Control template - Revision history

KirstenS at 23:43, 7 April 2009

2009-04-07T23:43:14Z

KirstenS at 11:32, 20 September 2008

2008-09-20T11:32:24Z

Leocavallari at 15:19, 2 May 2008

2008-05-02T15:19:32Z

Leocavallari: /* References */

2008-05-02T14:44:25Z

‎References

Leocavallari at 14:42, 2 May 2008

2008-05-02T14:42:14Z

Leocavallari at 14:39, 2 May 2008

2008-05-02T14:39:56Z

Leocavallari: /* Related Controls */

2008-05-02T13:46:01Z

‎Related Controls

Leocavallari at 13:21, 2 May 2008

2008-05-02T13:21:37Z

Leocavallari at 00:36, 19 February 2008

2008-02-19T00:36:55Z

Leocavallari: New page: Every '''Control''' should follow this template. ==Description== A control (countermeasure or security control) is a protection mechanism that prevents, deters, or detects attacks, o...

2008-02-19T00:11:02Z

New page: Every '''Control''' should follow this template. ==Description== A control (countermeasure or security control) is a protection mechanism that prevents, deters, or detects attacks, o...

New page

Every '''[[Control]]''' should follow this template.

==Description==

A control (countermeasure or security control) is a protection mechanism that prevents, deters, or detects attacks, or prevents or reduces vulnerabilities.

# Start with a one-sentence description of the control
# How does the countermeasure work?
# What are some examples of implementations of the control (steer clear of specific products)

==Risk Factors==

* Talk about the [[OWASP Risk Rating Methodology|factors]] that this control affects
* What effect does this countermeasure have on the attack or vulnerability?
* Does this control reduce the technical or business impact?

==Difficulty to Implement==

* Discuss the typical difficulty of implementing this control, emphasizing the factors that make it easier or harder
* Steer clear of language/platform specific information here

==Examples==

; Short example name
: One paragraph example description with [http://www.site.com links]

; Short example name
: One paragraph example description with [http://www.site.com links]

==Related [[Attacks]]==

* [[Attack 1]]
* [[Attack 2]]

==Related [[Vulnerabilities]]==

* [[Vulnerability 1]]
* [[Vulnerabiltiy 2]]

Note: the contents of "Related Problems" sections should be placed here

==Related [[Controls]]==

* [[Countermeasure 1]]
* [[Countermeasure 2]]

Note: contents of "Avoidance and Mitigation" Sections should be placed here

==References==

* http://www.link1.com
* [http://www.link2.com Title for the link]

When the article is reviewed, the "Honeycomb" category SHOULD be removed and replaced with the "ASDR" category
<nowiki>[[Category:OWASP Honeycomb Project]]</nowiki>
<nowiki>[[Category:OWASP ASDR Project]]</nowiki>

__NOTOC__

@@ Line 4: / Line 4: @@
 <br>
 [[Category:OWASP ASDR Project]]
-[[ASDR Table of Contents]]__TOC__
+__TOC__
 Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''

← Older revision		Revision as of 11:32, 20 September 2008
Line 2:		Line 2:

	{{Template:Control}}		{{Template:Control}}
		+	<br>
		+	[[Category:OWASP ASDR Project]]
		+	[[ASDR Table of Contents]]__TOC__

	Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''		Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''

← Older revision		Revision as of 15:19, 2 May 2008
Line 62:		Line 62:
	* [http://www.link2.com Title for the link2]		* [http://www.link2.com Title for the link2]

−
−	~~When the article is reviewed, the "Honeycomb" category (<nowiki>[[Category:OWASP Honeycomb Project]]</nowiki>) SHOULD be replaced with the "ASDR" category.~~
−	~~<nowiki>[[Category:OWASP ASDR Project]]</nowiki>~~

	In addition, one should classify control based on the following subcategories: Ex:<nowiki>[[Category:Error Handling Control]]</nowiki>		In addition, one should classify control based on the following subcategories: Ex:<nowiki>[[Category:Error Handling Control]]</nowiki>

@@ Line 67: / Line 67: @@
 In addition, one should classify control based on the following subcategories: Ex:<nowiki>[[Category:Error Handling Control]]</nowiki>
 Authorization Control
 Authentication Control
 Configuration Control
 Cryptographic Control
 Encoding Control
 Error Handling Control
 Input Validation Control
 Logging and Auditing Control
 Session Management Control
 __NOTOC__

@@ Line 1: / Line 1: @@
 Every '''[[Control]]''' should follow this template.
 {{Template:Control}}
 ==Description==

@@ Line 2: / Line 2: @@
 Every '''[[Control]]''' should follow this template.
 ==Description==
@@ Line 61: / Line 63: @@
-When the article is reviewed, the "Honeycomb" category SHOULD be removed and replaced with the "ASDR" category
+When the article is reviewed, the "Honeycomb" category (<nowiki>[[Category:OWASP Honeycomb Project]]</nowiki>) SHOULD be replaced with the "ASDR" category.
 <nowiki>[[Category:OWASP ASDR Project]]</nowiki>
 __NOTOC__

@@ Line 50: / Line 50: @@
 ==Related [[Controls]]==
-* [[Countermeasure 1]]
+* [[Control 1]]
-* [[Countermeasure 2]]
+* [[Control 2]]
 Note: contents of "Avoidance and Mitigation" and "Countermeasure" related Sections should be placed here
 ==References==

@@ Line 1: / Line 1: @@
 Every '''[[Control]]''' should follow this template.
@@ Line 57: / Line 59: @@
 * http://www.link1.com
-* [http://www.link2.com Title for the link]
+* [http://www.link2.com Title for the link2]

@@ Line 25: / Line 25: @@
 ==Examples==
-; Short example name
+===Short example name===
-: One paragraph example description with [http://www.site.com links]
+: A short example description, small picture, or sample code with [http://www.site.com links]
-; Short example name
+===Short example name===
-: One paragraph example description with [http://www.site.com links]
+: A short example description, small picture, or sample code with [http://www.site.com links]
@@ Line 51: / Line 51: @@
 * [[Countermeasure 2]]
-Note: contents of "Avoidance and Mitigation" Sections should be placed here
+Note: contents of "Avoidance and Mitigation" and "Countermeasure" related Sections should be placed here