Category:OWASP Application Security Requirements Project - Revision history

Kait Disney-Leugers at 00:43, 27 July 2014

2014-07-27T00:43:41Z

Luis Armando Martinez Bacha at 23:04, 2 January 2014

2014-01-02T23:04:06Z

Luis Armando Martinez Bacha at 16:12, 21 September 2011

2011-09-21T16:12:06Z

Paulo Coimbra at 22:55, 19 September 2011

2011-09-19T22:55:07Z

Paulo Coimbra at 22:54, 19 September 2011

2011-09-19T22:54:37Z

Mchalmers at 02:59, 12 September 2011

2011-09-12T02:59:19Z

Andylew: Added Useful links to real-world examples of failed web security since knowing why you care can be useful

2011-02-26T06:10:17Z

Added Useful links to real-world examples of failed web security since knowing why you care can be useful

Andylew: Added a new section with some links to "buckets" of stuff to help get started

2011-02-26T05:39:19Z

Added a new section with some links to "buckets" of stuff to help get started

Andylew: added verbage about target audience being non-technical

2011-02-26T05:06:47Z

added verbage about target audience being non-technical

Paulo Coimbra at 18:33, 3 July 2009

2009-07-03T18:33:13Z

← Older revision		Revision as of 00:43, 27 July 2014
Line 1:		Line 1:
		+	{\|
		+	\|-
		+	! width="700" align="center" \| <br>
		+	! width="500" align="center" \| <br>
		+	\|-
		+	\| align="right" \| [[Image:OWASP Inactive Banner.jpg\|800px\| link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Inactive_Projects]]
		+	\| align="right" \|
		+
		+	\|}
	= Application Security Requirements Project =		= Application Security Requirements Project =
	<!--- [[:Category:OWASP Project\|Click here to return to OWASP Projects page.]]		<!--- [[:Category:OWASP Project\|Click here to return to OWASP Projects page.]]

@@ Line 1: / Line 1: @@
-==== Main  ====
+= Application Security Requirements Project =
 <!--- [[:Category:OWASP Project|Click here to return to OWASP Projects page.]]
 [[:Project Information:template Application Security Requirements Project|Click here to see (& edit, if wanted) the template.]]
 {{:Project Information:template Application Security Requirements Project}}---->
-==Overview==
+== Overview ==
-OWASP believe that clearly articulating project-agnostic web application security requirements&mdash;providing both high-level/general and low-level/specific ''sine quibus non''&mdash;is the best way to ensure that software is developed with strong, robust, yet workable security guidance.
+Clearly articulating project-agnostic application security requirements —both general and specific requirements — is the best way to ensure that software is developed under strong and workable security guidance
-==Can't seem to edit the "Project Main Links" section so here are some links==
+* '''Project purpose:''' To assemble a useful base of generic security requirements that could be used in most applications.
-[[High Level Requirements Categories]]
+* '''Intended audience:''' Every person involved in application security, but especially for those responsible of sytem analysis and design.
-[[Tips for using the project's requirements, use-cases, and user stories]]
+= About =
-[[Other really good requirements that aren't generic enough to be part of the project but that might be what you're looking for in YOUR environment]]
+{{:Projects/OWASP Application Security Requirements Project | Project About}}
-[[Useful links to real-world examples of failed web security]]
+= Roadmap =
-==Joining the Project==
+We are just re-starting the project after a couple of years without any progress.
-If you are interested in volunteering for the project, or just have a comment or question, please join the OWASP AppSec Requirements [http://lists.owasp.org/mailman/listinfo/owasp-appsec-requirements mailing list].
+We need all the help we can get to make this a successful project
-==Project Administrivia==
+== Short-term actions ==
-This project was initiated around September of 2007 under the management of Jamie Fisher. The project was rechartered in August of 2008. The interim project manager was [[User:Mchalmers|Matthew Chalmers]]. Current project manager is [[User:Luis Armando Martinez Bacha|Luis Martinez Bacha]].
+#. Identify (map from other owasp projects) categorization and prioritize
-==== Project About  ====
+==Long-term actions==
+* Write requirements for mobile applications
-{{:Projects/OWASP Application Security Requirements Project | Project About}}
+* Write requirements for web services
 <br> __NOTOC__ <headertabs />

@@ Line 24: / Line 24: @@
 ==Project Administrivia==
-This project was initiated around September of 2007 under the management of Jamie Fisher. The project was rechartered in August of 2008. The interim project manager was [[User:Mchalmers|Matthew Chalmers]]. There is currently no project manager.
+This project was initiated around September of 2007 under the management of Jamie Fisher. The project was rechartered in August of 2008. The interim project manager was [[User:Mchalmers|Matthew Chalmers]]. Current project manager is [[User:Luis Armando Martinez Bacha|Luis Martinez Bacha]].
 ==== Project About  ====

@@ Line 32: / Line 32: @@
 <br> __NOTOC__ <headertabs />
-[[Category:OWASP_Document]] [[Category:OWASP_Alpha_Quality_Documentl]]
+[[Category:OWASP_Document]] [[Category:OWASP_Alpha_Quality_Document]]
 [[Category:OWASP Project|Application Security Requirements Project]]

@@ Line 1: / Line 1: @@
-[[:Category:OWASP Project|Click here to return to OWASP Projects page.]]
+==== Main  ====
 [[:Project Information:template Application Security Requirements Project|Click here to see (& edit, if wanted) the template.]]
-{{:Project Information:template Application Security Requirements Project}}
+{{:Project Information:template Application Security Requirements Project}}---->
 ==Overview==
@@ Line 25: / Line 25: @@
 ==Project Administrivia==
 This project was initiated around September of 2007 under the management of Jamie Fisher. The project was rechartered in August of 2008. The interim project manager was [[User:Mchalmers|Matthew Chalmers]]. There is currently no project manager.

← Older revision		Revision as of 02:59, 12 September 2011
Line 24:		Line 24:

	==Project Administrivia==		==Project Administrivia==
−	This project was initiated around September of 2007 under the management of Jamie Fisher. The project was rechartered in August of 2008. The interim project manager is [[User:Mchalmers\|Matthew Chalmers]].	+	This project was initiated around September of 2007 under the management of Jamie Fisher. The project was rechartered in August of 2008. The interim project manager was [[User:Mchalmers\|Matthew Chalmers]]. There is currently no project manager.

← Older revision		Revision as of 06:10, 26 February 2011
Line 18:		Line 18:
	[[Other really good requirements that aren't generic enough to be part of the project but that might be what you're looking for in YOUR environment]]		[[Other really good requirements that aren't generic enough to be part of the project but that might be what you're looking for in YOUR environment]]

		+	[[Useful links to real-world examples of failed web security]]

	==Joining the Project==		==Joining the Project==

@@ Line 10: / Line 10: @@
 * The ''reason d'etre'' of this project is that, whilst security requirements are sometimes well captured and clearly defined, there are other times when they are not, for any number of reasons.
 * Requirements, use-cases, and user stories will tend to be business-focused.  In other words, requirements will be developed more for the consumption of Business Analysts and Project Managers rather than hard-core code warriors.
 ==Joining the Project==

← Older revision		Revision as of 18:33, 3 July 2009
Line 15:		Line 15:
	==Project Administrivia==		==Project Administrivia==
	This project was initiated around September of 2007 under the management of Jamie Fisher. The project was rechartered in August of 2008. The interim project manager is [[User:Mchalmers\|Matthew Chalmers]].		This project was initiated around September of 2007 under the management of Jamie Fisher. The project was rechartered in August of 2008. The interim project manager is [[User:Mchalmers\|Matthew Chalmers]].
−
−	~~[[Category:OWASP Project]]~~