Category:OWASP CSA Project - Revision history

Neil Fryer at 14:18, 13 July 2009

2009-07-13T14:18:18Z

Show changes

Georghess at 14:30, 8 July 2009

2009-07-08T14:30:37Z

Georghess at 14:18, 8 July 2009

2009-07-08T14:18:06Z

Georghess at 14:09, 8 July 2009

2009-07-08T14:09:52Z

Georghess at 11:50, 8 July 2009

2009-07-08T11:50:12Z

Georghess at 11:42, 8 July 2009

2009-07-08T11:42:12Z

Georghess at 11:41, 8 July 2009

2009-07-08T11:41:35Z

Georghess at 11:28, 8 July 2009

2009-07-08T11:28:41Z

Georghess at 11:15, 8 July 2009

2009-07-08T11:15:47Z

Georghess at 11:15, 8 July 2009

2009-07-08T11:15:08Z

@@ Line 69: / Line 69: @@
 <tr><td>67</td><td> First sentence below Figure 4: should be rewritten "...and the vendor through application specific security services and controls and the Service Level Agreement (SLA)...." . </td><td> Georg Hess</td></tr>
 <tr><td>69</td><td> PaaS Impact on Application Security Architecture, should be added as a last sentence of first paragraph "On the other hand, PaaS providers may offer built-in application security controls within their - already restricted - programming environment to help developers avoid known application vulnerabilities. </td><td> Georg Hess</td></tr>
 <tr><td>page#</td><td> Comment Here </td><td> Name here </td></tr>
 <tr><td>page#</td><td> Comment Here </td><td> Name here </td></tr>

@@ Line 68: / Line 68: @@
 <tr><td>66</td><td> IaaS Impact on Application Security Architecture, should be added as a last sentence "IaaS providers may offer - third-party or on their own - cloud application security specific services - e.g. Web App Security Scanning, Source Code Analysis or Web App Intrusion Detection/Prevention Systems - to increase security at the application layer and to support customers in fulfilling application specific compliance requirements. </td><td> Georg Hess</td></tr>
 <tr><td>67</td><td> First sentence below Figure 4: should be rewritten "...and the vendor through application specific security services and controls and the Service Level Agreement (SLA)...." . </td><td> Georg Hess</td></tr>
-<tr><td>69</td><td> PaaS Impact on Application Security Architecture, should be added as a last sentence of first paragraph "On the other hand, PaaS providers may offer built-in application security controls within their - already restrictd - programming environment to help developers avoid known application vulnerabilities. </td><td> Georg Hess</td></tr>
+<tr><td>69</td><td> PaaS Impact on Application Security Architecture, should be added as a last sentence of first paragraph "On the other hand, PaaS providers may offer built-in application security controls within their - already restricted - programming environment to help developers avoid known application vulnerabilities. </td><td> Georg Hess</td></tr>
 <tr><td>page#</td><td> Comment Here </td><td> Name here </td></tr>
 <tr><td>page#</td><td> Comment Here </td><td> Name here </td></tr>

@@ Line 68: / Line 68: @@
 <tr><td>66</td><td> IaaS Impact on Application Security Architecture, should be added as a last sentence "IaaS providers may offer - third-party or on their own - cloud application security specific services - e.g. Web App Security Scanning, Source Code Analysis or Web App Intrusion Detection/Prevention Systems - to increase security at the application layer and to support customers in fulfilling application specific compliance requirements. </td><td> Georg Hess</td></tr>
 <tr><td>67</td><td> First sentence below Figure 4: should be rewritten "...and the vendor through application specific security services and controls and the Service Level Agreement (SLA)...." . </td><td> Georg Hess</td></tr>
-<tr><td>66</td><td> PaaS Impact on Application Security Architecture, should be added as a last sentence of first paragraph "On the other hand, PaaS providers may offer built-in application security controls within their - already restrictd - programming environment to help developers avoid known application vulnerabilities. </td><td> Georg Hess</td></tr>
+<tr><td>69</td><td> PaaS Impact on Application Security Architecture, should be added as a last sentence of first paragraph "On the other hand, PaaS providers may offer built-in application security controls within their - already restrictd - programming environment to help developers avoid known application vulnerabilities. </td><td> Georg Hess</td></tr>
 <tr><td>page#</td><td> Comment Here </td><td> Name here </td></tr>
 <tr><td>page#</td><td> Comment Here </td><td> Name here </td></tr>

@@ Line 68: / Line 68: @@
 <tr><td>66</td><td> IaaS Impact on Application Security Architecture, should be added as a last sentence "IaaS providers may offer - third-party or on their own - cloud application security specific services - e.g. Web App Security Scanning, Source Code Analysis or Web App Intrusion Detection/Prevention Systems - to increase security at the application layer and to support customers in fulfilling application specific compliance requirements. </td><td> Georg Hess</td></tr>
 <tr><td>67</td><td> First sentence below Figure 4: should be rewritten "...and the vendor through application specific security services and controls and the Service Level Agreement (SLA)...." . </td><td> Georg Hess</td></tr>
 <tr><td>page#</td><td> Comment Here </td><td> Name here </td></tr>
 <tr><td>page#</td><td> Comment Here </td><td> Name here </td></tr>

@@ Line 67: / Line 67: @@
 <tr><td>66</td><td> IaaS Impact on Application Security Architecture, second sentence, should be rewritten "... put in place to secure the application itself, the host and the network...." . </td><td> Georg Hess</td></tr>
 <tr><td>66</td><td> IaaS Impact on Application Security Architecture, should be added as a last sentence "IaaS providers may offer - third-party or on their own - cloud application security specific services - e.g. Web App Security Scanning, Source Code Analysis or Web App Intrusion Detection/Prevention Systems - to increase security at the application layer and to support customers in fulfilling application specific compliance requirements. </td><td> Georg Hess</td></tr>
-<tr><td>67</td><td> First sentence below first graphic: should be rewritten "...and the vendor through application specific security services and controls and the Service Level Agreement (SLA)...." . </td><td> Georg Hess</td></tr>
+<tr><td>67</td><td> First sentence below Figure 4: should be rewritten "...and the vendor through application specific security services and controls and the Service Level Agreement (SLA)...." . </td><td> Georg Hess</td></tr>
 <tr><td>page#</td><td> Comment Here </td><td> Name here </td></tr>
 <tr><td>page#</td><td> Comment Here </td><td> Name here </td></tr>

@@ Line 65: / Line 65: @@
 <tr><td>65</td><td> Could start with "Cloud Applications are Web Applications in particular. Thus, virtually all of the challenges of Web Application Security apply to cloud applications, too. This document focuses on the new challenges of web applications "living in the cloud" but all knowledge about "classical" Web Application Security such as provided by OWASP should still be considered.</td><td> Georg Hess</td></tr>
 <tr><td>65</td><td> Issues and Guidance, last sentence of first paragraph should be rewritten "... a set of application level controls and through the appropriate choice of cloud services - e.g. Web App Security Scanning, Source Code Analysis or Web App Firewalls - and the through the service agreement with the cloud vendor.</td><td> Georg Hess</td></tr>
 <tr><td>page#</td><td> Comment Here </td><td> Name here </td></tr>
 <tr><td>page#</td><td> Comment Here </td><td> Name here </td></tr>

@@ Line 62: / Line 62: @@
 <tr><td>7</td><td>Should be rewritten to "Domain 1 principles of cloud computing" or "Domain 1 principal characteristics of cloud computing"</td><td> Arthur Hedge</td></tr>
 <tr><td>28</td><td> Should be "Procedures for addressing a Legal Hold;" instead of "Procedures for address a Legal Hold;" </td><td> Arthur Hedge</td></tr>
-<tr><td>11</td><td> Could start with "Cloud Applications are Web Applications in particular. Thus, virtually all of the challenges of Web Application Security apply to cloud applications, too. This document focuses on the new challenges of web applications "living in the cloud" but all knowledge about "classical" Web Application Security such as provided by OWASP should still be considered."</td><td> Georg Hess</td></tr>
+<tr><td>11</td><td> Could start with "Cloud Applications are Web Applications in particular. Thus, virtually all of the challenges of Web Application Security apply to cloud applications, too. This document focuses on the new challenges of web applications "living in the cloud" but all knowledge about "classical" Web Application Security such as provided by OWASP should still be considered.</td><td> Georg Hess</td></tr>
-<tr><td>65</td><td> Could start with "Cloud Applications are Web Applications in particular. Thus, virtually all of the challenges of Web Application Security apply to cloud applications, too. This document focuses on the new challenges of web applications "living in the cloud" but all knowledge about "classical" Web Application Security such as provided by OWASP should still be considered."</td><td> Georg Hess</td></tr>
+<tr><td>65</td><td> Could start with "Cloud Applications are Web Applications in particular. Thus, virtually all of the challenges of Web Application Security apply to cloud applications, too. This document focuses on the new challenges of web applications "living in the cloud" but all knowledge about "classical" Web Application Security such as provided by OWASP should still be considered.</td><td> Georg Hess</td></tr>
-<tr><td>65</td><td> Issues and Guidance, last sentence of first paragraph should be rewritten "... a set of application level controls and through the appropriate choice of cloud services - e.g. Web App Security Scanning, Source Code Analysis or Web App Firewalls - and the through the service agreement with the cloud vendor."</td><td> Georg Hess</td></tr>
+<tr><td>65</td><td> Issues and Guidance, last sentence of first paragraph should be rewritten "... a set of application level controls and through the appropriate choice of cloud services - e.g. Web App Security Scanning, Source Code Analysis or Web App Firewalls - and the through the service agreement with the cloud vendor.</td><td> Georg Hess</td></tr>
 <tr><td>page#</td><td> Comment Here </td><td> Name here </td></tr>
 <tr><td>page#</td><td> Comment Here </td><td> Name here </td></tr>