Guide Introduction - Revision history

KirstenS: /* Developing Secure Applications */

2009-03-01T14:14:24Z

‎Developing Secure Applications

KirstenS: /* With thanks */

2008-08-19T01:12:40Z

‎With thanks

KirstenS at 00:49, 19 August 2008

2008-08-19T00:49:32Z

KirstenS at 00:47, 19 August 2008

2008-08-19T00:47:09Z

Tomo at 08:38, 6 April 2008

2008-04-06T08:38:32Z

Fthiery at 11:50, 18 April 2007

2007-04-18T11:50:40Z

Weilin Zhong at 11:41, 19 May 2006

2006-05-19T11:41:34Z

Weilin Zhong at 20:05, 18 May 2006

2006-05-18T20:05:02Z

Weilin Zhong at 20:04, 18 May 2006

2006-05-18T20:04:46Z

Weilin Zhong at 18:56, 18 May 2006

2006-05-18T18:56:25Z

@@ Line 10: / Line 10: @@
 ==Developing Secure Applications ==
-Unlike other forms of security (such as firewalls and secure lockdowns), web applications have the ability to make a skilled attacker rich, or make the life of a victim a complete misery. At this highest level of the OSI software map, traditional firewalls, and other controls simply do not help. The application itself must be self-defending. The Development Guide can help you get there.
+Unlike other forms of security (such as firewalls and secure lockdowns), web applications have the ability to make a skilled attacker rich, or make the life of a victim a complete misery. At this highest level of the OSI software map, traditional firewalls and other controls simply do not help. The application itself must be self-defending. The Development Guide can help you get there.
 The Development Guide has been written to cover all forms of web application security issues, from old hoary chestnuts such as SQL Injection, through modern concerns such as AJAX, phishing, credit card handling, session fixation, cross-site request forgeries, compliance, and privacy issues.

← Older revision		Revision as of 01:12, 19 August 2008
Line 45:		Line 45:


−	[[Guide Table of Contents]]	+	[[Guide Table of Contents\|Development Guide Table of Contents]]
	[[Category:OWASP_Guide_Project]]		[[Category:OWASP_Guide_Project]]

@@ Line 6: / Line 6: @@
 Web application security is an essential component of any successful project, whether open source PHP applications, web services such as straight through processing, or proprietary business web sites. Hosters (rightly) shun insecure code, and users shun insecure services that lead to fraud.
-The aim of this Guide is to allow businesses, developers, designers and solution architects to produce secure web applications. If done from the earliest stages, secure applications cost about the same to develop as insecure applications, but are far more cost effective in the long run.
+The aim of this Development Guide is to allow businesses, developers, designers and solution architects to produce secure web applications. If done from the earliest stages, secure applications cost about the same to develop as insecure applications, but are far more cost effective in the long run.
 ==Developing Secure Applications ==
-Unlike other forms of security (such as firewalls and secure lockdowns), web applications have the ability to make a skilled attacker rich, or make the life of a victim a complete misery. At this highest level of the OSI software map, traditional firewalls, and other controls simply do not help. The application itself must be self-defending. The Guide can help you get there.
+Unlike other forms of security (such as firewalls and secure lockdowns), web applications have the ability to make a skilled attacker rich, or make the life of a victim a complete misery. At this highest level of the OSI software map, traditional firewalls, and other controls simply do not help. The application itself must be self-defending. The Development Guide can help you get there.
-The Guide has been written to cover all forms of web application security issues, from old hoary chestnuts such as SQL Injection, through modern concerns such as AJAX, phishing, credit card handling, session fixation, cross-site request forgeries, compliance, and privacy issues.
+The Development Guide has been written to cover all forms of web application security issues, from old hoary chestnuts such as SQL Injection, through modern concerns such as AJAX, phishing, credit card handling, session fixation, cross-site request forgeries, compliance, and privacy issues.
 ==Improvements in this edition ==
-This latest edition of the Guide builds upon the successful release of the Guide 2.0 at BlackHat Las Vegas in July 2005. With fearless editing by our publisher, No Starch Press, this edition aims to be concise and accurate. There are three new chapters, and a great deal of new content throughout.
+This latest edition of the Development Guide builds upon the successful release of the Development Guide 2.0 at BlackHat Las Vegas in July 2005. With fearless editing by our publisher, No Starch Press, this edition aims to be concise and accurate. There are three new chapters, and a great deal of new content throughout.
 Each chapter is organized into roughly three sections:
@@ Line 26: / Line 26: @@
 ==How to use this Guide ==
-This Guide is a large work as it aims for completeness. The best way to treat the Guide is as a dictionary of best practices. However, web application security is like a language – without some form of context – it is nearly impossible to speak it well. Therefore, readers are well advised to read the “Security Principles” chapter in its entirety.
+This Development Guide is a large work as it aims for completeness. The best way to treat the Development Guide is as a dictionary of best practices. However, web application security is like a language – without some form of context – it is nearly impossible to speak it well. Therefore, readers are well advised to read the “Security Principles” chapter in its entirety.
 ==Updates and errata ==
-The Guide will likely have errors and deficiencies. We will publish errata on our web site from time to time if you’d like to keep your copy up to date.
+The Development Guide will likely have errors and deficiencies. We will publish errata on our web site from time to time if you’d like to keep your copy up to date.
-If you have any comments or suggestions on the Guide, please e-mail the Guide mail list (see our web site for details) or contact me directly.
+If you have any comments or suggestions on the Development Guide, please e-mail the Development Guide mail list (see our web site for details) or contact me directly.
 ==With thanks ==
-I wish to extend my thanks to the many authors, reviewers, and editors for their hard work in producing this guide. We stand on the shoulders of giants, and this Guide is no exception.
+I wish to extend my thanks to the many authors, reviewers, and editors for their hard work in producing this Development Guide. We stand on the shoulders of giants, and this Development Guide is no exception.
 Lastly, I wish to thank No Starch Press, particularly our editors and Bill Pollock for believing in us, and bringing our community’s text into a publishable state.

@@ Line 1: / Line 1: @@
-[[Guide Table of Contents]]
+[[Guide Table of Contents| Development Guide Table of Contents]]
 __TOC__
-Welcome to the OWASP Guide 3.0!
+Welcome to the Development OWASP Guide 3.0!
 Web application security is an essential component of any successful project, whether open source PHP applications, web services such as straight through processing, or proprietary business web sites. Hosters (rightly) shun insecure code, and users shun insecure services that lead to fraud.

@@ Line 12: / Line 12: @@
 Unlike other forms of security (such as firewalls and secure lockdowns), web applications have the ability to make a skilled attacker rich, or make the life of a victim a complete misery. At this highest level of the OSI software map, traditional firewalls, and other controls simply do not help. The application itself must be self-defending. The Guide can help you get there.
-The Guide has been written to cover all forms of web application security issues, from old hoary chestnuts such as SQL injection, through modern concerns such as AJAX, phishing, credit card handling, session fixation, cross-site request forgeries, compliance, and privacy issues.
+The Guide has been written to cover all forms of web application security issues, from old hoary chestnuts such as SQL Injection, through modern concerns such as AJAX, phishing, credit card handling, session fixation, cross-site request forgeries, compliance, and privacy issues.
 ==Improvements in this edition ==