attendee_company11=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed11=

| summit_session_attendee_name12 =
| summit_session_attendee_email12 =
| summit_session_attendee_username12=
| summit_session_attendee_company12 =
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed12=

| summit_session_attendee_name13 =
| summit_session_attendee_email13 =
| summit_session_attendee_username13 =
| summit_session_attendee_company13=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed13=

| summit_session_attendee_name14 =
| summit_session_attendee_email14 =
| summit_session_attendee_username14=
| summit_session_attendee_company14=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed14=

| summit_session_attendee_name15 =
| summit_session_attendee_email15 =
| summit_session_attendee_username15=
| summit_session_attendee_company15=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed15=

| summit_session_attendee_name16 =
| summit_session_attendee_email16 =
| summit_session_attendee_username16=
| summit_session_attendee_company16=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed16=

| summit_session_attendee_name17 =
| summit_session_attendee_email17 =
| summit_session_attendee_username17=
| summit_session_attendee_company17=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed17=

| summit_session_attendee_name18 =
| summit_session_attendee_email18 =
| summit_session_attendee_username18=
| summit_session_attendee_company18=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed18=

| summit_session_attendee_name19 =
| summit_session_attendee_email19 =
| summit_session_attendee_username19=
| summit_session_attendee_company19=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed19=

| summit_session_attendee_name20 =
| summit_session_attendee_email20 =
| summit_session_attendee_username20=
| summit_session_attendee_company20=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed20=

|-
| summit_track_logo = [[Image:T._individual_projects.jpg]]
| summit_ws_logo = [[Image:WS._individual_projects.jpg]]
| summit_session_name = OWASP Common vulnerability list
| summit_session_url = http://www.owasp.org/index.php/Summit_2011_Working_Sessions/Session201
| mailing_list =

|-

| short_working_session_description =

There are many OWASP projects like OWASP Testing Guide, OWASP Code Review Guide, OWASP Developers Guide, etc which discuss on how to look for and remediate various vulnerabilities in a web application. For e.g., people using OWASP Testing Guide to test for vulnerabilities in their application can go through a list of vulnerabilities and test for it but there is no easy way for them to cross reference to dev guide to jump to a specific section and be able to access the relevant information quickly. These vulnerabilities are discussed as individual list in all the guides and there is no easy way to cross-reference all of them.

OWASP Common Vulnerability List will be a lightweight list, which will contain only the vulnerability ID, category, vulnerability name and a brief description. The main objective of this list is to provide a common platform for other guides and tools to provide a link to each other.

|-

| related_project_name1 = OWASP Common Vulnerability List
| related_project_url_1 = http://www.owasp.org/index.php/OWASP_Common_Vulnerability_List

| related_project_name2 = OWASP Testing Project
| related_project_url_2 = http://www.owasp.org/index.php/Category:OWASP_Testing_Project

| related_project_name3 = OWASP Code Review Guide
| related_project_url_3 = http://www.owasp.org/index.php/Category:OWASP_Code_Review_Project

| related_project_name4 = OWASP Building Guide
| related_project_url_4 = http://www.owasp.org/index.php/OWASP_Guide_Project

| related_project_name5 =
| related_project_url_5 =

|-

| summit_session_objective_name1= Build the first version of the OWASP Common vulnerability list

| summit_session_objective_name2 =

| summit_session_objective_name3 =

| summit_session_objective_name4 =

| summit_session_objective_name5 =

|-

| working_session_date_and_time =

|-

| discussion_model = participants and attendees

|-

| operational_resources =

|-

| working_session_additional_details = The goals of OWASP common vulnerability list are: 
1. Serve as a common list to all other OWASP initiatives (Dev Guide, Testing Guide, CR Guide, etc) which has any reference to web application vulnerabilities (just like OWASP common numbering scheme). 
2. Can be referenced by various open source and commercial tools as the list of vulnerabilities being identified or for any other purpose. 
3. Provides a clear requirement for PCI and other compliance laws

|-

|summit_session_deliverable_name1 = Debating the vulnerability list and deliver the first version of the project.

|summit_session_deliverable_name2 =

|summit_session_deliverable_name3 =

|summit_session_deliverable_name4 =

|summit_session_deliverable_name5 =

|summit_session_deliverable_name6 =

|summit_session_deliverable_name7 =

|summit_session_deliverable_name8 =

|-

| summit_session_leader_name1 = Matteo Meucci
| summit_session_leader_email1 = matteo.meucci@owasp.org
| summit_session_leader_username1 = Mmeucci

| summit_session_leader_name2 = Eoin Keary
| summit_session_leader_email2 = eoin.keary@owasp.org
| summit_session_leader_username2 = EoinKeary

| summit_session_leader_name3 = Anurag Agarwal
| summit_session_leader_email3 = Anurag.Agarwal@owasp.org
| summit_session_leader_username3 =

|-

| operational_leader_name1 =
| operational_leader_email1 =
| operational_leader_username1 =
|-

| meeting_notes =

|-
| session_name_mask =  Session201
| session_home_page =  Summit_2011_Working_Sessions/Session201
}}

Summit 2011 Working Sessions/Session052

2011-02-03T18:01:22Z

Keith Turpin:

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Summit 2011 Working Sessions test tab</noinclude>
|-

| summit_session_attendee_name1 = Nishi Kumar
| summit_session_attendee_email1 = nishi.kumar@owasp.org
| summit_session_attendee_username1 =
| summit_session_attendee_company1= FIS
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed1=

| summit_session_attendee_name2 = Cecil Su
| summit_session_attendee_email2 = cecil.su@owasp.org
| summit_session_attendee_username2 =
| summit_session_attendee_company2= GT
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed2=

| summit_session_attendee_name3 = Lucas C. Ferreira
| summit_session_attendee_email3 = lucas.ferreira@owasp.org
| summit_session_attendee_username3 =
| summit_session_attendee_company3=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed3=

| summit_session_attendee_name4 = Keith Turpin
| summit_session_attendee_email4 = keith.turpin@owasp.org
| summit_session_attendee_username4 = Keith_Turpin
| summit_session_attendee_company4=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed4=

| summit_session_attendee_name5 = Achim Hoffmann
| summit_session_attendee_email5 = achim@owasp.org
| summit_session_attendee_username5 = Achim
| summit_session_attendee_company5= sic[!]sec
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed5=

| summit_session_attendee_name6 = Tom Neaves
| summit_session_attendee_email6 = tom.neaves@verizonbusiness.com
| summit_session_attendee_username6 =
| summit_session_attendee_company6= Verizon Business
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed6=

| summit_session_attendee_name7 = Vishal Garg
| summit_session_attendee_email7 = vishalgrg@gmail.com
| summit_session_attendee_username7 =
| summit_session_attendee_company7= AppSecure Labs
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed7=

| summit_session_attendee_name8 = Giorgio Fedon
| summit_session_attendee_email8 = giorgio.fedon@mindedsecurity.com
| summit_session_attendee_username8 =
| summit_session_attendee_company8= Minded Security
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed8=

| summit_session_attendee_name9 = Stefano Di Paola
| summit_session_attendee_email9 = stefano@owasp.org
| summit_session_attendee_username9 =
| summit_session_attendee_company9= Minded Security
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed9=

| summit_session_attendee_name10 = Pavol Luptak
| summit_session_attendee_email10 = pavol.luptak@nethemba.com
| summit_session_attendee_username10 =
| summit_session_attendee_company10= Nethemba
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed10=

| summit_session_attendee_name11 = Andre Gironda
| summit_session_attendee_email11 = andregATthegmail
| summit_session_attendee_username11 = Dre
| summit_session_attendee_company11=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed11= Will be available remotely

| summit_session_attendee_name12 =
| summit_session_attendee_email12 =
| summit_session_attendee_username12 =
| summit_session_attendee_company12=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed12=

| summit_session_attendee_name13 =
| summit_session_attendee_email13 =
| summit_session_attendee_username13 =
| summit_session_attendee_company13=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed13=

| summit_session_attendee_name14 =
| summit_session_attendee_email14 =
| summit_session_attendee_username14 =
| summit_session_attendee_company14=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed14=

| summit_session_attendee_name15 =
| summit_session_attendee_email15 =
| summit_session_attendee_username15 =
| summit_session_attendee_company15=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed15=

| summit_session_attendee_name16 =
| summit_session_attendee_email16 =
| summit_session_attendee_username16 =
| summit_session_attendee_company16=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed16=

| summit_session_attendee_name17 =
| summit_session_attendee_email17 =
| summit_session_attendee_username17 =
| summit_session_attendee_company17=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed17=

| summit_session_attendee_name18 =
| summit_session_attendee_email18 =
| summit_session_attendee_username18 =
| summit_session_attendee_company18=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed18=

| summit_session_attendee_name19 =
| summit_session_attendee_email19 =
| summit_session_attendee_username19 =
| summit_session_attendee_company19=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed19=

| summit_session_attendee_name20 =
| summit_session_attendee_email20 =
| summit_session_attendee_username20 =
| summit_session_attendee_company20=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed20=

|-
| summit_track_logo = [[Image:T._individual_projects.jpg]]
| summit_ws_logo = [[Image:WS._individual_projects.jpg]]
| summit_session_name = OWASP Testing Guide
| summit_session_url = http://www.owasp.org/index.php/Summit_2011_Working_Sessions/Session052
| mailing_list =
|-
| short_working_session_description= We need to define: 
 - an updated vulnerability list to test (from the OWASP Common Vulnerabiltity list)
 - Create a more readable guide, eliminating some sections that are not
really useful,
 - Insert new testing techniques: HTTP Verb tampering, HTTP Parameter
Pollutions, etc.,
 - Rationalize some sections as Session Management Testing,
 - Debate if create a new section: Client side security and Firefox
extensions testing.

|-

| related_project_name1 = OWASP Testing Project
| related_project_url_1 = http://www.owasp.org/index.php/Category:OWASP_Testing_Project

| related_project_name2 =
| related_project_url_2 =

| related_project_name3 =
| related_project_url_3 =

| related_project_name4 =
| related_project_url_4 =

| related_project_name5 =
| related_project_url_5 =

|-

| summit_session_objective_name1= Show the v3, and debating what we need to create an excellent v4

| summit_session_objective_name2 =

| summit_session_objective_name3 =

| summit_session_objective_name4 =

| summit_session_objective_name5 =

|-

| working_session_date_and_time = TODO

|-

| discussion_model = participants and attendees

|-

| operational_resources = Projector, whiteboards, markers, Internet connectivity, power

|-

| working_session_additional_details = The presence of participants on the Working Session [[Summit 2011 Working Sessions/Session085|'''Common structure and numbering for all guides''']] is advisable.

|-

|summit_session_deliverable_name1 = An updated outline for the testing guide that is tied into the OWASP common numbering scheme

|summit_session_deliverable_name2 = A short white paper with ideas for revisions to the Testing Guide for evaluation and discussion by the community at large.

|summit_session_deliverable_name3 = A committed project manager who can reach out to experts to get the document completed.

|summit_session_deliverable_name4 =

|summit_session_deliverable_name5 =

|summit_session_deliverable_name6 =

|summit_session_deliverable_name7 =

|summit_session_deliverable_name8 =

|-

| summit_session_leader_name1 = Matteo Meucci
| summit_session_leader_email1 = matteo.meucci@owasp.org

| summit_session_leader_name2 =
| summit_session_leader_email2 =
| summit_session_leader_username2 =

| summit_session_leader_name3 =
| summit_session_leader_email3 =
| summit_session_leader_username3 =
|-

| operational_leader_name1 = Giorgio Fedon
| operational_leader_email1 =

|-

| meeting_notes =

|-
| session_name_mask =  Session052
| session_home_page =  Summit_2011_Working_Sessions/Session052
}}

Summit 2011 Working Sessions/Session067

2011-02-03T18:00:21Z

Keith Turpin:

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Summit 2011 Working Sessions test tab</noinclude>
|-

| summit_session_attendee_name1 = Nishi Kumar
| summit_session_attendee_email1 = nishi.kumar@owasp.org
| summit_session_attendee_username1 =
| summit_session_attendee_company1= FIS
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed1=

| summit_session_attendee_name2 = Steven van der Baan
| summit_session_attendee_email2 = steven.van.der.baan@owasp.org
| summit_session_attendee_username2 =
| summit_session_attendee_company2=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed2=

| summit_session_attendee_name3 = Wojciech Dworakowski
| summit_session_attendee_email3 = wojciech.dworakowski@securing.pl
| summit_session_attendee_username3 =
| summit_session_attendee_company3= SecuRing
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed3= ASVS extensions. Requirements mapping to CWE, Top10 and other OWASP projects. ASVS requirements and risk impact. Level1 - tools availability.

| summit_session_attendee_name4 = Jim Manico
| summit_session_attendee_email4 = jim.manico@owasp.org
| summit_session_attendee_username4 =
| summit_session_attendee_company4= Independent Consultant
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed4= Love for ASVS

| summit_session_attendee_name5 = Vishal Garg
| summit_session_attendee_email5 = vishalgrg@gmail.com
| summit_session_attendee_username5 =
| summit_session_attendee_company5= AppSecure Labs
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed5= ASVS adoption within and outside OWASP. One example - OWASP Development Guide.

| summit_session_attendee_name6 = Abraham Kang
| summit_session_attendee_email6 =
| summit_session_attendee_username6 =
| summit_session_attendee_company6=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed6=

| summit_session_attendee_name7 = Keith Turpin
| summit_session_attendee_email7 = keith.turpin@owasp.org
| summit_session_attendee_username7 = Keith_Turpin
| summit_session_attendee_company7=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed7=

| summit_session_attendee_name8 =
| summit_session_attendee_email8 =
| summit_session_attendee_username8 =
| summit_session_attendee_company8=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed8=

| summit_session_attendee_name9 =
| summit_session_attendee_email9 =
| summit_session_attendee_username9 =
| summit_session_attendee_company9=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed9=

| summit_session_attendee_name10 =
| summit_session_attendee_email10 =
| summit_session_attendee_username10 =
| summit_session_attendee_company10=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed10=

| summit_session_attendee_name11 =
| summit_session_attendee_email11 =
| summit_session_attendee_username11 =
| summit_session_attendee_company11=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed11=

| summit_session_attendee_name12 =
| summit_session_attendee_email12 =
| summit_session_attendee_username12 =
| summit_session_attendee_company12=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed12=

| summit_session_attendee_name13 =
| summit_session_attendee_email13 =
| summit_session_attendee_username13 =
| summit_session_attendee_company13=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed13=

| summit_session_attendee_name14 =
| summit_session_attendee_email14 =
| summit_session_attendee_username14 =
| summit_session_attendee_company14=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed14=

| summit_session_attendee_name15 =
| summit_session_attendee_email15 =
| summit_session_attendee_username15 =
| summit_session_attendee_company15=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed15=

| summit_session_attendee_name16 =
| summit_session_attendee_email16 =
| summit_session_attendee_username16 =
| summit_session_attendee_company16=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed16=

| summit_session_attendee_name17 =
| summit_session_attendee_email17 =
| summit_session_attendee_username17 =
| summit_session_attendee_company17=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed17=

| summit_session_attendee_name18 =
| summit_session_attendee_email18 =
| summit_session_attendee_username18 =
| summit_session_attendee_company18=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed18=

| summit_session_attendee_name19 =
| summit_session_attendee_email19 =
| summit_session_attendee_username19 =
| summit_session_attendee_company19=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed19=

| summit_session_attendee_name20 =
| summit_session_attendee_email20 =
| summit_session_attendee_username20 =
| summit_session_attendee_company20=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed20=

|-
| summit_track_logo = [[Image:T._individual_projects.jpg]]
| summit_ws_logo = [[Image:WS._individual_projects.jpg]]
| summit_session_name = ASVS Project
| summit_session_url = http://www.owasp.org/index.php/Summit_2011_Working_Sessions/Session067

|-

| short_working_session_description=Discussion on the Application Security Verification Standard (expierences, ideas for improvements)

|-

| related_project_name1 = Application Security Verification Standard (ASVS)
| related_project_url_1 = http://www.owasp.org/index.php/Category:OWASP_Application_Security_Verification_Standard_Project

| related_project_name2 =
| related_project_url_2 =

| related_project_name3 =
| related_project_url_3 =

| related_project_name4 =
| related_project_url_4 =

| related_project_name5 =
| related_project_url_5 =

|-

| summit_session_objective_name1 = Discuss expierences with using ASVS

| summit_session_objective_name2 = Discuss specific requirements and ideas for improvement

| summit_session_objective_name3 = Create a white paper with ideas for revisions to the ASVS

| summit_session_objective_name4 =

| summit_session_objective_name5 =

|-

| working_session_date_and_time =

|-

| discussion_model = participants and attendees

|-

| operational_resources = Projector, whiteboards, markers, Internet connectivity, power

|-

| working_session_additional_details =

|-

|summit_session_deliverable_name1 = A short white paper with ideas for revisions to the ASVS, ready for evaluation by the community at large. Actual suggested revisions to the document are helpful, but not required if time does not allow.

|summit_session_deliverable_name2 =

|summit_session_deliverable_name3 =

|summit_session_deliverable_name4 =

|summit_session_deliverable_name5 =

|summit_session_deliverable_name6 =

|summit_session_deliverable_name7 =

|summit_session_deliverable_name8 =

|-

| summit_session_leader_name1 = Matthias Rohr
| summit_session_leader_email1 = mail@matthiasrohr.de

| summit_session_leader_name2 =
| summit_session_leader_email2 =
| summit_session_leader_username2 =

| summit_session_leader_name3 =
| summit_session_leader_email3 =
| summit_session_leader_username3 =

|-

| operational_leader_name1 =
| operational_leader_email1 =
| operational_leader_username1 =
|-

| meeting_notes =

|-
| session_name_mask =  Session067
| session_home_page =  Summit_2011_Working_Sessions/Session067
}}

Summit 2011 Working Sessions/Session066

2011-02-03T17:57:40Z

Keith Turpin:

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Summit 2011 Working Sessions test tab</noinclude>
|-

| summit_session_attendee_name1 = Matthias Rohr
| summit_session_attendee_email1 = m.rohr@sec-consult.com
| summit_session_attendee_username1 =
| summit_session_attendee_company1= SEC Consult
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed1=

| summit_session_attendee_name2 = Eoin Keary
| summit_session_attendee_email2 = eoin.keary@owasp.org
| summit_session_attendee_username2 =
| summit_session_attendee_company2=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed2=

| summit_session_attendee_name3 = Steven van der Baan
| summit_session_attendee_email3 = steven.van.der.Baan@owasp.org
| summit_session_attendee_username3 =
| summit_session_attendee_company3=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed3=

| summit_session_attendee_name4 = Abraham Kang
| summit_session_attendee_email4 =
| summit_session_attendee_username4 =
| summit_session_attendee_company4=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed4=

| summit_session_attendee_name5 = Keith Turpin
| summit_session_attendee_email5 = keith.turpin@owasp.org
| summit_session_attendee_username5 = Keith_Turpin
| summit_session_attendee_company5=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed5=

| summit_session_attendee_name6 =
| summit_session_attendee_email6 =
| summit_session_attendee_username6 =
| summit_session_attendee_company6=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed6=

| summit_session_attendee_name7 =
| summit_session_attendee_email7 =
| summit_session_attendee_username7 =
| summit_session_attendee_company7=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed7=

| summit_session_attendee_name8 =
| summit_session_attendee_email8 =
| summit_session_attendee_username8 =
| summit_session_attendee_company8=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed8=

| summit_session_attendee_name9 =
| summit_session_attendee_email9 =
| summit_session_attendee_username9 =
| summit_session_attendee_company9=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed9=

| summit_session_attendee_name10 =
| summit_session_attendee_email10 =
| summit_session_attendee_username10 =
| summit_session_attendee_company10=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed10=

| summit_session_attendee_name11 =
| summit_session_attendee_email11 =
| summit_session_attendee_username11 =
| summit_session_attendee_company11=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed11=

| summit_session_attendee_name12 =
| summit_session_attendee_email12 =
| summit_session_attendee_username12 =
| summit_session_attendee_company12=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed12=

| summit_session_attendee_name13 =
| summit_session_attendee_email13 =
| summit_session_attendee_username13 =
| summit_session_attendee_company13=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed13=

| summit_session_attendee_name14 =
| summit_session_attendee_email14 =
| summit_session_attendee_username14 =
| summit_session_attendee_company14=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed14=

| summit_session_attendee_name15 =
| summit_session_attendee_email15 =
| summit_session_attendee_username15 =
| summit_session_attendee_company15=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed15=

| summit_session_attendee_name16 =
| summit_session_attendee_email16 =
| summit_session_attendee_username16 =
| summit_session_attendee_company16=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed16=

| summit_session_attendee_name17 =
| summit_session_attendee_email17 =
| summit_session_attendee_username17 =
| summit_session_attendee_company17=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed17=

| summit_session_attendee_name18 =
| summit_session_attendee_email18 =
| summit_session_attendee_username18 =
| summit_session_attendee_company18=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed18=

| summit_session_attendee_name19 =
| summit_session_attendee_email19 =
| summit_session_attendee_username19 =
| summit_session_attendee_company19=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed19=

| summit_session_attendee_name20 =
| summit_session_attendee_email20 =
| summit_session_attendee_username20 =
| summit_session_attendee_company20=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed20=

|-
| summit_track_logo = [[Image:T._individual_projects.jpg]]
| summit_ws_logo = [[Image:WS._individual_projects.jpg]]
| summit_session_name = Development Guide
| summit_session_url = http://www.owasp.org/index.php/Summit_2011_Working_Sessions/Session066
| mailing_list =

|-

| short_working_session_description= If done from the earliest stages, secure applications cost about the same to develop as insecure applications, but are far more cost effective in the long run. The primary aim of the OWASP Development Guide is to help businesses, developers, designers and solution architects to build secure web applications from the outset. The next version of the guide is an extension from the existing version with further enhancements to make it more usable for all stake holders. The aim of the working session is to have a discussion on the shortcomings of the existing guide and to make it a basis for further enhancements, alignment of the guide to ASVS Standard and OWASP common numbering scheme, potential for alignment of all three OWASP guides (DG, CRG and TG) and the ways to improve the usefulness of the guide to all the stake holders.

|-

| related_project_name1 = Project Wiki Page
| related_project_url_1 = http://www.owasp.org/index.php/OWASP_Guide_Project#tab=Project_About

| related_project_name2 =
| related_project_url_2 =

| related_project_name3 =
| related_project_url_3 =

| related_project_name4 =
| related_project_url_4 =

| related_project_name5 =
| related_project_url_5 =

|-

| summit_session_objective_name1 = Discussion on major enhancements to the next version of the development guide

| summit_session_objective_name2 = Discussion on aligning the guide to ASVS standard and OWASP common numbering scheme

| summit_session_objective_name3 = Discussion on improving the usefulness of the guide to all stakeholders

| summit_session_objective_name4 = Collaboration with other OWASP guides - Top 10, ASDR, CRG and TG

| summit_session_objective_name5 =

|-

| working_session_date_and_time =

|-

| discussion_model = participants and attendees

|-

| operational_resources = Projector, whiteboards, markers, Internet connectivity, power

|-

| working_session_additional_details = The presence of participants on the Working Session [[Summit 2011 Working Sessions/Session085|'''Common structure and numbering for all guides''']] is advisable.

|-

|summit_session_deliverable_name1 = An updated outline for the development guide that is tied into the OWASP common numbering scheme

|summit_session_deliverable_name2 = A short white paper with ideas for revisions to the Development Guide for evaluation and discussion by the community at large.

|summit_session_deliverable_name3 = A committed project manager who can reach out to experts to get the document completed.

|summit_session_deliverable_name4 =

|summit_session_deliverable_name5 =

|summit_session_deliverable_name6 =

|summit_session_deliverable_name7 =

|summit_session_deliverable_name8 =

|-

| summit_session_leader_name1 = Vishal Garg
| summit_session_leader_email1 = vishalgrg@gmail.com

| summit_session_leader_name2 =
| summit_session_leader_email2 =
| summit_session_leader_username2 =

| summit_session_leader_name3 =
| summit_session_leader_email3 =
| summit_session_leader_username3 =
|-

| operational_leader_name1 =
| operational_leader_email1 =
| operational_leader_username1 =

|-

| meeting_notes =

|-
| session_name_mask =  Session066
| session_home_page =  Summit_2011_Working_Sessions/Session066
}}

Summit 2011 Working Sessions/Session042

2011-02-03T17:55:29Z

Keith Turpin:

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Summit 2011 Working Sessions test tab</noinclude>
|-

| summit_session_attendee_name1 = Martin Knobloch
| summit_session_attendee_email1 = martin.knobloch@owasp.org
| summit_session_attendee_username1 =
| summit_session_attendee_company1=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed1=

| summit_session_attendee_name2 = Nishi Kumar
| summit_session_attendee_email2 = nishi.kumar@owasp.org
| summit_session_attendee_username2 =
| summit_session_attendee_company2= FIS
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed2=

| summit_session_attendee_name3 = Jason Taylor
| summit_session_attendee_email3 = jtaylor@securityinnovation.com
| summit_session_attendee_username3 =
| summit_session_attendee_company3=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed3=

| summit_session_attendee_name4 = Carlos Serrão
| summit_session_attendee_email4 = carlos.serrao@iscte.pt
| summit_session_attendee_username4 =
| summit_session_attendee_company4=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed4=

| summit_session_attendee_name5 = Konstantinos Papapanagiotou
| summit_session_attendee_email5 = Konstantinos@owasp.org
| summit_session_attendee_username5 =
| summit_session_attendee_company5=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed5=

| summit_session_attendee_name6 = Daniel Brzozowski
| summit_session_attendee_email6 = daniel@brzozowski.biz
| summit_session_attendee_username6 = Daniel Brzozowski
| summit_session_attendee_company6=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed6=

| summit_session_attendee_name7 = L. Gustavo C. Barbato
| summit_session_attendee_email7 = lgbarbato@owasp.org
| summit_session_attendee_username7 = Gustavo Barbato
| summit_session_attendee_company7= Dell
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed7=

| summit_session_attendee_name8 = Keith Turpin
| summit_session_attendee_email8 = keith.turpin@owasp.org
| summit_session_attendee_username8 = Keith_Turpin
| summit_session_attendee_company8=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed8=

| summit_session_attendee_name9 =
| summit_session_attendee_email9 =
| summit_session_attendee_username9 =
| summit_session_attendee_company9=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed9=

| summit_session_attendee_name10 =
| summit_session_attendee_email10 =
| summit_session_attendee_username10 =
| summit_session_attendee_company10=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed10=

| summit_session_attendee_name11 =
| summit_session_attendee_email11 =
| summit_session_attendee_username11 =
| summit_session_attendee_company11=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed11=

| summit_session_attendee_name12 =
| summit_session_attendee_email12 =
| summit_session_attendee_username12 =
| summit_session_attendee_company12=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed12=

| summit_session_attendee_name13 =
| summit_session_attendee_email13 =
| summit_session_attendee_username13 =
| summit_session_attendee_company13=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed13=

| summit_session_attendee_name14 =
| summit_session_attendee_email14 =
| summit_session_attendee_username14 =
| summit_session_attendee_company14=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed14=

| summit_session_attendee_name15 =
| summit_session_attendee_email15 =
| summit_session_attendee_username15 =
| summit_session_attendee_company15=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed15=

| summit_session_attendee_name16 =
| summit_session_attendee_email16 =
| summit_session_attendee_username16 =
| summit_session_attendee_company16=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed16=

| summit_session_attendee_name17 =
| summit_session_attendee_email17 =
| summit_session_attendee_username17 =
| summit_session_attendee_company17=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed17=

| summit_session_attendee_name18 =
| summit_session_attendee_email18 =
| summit_session_attendee_username18 =
| summit_session_attendee_company18=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed18=

| summit_session_attendee_name19 =
| summit_session_attendee_email19 =
| summit_session_attendee_username19 =
| summit_session_attendee_company19=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed19=

| summit_session_attendee_name20 =
| summit_session_attendee_email20 =
| summit_session_attendee_username20 =
| summit_session_attendee_company20=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed20=

|-
| summit_track_logo = [[Image:T._university.jpg]]
| summit_ws_logo = [[Image:WS._university.jpg]]
| summit_session_name = Developer's Security Training Package
| summit_session_url = http://www.owasp.org/index.php/Summit_2011_Working_Sessions/Session042
| mailing_list =

|-

| short_working_session_description= Compile a set of documents and slides to assist in the delivery of a security training class for developers

|-

| related_project_name1 = OWASP Development Guide, OWASP Secure Coding Practices - Quick Reference Guide, OWASP Enterprise Security API (ESAPI) Project,
| related_project_url_1 =

| related_project_name2 = OWASP Code Review Guide,
| related_project_url_2 =

| related_project_name3 = OWASP Application Security Verification Standard Project,
| related_project_url_3 =

| related_project_name4 = OWASP Testing Guide,
| related_project_url_4 =

| related_project_name5 = OWASP Top Ten Project
| related_project_url_5 =

|-

| summit_session_objective_name1= To create an organized package that can be used by companies for the purposes of educating developers on securely coding web applications and web services

| summit_session_objective_name2 =

| summit_session_objective_name3 =

| summit_session_objective_name4 =

| summit_session_objective_name5 =

|-

| working_session_date_and_time =

|-

| discussion_model = participants and attendees

|-

| operational_resources = Projector, whiteboards, markers, Internet connectivity, power

|-

| working_session_additional_details =

|-

|summit_session_deliverable_name1 = A curriculum for the above based on OWASP materials and a plan to build it out.

|summit_session_deliverable_name2 =

|summit_session_deliverable_name3 =

|summit_session_deliverable_name4 =

|summit_session_deliverable_name5 =

|summit_session_deliverable_name6 =

|summit_session_deliverable_name7 =

|summit_session_deliverable_name8 =

|-

| summit_session_leader_name1 = Brad Causey
| summit_session_leader_email1 = bradcausey@owasp.org

| summit_session_leader_name2 =
| summit_session_leader_email2 =
| summit_session_leader_username2 =

| summit_session_leader_name3 =
| summit_session_leader_email3 =
| summit_session_leader_username3 =

|-

| operational_leader_name1 =
| operational_leader_email1 =
| operational_leader_username1 =
|-

| meeting_notes =

|-

| session_name_mask =  Session042
| session_home_page =  Summit_2011_Working_Sessions/Session042
}}

Summit 2011 Working Sessions/Session092

2011-02-02T23:37:42Z

Keith Turpin:

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Summit 2011 Working Sessions test tab</noinclude>
|-

| summit_session_attendee_name1 = Lucas C. Ferreira
| summit_session_attendee_email1 = lucas.ferreira@owasp.org
| summit_session_attendee_username1 =
| summit_session_attendee_company1=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed1=

| summit_session_attendee_name1 = Eoin Keary
| summit_session_attendee_email1 = eoin.keary@owasp.org
| summit_session_attendee_username1 = EoinKeary
| summit_session_attendee_company1=Ernst & Young
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed1=

| summit_session_attendee_name2 = Achim Hoffmann
| summit_session_attendee_email2 = achim@owasp.org
| summit_session_attendee_username2 = Achim
| summit_session_attendee_company2= sic[!]sec
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed2=

| summit_session_attendee_name3 = Steven van der Baan
| summit_session_attendee_email3 = steven.van.der.baan@owasp.org
| summit_session_attendee_username3 =
| summit_session_attendee_company3=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed3=

| summit_session_attendee_name4 = Cecil Su
| summit_session_attendee_email4 = cecil.su@owasp.org
| summit_session_attendee_username4 =
| summit_session_attendee_company4=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed4=

| summit_session_attendee_name5 = Sherif Koussa
| summit_session_attendee_email5 = sherif.koussa@owasp.org
| summit_session_attendee_username5 =
| summit_session_attendee_company5= Software Secured
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed5=

| summit_session_attendee_name6 = Matthias Rohr
| summit_session_attendee_email6 = m.rohr@sec-consult.com
| summit_session_attendee_username6 =
| summit_session_attendee_company6= SEC Consult
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed6=

| summit_session_attendee_name7 = Vishal Garg
| summit_session_attendee_email7 = vishalgrg@gmail.com
| summit_session_attendee_username7 =
| summit_session_attendee_company7= AppSecure Labs
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed7=

| summit_session_attendee_name8 = Chris Eng
| summit_session_attendee_email8 = ceng@veracode.com
| summit_session_attendee_username8 =
| summit_session_attendee_company8= Veracode
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed8=

| summit_session_attendee_name9 = Nishi Kumar
| summit_session_attendee_email9 = nishi.kumar@owasp.org
| summit_session_attendee_username9 =
| summit_session_attendee_company9= FIS
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed9=

| summit_session_attendee_name10 = Michael Coates
| summit_session_attendee_email10 = mcoates@mozilla.org
| summit_session_attendee_username10 =
| summit_session_attendee_company10= Mozilla
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed10=

| summit_session_attendee_name11 = Giorgio Fedon
| summit_session_attendee_email11 =
| summit_session_attendee_username11 = gfedon
| summit_session_attendee_company11=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed11=

| summit_session_attendee_name12 = Keith Turpin
| summit_session_attendee_email12 = keith.turpin@owasp.org
| summit_session_attendee_username12 = Keith_Turpin
| summit_session_attendee_company12=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed12=

| summit_session_attendee_name13 =
| summit_session_attendee_email13 =
| summit_session_attendee_username13 =
| summit_session_attendee_company13=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed13=

| summit_session_attendee_name14 =
| summit_session_attendee_email14 =
| summit_session_attendee_username14 =
| summit_session_attendee_company14=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed14=

| summit_session_attendee_name15 =
| summit_session_attendee_email15 =
| summit_session_attendee_username15 =
| summit_session_attendee_company15=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed15=

| summit_session_attendee_name16 =
| summit_session_attendee_email16 =
| summit_session_attendee_username16 =
| summit_session_attendee_company16=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed16=

| summit_session_attendee_name17 =
| summit_session_attendee_email17 =
| summit_session_attendee_username17 =
| summit_session_attendee_company17=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed17=

| summit_session_attendee_name18 =
| summit_session_attendee_email18 =
| summit_session_attendee_username18 =
| summit_session_attendee_company18=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed18=

| summit_session_attendee_name19 =
| summit_session_attendee_email19 =
| summit_session_attendee_username19 =
| summit_session_attendee_company19=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed19=

| summit_session_attendee_name20 =
| summit_session_attendee_email20 =
| summit_session_attendee_username20 =
| summit_session_attendee_company20=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed20=
|-
| summit_track_logo = [[Image:T._mitigation.jpg]]
| summit_ws_logo = [[Image:WS._mitigation.jpg]]
| summit_session_name = Scaling Web Application Security Testing
| summit_session_url = http://www.owasp.org/index.php/Summit_2011_Working_Sessions/Session092
| mailing_list =

|-

| short_working_session_description= One of the challenge that large companies have is how to scale web application security testing when hundreds if not thousands of applications need to be retested regularly. The objective of this Working Sessions is for the security teams that are trying to do this today (including Tools and Host based solutions) to exchange ideas, expose current problems and share solutions

|-

| related_project_name1 =
| related_project_url_1 =

| related_project_name2 =
| related_project_url_2 =

| related_project_name3 =
| related_project_url_3 =

| related_project_name4 =
| related_project_url_4 =

| related_project_name5 =
| related_project_url_5 =

|-

| summit_session_objective_name1=

| summit_session_objective_name2 =

| summit_session_objective_name3 =

| summit_session_objective_name4 =

| summit_session_objective_name5 =

|-

| working_session_date_and_time =

|-

| discussion_model = participants and attendees

|-

| operational_resources = Projector, whiteboards, markers, Internet connectivity, power

|-

| working_session_additional_details =

|-

|summit_session_deliverable_name1 = A white paper describing strategies for scaling application security verification programs beyond a single application at a time. Should address achieving coverage of expected controls, depth of assurance, both automated and manual approaches, custom rules, rule management, rule deployment.

|summit_session_deliverable_name2 =

|summit_session_deliverable_name3 =

|summit_session_deliverable_name4 =

|summit_session_deliverable_name5 =

|summit_session_deliverable_name6 =

|summit_session_deliverable_name7 =

|summit_session_deliverable_name8 =

|-

| summit_session_leader_name1 = Arian Evans
| summit_session_leader_email1 =
| summit_session_leader_username1 =

| summit_session_leader_name2 = Dinis Cruz
| summit_session_leader_email2 = dinis.cruz@owasp.org
| summit_session_leader_username2 = Dinis.cruz

| summit_session_leader_name3 =
| summit_session_leader_email3 =
| summit_session_leader_username3 =

|-

| operational_leader_name1 =
| operational_leader_email1 =
| operational_leader_username1 =

|-

| meeting_notes =

|-
| session_name_mask =  Session092
| session_home_page =  Summit_2011_Working_Sessions/Session092
}}

Summit 2011 Working Sessions/Session085

2011-02-02T20:20:25Z

Keith Turpin:

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Summit 2011 Working Sessions test tab</noinclude>
|-

| summit_session_attendee_name1 = Lucas C. Ferreira
| summit_session_attendee_email1 = lucas.ferreira@owasp.org
| summit_session_attendee_username1 = sapao
| summit_session_attendee_company1=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed1=

| summit_session_attendee_name2 =
| summit_session_attendee_email2 =
| summit_session_attendee_username2 =
| summit_session_attendee_company2=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed2=

| summit_session_attendee_name3 =
| summit_session_attendee_email3 =
| summit_session_attendee_username3 =
| summit_session_attendee_company3=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed3=

| summit_session_attendee_name4 =
| summit_session_attendee_email4 =
| summit_session_attendee_username4 =
| summit_session_attendee_company4=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed4=

| summit_session_attendee_name5 =
| summit_session_attendee_email5 =
| summit_session_attendee_username5 =
| summit_session_attendee_company5=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed5=

| summit_session_attendee_name6 =
| summit_session_attendee_email6 =
| summit_session_attendee_username6 =
| summit_session_attendee_company6=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed6=

| summit_session_attendee_name7 =
| summit_session_attendee_email7 =
| summit_session_attendee_username7 =
| summit_session_attendee_company7=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed7=

| summit_session_attendee_name8 =
| summit_session_attendee_email8 =
| summit_session_attendee_username8 =
| summit_session_attendee_company8=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed8=

| summit_session_attendee_name9 =
| summit_session_attendee_email9 =
| summit_session_attendee_username9 =
| summit_session_attendee_company9=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed9=

| summit_session_attendee_name10 =
| summit_session_attendee_email10 =
| summit_session_attendee_username10 =
| summit_session_attendee_company10=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed10=

| summit_session_attendee_name11 =
| summit_session_attendee_email11 =
| summit_session_attendee_username11 =
| summit_session_attendee_company11=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed11=

| summit_session_attendee_name12 =
| summit_session_attendee_email12 =
| summit_session_attendee_username12 =
| summit_session_attendee_company12=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed12=

| summit_session_attendee_name13 =
| summit_session_attendee_email13 =
| summit_session_attendee_username13 =
| summit_session_attendee_company13=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed13=

| summit_session_attendee_name14 =
| summit_session_attendee_email14 =
| summit_session_attendee_username14 =
| summit_session_attendee_company14=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed14=

| summit_session_attendee_name15 =
| summit_session_attendee_email15 =
| summit_session_attendee_username15 =
| summit_session_attendee_company15=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed15=

| summit_session_attendee_name16 =
| summit_session_attendee_email16 =
| summit_session_attendee_username16 =
| summit_session_attendee_company16=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed16=

| summit_session_attendee_name17 =
| summit_session_attendee_email17 =
| summit_session_attendee_username17 =
| summit_session_attendee_company17=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed17=

| summit_session_attendee_name18 =
| summit_session_attendee_email18 =
| summit_session_attendee_username18 =
| summit_session_attendee_company18=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed18=

| summit_session_attendee_name19 =
| summit_session_attendee_email19 =
| summit_session_attendee_username19 =
| summit_session_attendee_company19=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed19=

| summit_session_attendee_name20 =
| summit_session_attendee_email20 =
| summit_session_attendee_username20 =
| summit_session_attendee_company20=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed20=

|-
| summit_track_logo = [[Image:T._metrics.jpg]]
| summit_ws_logo = [[Image:WS._metrics.jpg]]
| summit_session_name = Common structure and numbering for all guides
| summit_session_url = http://www.owasp.org/index.php/Summit_2011_Working_Sessions/Session085
| mailing_list =
|-

| short_working_session_description=
The purpose of this session is to bring together the various document project leaders and other interested parties to discuss the establishment of a common document numbering system. This will also require that applicable document projects have a similar structure, at least in the areas associated with the numbering. That means this session will drive revisions to current projects. Additionally, this is an opportunity to discuss the overall alignment of the release document projects and how they fit into a secure development life cycle.

Some of the document projects that would benefit from this activity include the following, but there are several others not listed :
*[[OWASP Secure Coding Practices - Quick Reference Guide|OWASP Secure Coding Practices - Quick Reference Guide]].........(What to do - Requirements),
*[[OWASP Guide Project|OWASP Development Guide]].......................................(How to do it – Coding guidance),
*[[:Category:OWASP Ruby on Rails Security Guide V2|OWASP Ruby on Rails Security Guide V2]].........................(How to do it – Ruby specific),
*[[OWASP Testing Project|OWASP Testing Guide]]...........................................(How to test it – Pen Testing),
*[[:Category:OWASP Code Review Project|OWASP Code Review Guide]].......................................( How to test it – Code Review),
*[[:Category:OWASP Application Security Verification Standard Project|OWASP Application Security Verification Standard Project]]......(Verify and rate what was done),

|-

| related_project_name1 =
| related_project_url_1 =

| related_project_name2 =
| related_project_url_2 =

| related_project_name3 =
| related_project_url_3 =

| related_project_name4 =
| related_project_url_4 =

| related_project_name5 =
| related_project_url_5 =

|-

| summit_session_objective_name1=

| summit_session_objective_name2 =

| summit_session_objective_name3 =

| summit_session_objective_name4 =

| summit_session_objective_name5 =

|-

| working_session_date_and_time =

|-

| discussion_model = participants and attendees

|-

| operational_resources = Projector, whiteboards, markers, Internet connectivity, power

|-

| working_session_additional_details = The presence on this session of the participants of the Working Sessions below is advisable
* [[Summit 2011 Working Sessions/Session052|'''OWASP Testing Guide''']]
* [[Summit 2011 Working Sessions/Session066|'''Development Guide''']]
* [[Summit 2011 Working Sessions/Session053|'''OWASP Java Project''']]
* [[Summit 2011 Working Sessions/Session200|'''OWASP Secure Coding Practices Project''']]

|-

|summit_session_deliverable_name1 =

|summit_session_deliverable_name2 =

|summit_session_deliverable_name3 =

|summit_session_deliverable_name4 =

|summit_session_deliverable_name5 =

|summit_session_deliverable_name6 =

|summit_session_deliverable_name7 =

|summit_session_deliverable_name8 =

|-

| summit_session_leader_name1 = Keith Turpin
| summit_session_leader_email1 = keith.n.turpin@boeing.com
| summit_session_leader_username1 = Keith Turpin

| summit_session_leader_name2 = Matteo Meucci
| summit_session_leader_email2 = matteo.meucci@owasp.org
| summit_session_leader_username2 = Mmeucci

| summit_session_leader_name3 = Vishal Garg
| summit_session_leader_email3 = vishalgrg@gmail.com
| summit_session_leader_username3 = Vishal_Garg

|-

| operational_leader_name1 = Jim Manico
| operational_leader_email1 = jim.manico@owasp.org
| operational_leader_username1 = jmanico

|-

| meeting_notes =

|-
| session_name_mask =  Session085
| session_home_page =  Summit_2011_Working_Sessions/Session085
}}

Summit 2011 Working Sessions/Session200

2011-02-02T19:39:01Z

Keith Turpin:

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Summit 2011 Working Sessions test tab</noinclude>
|-

| summit_session_attendee_name1 = Matteo Meucci
| summit_session_attendee_email1 = matteo.meucci@owasp.org
| summit_session_attendee_username1 = Mmeucci
| summit_session_attendee_company1=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed1=

| summit_session_attendee_name2 =
| summit_session_attendee_email2 =
| summit_session_attendee_username2 =
| summit_session_attendee_company2=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed2=

| summit_session_attendee_name3 =
| summit_session_attendee_email3 =
| summit_session_attendee_username3 =
| summit_session_attendee_company3=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed3=

| summit_session_attendee_name4 =
| summit_session_attendee_email4 =
| summit_session_attendee_username4 =
| summit_session_attendee_company4=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed4=

| summit_session_attendee_name5 =
| summit_session_attendee_email5 =
| summit_session_attendee_username5=
| summit_session_attendee_company5=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed5=

| summit_session_attendee_name6 =
| summit_session_attendee_email6 =
| summit_session_attendee_username6=
| summit_session_attendee_company6=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed6=

| summit_session_attendee_name7 =
| summit_session_attendee_email7 =
| summit_session_attendee_username7=
| summit_session_attendee_company7=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed7=

| summit_session_attendee_name8 =
| summit_session_attendee_email8 =
| summit_session_attendee_username8=
| summit_session_attendee_company8=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed8=

| summit_session_attendee_name9 =
| summit_session_attendee_email9 =
| summit_session_attendee_username9=
| summit_session_attendee_company9=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed9=

| summit_session_attendee_name10 =
| summit_session_attendee_email10 =
| summit_session_attendee_username10=
| summit_session_attendee_company10=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed10=

| summit_session_attendee_name11 =
| summit_session_attendee_email11 =
| summit_session_attendee_username11=
| summit_session_attendee_company11=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed11=

| summit_session_attendee_name12 =
| summit_session_attendee_email12 =
| summit_session_attendee_username12=
| summit_session_attendee_company12 =
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed12=

| summit_session_attendee_name13 =
| summit_session_attendee_email13 =
| summit_session_attendee_username13 =
| summit_session_attendee_company13=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed13=

| summit_session_attendee_name14 =
| summit_session_attendee_email14 =
| summit_session_attendee_username14=
| summit_session_attendee_company14=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed14=

| summit_session_attendee_name15 =
| summit_session_attendee_email15 =
| summit_session_attendee_username15=
| summit_session_attendee_company15=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed15=

| summit_session_attendee_name16 =
| summit_session_attendee_email16 =
| summit_session_attendee_username16=
| summit_session_attendee_company16=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed16=

| summit_session_attendee_name17 =
| summit_session_attendee_email17 =
| summit_session_attendee_username17=
| summit_session_attendee_company17=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed17=

| summit_session_attendee_name18 =
| summit_session_attendee_email18 =
| summit_session_attendee_username18=
| summit_session_attendee_company18=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed18=

| summit_session_attendee_name19 =
| summit_session_attendee_email19 =
| summit_session_attendee_username19=
| summit_session_attendee_company19=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed19=

| summit_session_attendee_name20 =
| summit_session_attendee_email20 =
| summit_session_attendee_username20=
| summit_session_attendee_company20=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed20=

|-
| summit_track_logo = [[Image:T._individual_projects.jpg]]
| summit_ws_logo = [[Image:WS._individual_projects.jpg]]
| summit_session_name = OWASP Secure Coding Practices Project
| summit_session_url = http://www.owasp.org/index.php/Summit_2011_Working_Sessions/Session200
| mailing_list =

|-

| short_working_session_description = The purpose of this track is three fold: 
1. Introduce the project to those who are not yet familiar with it; 
2. Discuss what improvements can be made to the guide; 
3. Discuss what is needed to align the guide to the new common numbering and structure being developed. 

|-

| related_project_name1 = OWASP Secure Coding Practices - Quick Reference Guide
| related_project_url_1 = http://www.owasp.org/index.php/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide

| related_project_name2 =
| related_project_url_2 =

| related_project_name3 =
| related_project_url_3 =

| related_project_name4 =
| related_project_url_4 =

| related_project_name5 =
| related_project_url_5 =

|-

| summit_session_objective_name1 = Improve visibility of this project to other document project leaders

| summit_session_objective_name2 = Discussion and documenting suggested enhancements to the next version of the guide

| summit_session_objective_name3 = Collaboration with other OWASP guides

| summit_session_objective_name4 = Plan for implementation of common numbering schema

| summit_session_objective_name5 =

|-

| working_session_date_and_time =

|-

| discussion_model = participants and attendees

|-

| operational_resources =

|-

| working_session_additional_details = The presence of participants on the Working Session [[Summit 2011 Working Sessions/Session085|'''Common structure and numbering for all guides''']] is advisable.

|-

|summit_session_deliverable_name1 = An updated outline for the Quick Reference Guide that is tied into the new OWASP common numbering scheme

|summit_session_deliverable_name2 = A short white paper with ideas for revisions to the Quick Reference Guide

|summit_session_deliverable_name3 =

|summit_session_deliverable_name4 =

|summit_session_deliverable_name5 =

|summit_session_deliverable_name6 =

|summit_session_deliverable_name7 =

|summit_session_deliverable_name8 =

|-

| summit_session_leader_name1 = Keith Turpin
| summit_session_leader_email1 = keith.turpin@owasp.org
| summit_session_leader_username1 = Keith Turpin

| summit_session_leader_name2 =
| summit_session_leader_email2 =
| summit_session_leader_username2 =

| summit_session_leader_name3 =
| summit_session_leader_email3 =
| summit_session_leader_username3 =

|-

| operational_leader_name1 =
| operational_leader_email1 =
| operational_leader_username1 =
|-

| meeting_notes =

|-
| session_name_mask =  Session200
| session_home_page =  Summit_2011_Working_Sessions/Session200
}}

Summit 2011 Working Sessions/Session200

2011-02-02T17:45:09Z

Keith Turpin:

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Summit 2011 Working Sessions test tab</noinclude>
|-

| summit_session_attendee_name1 =
| summit_session_attendee_email1 =
| summit_session_attendee_username1 =
| summit_session_attendee_company1=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed1=

| summit_session_attendee_name2 =
| summit_session_attendee_email2 =
| summit_session_attendee_username2 =
| summit_session_attendee_company2=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed2=

| summit_session_attendee_name3 =
| summit_session_attendee_email3 =
| summit_session_attendee_username3 =
| summit_session_attendee_company3=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed3=

| summit_session_attendee_name4 =
| summit_session_attendee_email4 =
| summit_session_attendee_username4 =
| summit_session_attendee_company4=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed4=

| summit_session_attendee_name5 =
| summit_session_attendee_email5 =
| summit_session_attendee_username5=
| summit_session_attendee_company5=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed5=

| summit_session_attendee_name6 =
| summit_session_attendee_email6 =
| summit_session_attendee_username6=
| summit_session_attendee_company6=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed6=

| summit_session_attendee_name7 =
| summit_session_attendee_email7 =
| summit_session_attendee_username7=
| summit_session_attendee_company7=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed7=

| summit_session_attendee_name8 =
| summit_session_attendee_email8 =
| summit_session_attendee_username8=
| summit_session_attendee_company8=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed8=

| summit_session_attendee_name9 =
| summit_session_attendee_email9 =
| summit_session_attendee_username9=
| summit_session_attendee_company9=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed9=

| summit_session_attendee_name10 =
| summit_session_attendee_email10 =
| summit_session_attendee_username10=
| summit_session_attendee_company10=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed10=

| summit_session_attendee_name11 =
| summit_session_attendee_email11 =
| summit_session_attendee_username11=
| summit_session_attendee_company11=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed11=

| summit_session_attendee_name12 =
| summit_session_attendee_email12 =
| summit_session_attendee_username12=
| summit_session_attendee_company12 =
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed12=

| summit_session_attendee_name13 =
| summit_session_attendee_email13 =
| summit_session_attendee_username13 =
| summit_session_attendee_company13=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed13=

| summit_session_attendee_name14 =
| summit_session_attendee_email14 =
| summit_session_attendee_username14=
| summit_session_attendee_company14=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed14=

| summit_session_attendee_name15 =
| summit_session_attendee_email15 =
| summit_session_attendee_username15=
| summit_session_attendee_company15=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed15=

| summit_session_attendee_name16 =
| summit_session_attendee_email16 =
| summit_session_attendee_username16=
| summit_session_attendee_company16=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed16=

| summit_session_attendee_name17 =
| summit_session_attendee_email17 =
| summit_session_attendee_username17=
| summit_session_attendee_company17=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed17=

| summit_session_attendee_name18 =
| summit_session_attendee_email18 =
| summit_session_attendee_username18=
| summit_session_attendee_company18=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed18=

| summit_session_attendee_name19 =
| summit_session_attendee_email19 =
| summit_session_attendee_username19=
| summit_session_attendee_company19=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed19=

| summit_session_attendee_name20 =
| summit_session_attendee_email20 =
| summit_session_attendee_username20=
| summit_session_attendee_company20=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed20=

|-
| summit_track_logo = [[Image:T._individual_projects.jpg]]
| summit_ws_logo = [[Image:WS._individual_projects.jpg]]
| summit_session_name = OWASP Secure Coding Practices Project
| summit_session_url = http://www.owasp.org/index.php/Summit_2011_Working_Sessions/Session200
| mailing_list =

|-

| short_working_session_description = The purpose of this track is three fold: 
1. Introduce the project to those who are not yet familiar with it; 
2. Discuss what improvements can be made to the guide; 
3. Discuss what is needed to align the guide to the new common numbering and structure being developed. 

|-

| related_project_name1 = OWASP Secure Coding Practices - Quick Reference Guide
| related_project_url_1 = http://www.owasp.org/index.php/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide

| related_project_name2 =
| related_project_url_2 =

| related_project_name3 =
| related_project_url_3 =

| related_project_name4 =
| related_project_url_4 =

| related_project_name5 =
| related_project_url_5 =

|-

| summit_session_objective_name1 = Improve visibility of this project to other document project leaders

| summit_session_objective_name2 = Discussion and documenting suggested enhancements to the next version of the guide

| summit_session_objective_name3 = Collaboration with other OWASP guides

| summit_session_objective_name4 = Plan for implementation of common numbering schema

| summit_session_objective_name5 =

|-

| working_session_date_and_time =

|-

| discussion_model = participants and attendees

|-

| operational_resources =

|-

| working_session_additional_details = The presence of participants on the Working Session [[Summit 2011 Working Sessions/Session085|'''Common structure and numbering for all guides''']] is advisable.

|-

|summit_session_deliverable_name1 = An updated outline for the Quick Reference Guide that is tied into the new OWASP common numbering scheme

|summit_session_deliverable_name2 = A short white paper with ideas for revisions to the Quick Reference Guide

|summit_session_deliverable_name3 =

|summit_session_deliverable_name4 =

|summit_session_deliverable_name5 =

|summit_session_deliverable_name6 =

|summit_session_deliverable_name7 =

|summit_session_deliverable_name8 =

|-

| summit_session_leader_name1 = Keith Turpin
| summit_session_leader_email1 = keith.turpin@owasp.org
| summit_session_leader_username1 = Keith Turpin

| summit_session_leader_name2 =
| summit_session_leader_email2 =
| summit_session_leader_username2 =

| summit_session_leader_name3 =
| summit_session_leader_email3 =
| summit_session_leader_username3 =

|-

| operational_leader_name1 =
| operational_leader_email1 =
| operational_leader_username1 =
|-

| meeting_notes =

|-
| session_name_mask =  Session200
| session_home_page =  Summit_2011_Working_Sessions/Session200
}}

Summit 2011 Working Sessions/Session200

2011-02-01T06:35:21Z

Keith Turpin:

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Summit 2011 Working Sessions test tab</noinclude>
|-

| summit_session_attendee_name1 =
| summit_session_attendee_email1 =
| summit_session_attendee_username1 =
| summit_session_attendee_company1=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed1=

| summit_session_attendee_name2 =
| summit_session_attendee_email2 =
| summit_session_attendee_username2 =
| summit_session_attendee_company2=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed2=

| summit_session_attendee_name3 =
| summit_session_attendee_email3 =
| summit_session_attendee_username3 =
| summit_session_attendee_company3=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed3=

| summit_session_attendee_name4 =
| summit_session_attendee_email4 =
| summit_session_attendee_username4 =
| summit_session_attendee_company4=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed4=

| summit_session_attendee_name5 =
| summit_session_attendee_email5 =
| summit_session_attendee_username5=
| summit_session_attendee_company5=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed5=

| summit_session_attendee_name6 =
| summit_session_attendee_email6 =
| summit_session_attendee_username6=
| summit_session_attendee_company6=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed6=

| summit_session_attendee_name7 =
| summit_session_attendee_email7 =
| summit_session_attendee_username7=
| summit_session_attendee_company7=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed7=

| summit_session_attendee_name8 =
| summit_session_attendee_email8 =
| summit_session_attendee_username8=
| summit_session_attendee_company8=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed8=

| summit_session_attendee_name9 =
| summit_session_attendee_email9 =
| summit_session_attendee_username9=
| summit_session_attendee_company9=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed9=

| summit_session_attendee_name10 =
| summit_session_attendee_email10 =
| summit_session_attendee_username10=
| summit_session_attendee_company10=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed10=

| summit_session_attendee_name11 =
| summit_session_attendee_email11 =
| summit_session_attendee_username11=
| summit_session_attendee_company11=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed11=

| summit_session_attendee_name12 =
| summit_session_attendee_email12 =
| summit_session_attendee_username12=
| summit_session_attendee_company12 =
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed12=

| summit_session_attendee_name13 =
| summit_session_attendee_email13 =
| summit_session_attendee_username13 =
| summit_session_attendee_company13=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed13=

| summit_session_attendee_name14 =
| summit_session_attendee_email14 =
| summit_session_attendee_username14=
| summit_session_attendee_company14=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed14=

| summit_session_attendee_name15 =
| summit_session_attendee_email15 =
| summit_session_attendee_username15=
| summit_session_attendee_company15=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed15=

| summit_session_attendee_name16 =
| summit_session_attendee_email16 =
| summit_session_attendee_username16=
| summit_session_attendee_company16=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed16=

| summit_session_attendee_name17 =
| summit_session_attendee_email17 =
| summit_session_attendee_username17=
| summit_session_attendee_company17=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed17=

| summit_session_attendee_name18 =
| summit_session_attendee_email18 =
| summit_session_attendee_username18=
| summit_session_attendee_company18=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed18=

| summit_session_attendee_name19 =
| summit_session_attendee_email19 =
| summit_session_attendee_username19=
| summit_session_attendee_company19=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed19=

| summit_session_attendee_name20 =
| summit_session_attendee_email20 =
| summit_session_attendee_username20=
| summit_session_attendee_company20=
| summit_session_attendee_notes,_reason_for_participating_and_issues_to_be discussed20=

|-
| summit_track_logo = [[Image:T._individual_projects.jpg]]
| summit_ws_logo = [[Image:WS._individual_projects.jpg]]
| summit_session_name = OWASP Secure Coding Practices Project
| summit_session_url = http://www.owasp.org/index.php/Summit_2011_Working_Sessions/Session200
| mailing_list =

|-

| short_working_session_description = The purpose of this track is three fold:
| 1. Introduce the project to those who are not yet familiar with it
| 2. Discuss what improvements can be made to the guide
| 3. Discuss what is needed to establish a baseline categorization and numbering schema that works across document projects.

|-

| related_project_name1 =
| related_project_url_1 =

| related_project_name2 =
| related_project_url_2 =

| related_project_name3 =
| related_project_url_3 =

| related_project_name4 =
| related_project_url_4 =

| related_project_name5 =
| related_project_url_5 =

|-

| summit_session_objective_name1 = Improve visibility of this project to other document project leaders

| summit_session_objective_name2 = Discussion on enhancements to the next version of the development guide

| summit_session_objective_name3 = Collaboration with other OWASP guides

| summit_session_objective_name4 = Discuss what is needed to establish a baseline categorization and numbering schema that works across document projects

| summit_session_objective_name5 =

|-

| working_session_date_and_time =

|-

| discussion_model = participants and attendees

|-

| operational_resources =

|-

| working_session_additional_details =

|-

|summit_session_deliverable_name1 = An agreed to new common document structure and numbering system

|summit_session_deliverable_name2 = An updated outline for the Quick Reference Guide that is tied into the new OWASP common numbering scheme

|summit_session_deliverable_name3 = A short white paper with ideas for revisions to the Quick Reference Guide

|summit_session_deliverable_name4 =

|summit_session_deliverable_name5 =

|summit_session_deliverable_name6 =

|summit_session_deliverable_name7 =

|summit_session_deliverable_name8 =

|-

| summit_session_leader_name1 = Keith Turpin
| summit_session_leader_email1 = keith.turpin@owasp.org
| summit_session_leader_username1 = Keith Turpin

| summit_session_leader_name2 =
| summit_session_leader_email2 =
| summit_session_leader_username2 =

| summit_session_leader_name3 =
| summit_session_leader_email3 =
| summit_session_leader_username3 =

|-

| operational_leader_name1 =
| operational_leader_email1 =
| operational_leader_username1 =
|-

| meeting_notes =

|-
| session_name_mask =  Session200
| session_home_page =  Summit_2011_Working_Sessions/Session200
}}