OWASP Assimilation Project - Revision history

Ossalanr: /* Minimum Viable Product */

2016-08-08T20:33:58Z

‎Minimum Viable Product

Ossalanr: /* Project About */

2016-08-08T20:26:02Z

‎Project About

Ossalanr: /* Project About */

2016-08-08T20:24:48Z

‎Project About

Ossalanr: /* Contributors */

2016-08-08T20:23:19Z

‎Contributors

Ossalanr: /* Testing */

2016-08-08T19:49:03Z

‎Testing

Ossalanr: /* Road Map and Getting Involved */

2016-08-08T19:46:20Z

‎Road Map and Getting Involved

Ossalanr: /* Road Map and Getting Involved */

2016-08-08T19:45:23Z

‎Road Map and Getting Involved

Ossalanr: Added blog pointer

2016-03-08T18:50:20Z

Added blog pointer

Ossalanr: /* OWASP Assimilation Project Summary */

2016-03-07T17:51:02Z

‎OWASP Assimilation Project Summary

Ossalanr: Added reference to threat model...

2016-03-07T17:49:58Z

Added reference to threat model...

@@ Line 178: / Line 178: @@
 =Minimum Viable Product=
-The Tool Project Template must specify the minimum set of tabs a project should have, provide some an example layout on each tab, provide instructional text on how a project leader should modify the tab, and give some example text that illustrates how to create an actual project.
+The OWASP Assimilation Project needs to have the following capabilities in order to be considered minimally viable:
-It would also be ideal if the sample text was translated into different languages.
+* Discovery of IP and MAC addresses through ARP
 =Project About=

@@ Line 189: / Line 189: @@
 =Project About=
-<!-- Instructions are in RED and should be removed from your document by deleting the text with the span tags.-->
 {{:Projects/OWASP_Assimilation_Project_About_Page}}

@@ Line 192: / Line 192: @@
 <span style="color:#ff0000">
 	This page is where you need to place your legacy project template page if your project was created before October 2013. To edit this page you will need to edit your project information template. You can typically find this page by following this address and substituting your project name where it says "OWASP_Example_Project". When in doubt, ask the OWASP Projects Manager.
-Example template page: https://www.owasp.org/index.php/Projects/OWASP_Example_Project
+Example template page: https://www.owasp.org/index.php/Projects/OWASP_Assimilation_Project
 </span>
-{{:Projects/OWASP_Example_Project_About_Page}}
+{{:Projects/OWASP_Assimilation_Project_About_Page}}
 __NOTOC__ <headertabs />
 [[Category:OWASP Project]]  [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]]  [[Category:OWASP_Tool]]

@@ Line 111: / Line 111: @@
 ==Contributors==
-The OWASP Tool Project Template is developed by a worldwide team of volunteers. A live update of project  [https://github.com/OWASP/Security-Principles/graphs/contributors contributors is found here].
 The first contributors to the project were:
-* [https://www.owasp.org/index.php/User:Clerkendweller Colin Watson] who created the OWASP Cornucopia project that the template was derived from
+* Alan Robertson
-* [https://www.owasp.org/index.php/User:Chuck_Cooper Chuck Cooper] who edited the template to convert it from a documentation project to a Tool Project Template
+* Carrie Oswald
-* '''YOUR NAME BELONGS HERE AND YOU SHOULD REMOVE THE PRIOR 3 NAMES'''
+* Dave Quigley
 = Road Map and Getting Involved =

@@ Line 169: / Line 169: @@
 ===Testing===
-We have need both for human testers - people to do trials and provide feedback, and people to enhance our automated testing environment. Most of the automated testing is in Python, with some in the shell, and C.
+We have need both for human testers - people to do trials and provide feedback, and people to enhance our automated testing environment. Most of the automated testing is in Python, with some in the shell, and C. We have a unique and powerful system-level testing methodology which was [http://assimilationsystems.com/2016/05/24/testing-distributed-systems-with-fuzzy-monkey-testing/ described on our blog]. The source code for these system-level tests can be found [https://github.com/assimilation/assimilation-official/tree/master/cma/systemtests in this directory] on GitHub.
 ===Building and Related Topics===

← Older revision		Revision as of 19:46, 8 August 2016
Line 137:		Line 137:
	* Many more discovery agents. These turn out to be typically pretty simple, and can be written with very little knowledge of the project internals. They have a very shallow learning curve to get started.		* Many more discovery agents. These turn out to be typically pretty simple, and can be written with very little knowledge of the project internals. They have a very shallow learning curve to get started.

−	There is also a page that describes the future thinking as of August 2016 on [http://assimilationsystems.com/2016/08/06/assimilation-2016-security-roadmap/ our blog].	+	There is also a page that describes the future thinking as of August 2016 [http://assimilationsystems.com/2016/08/06/assimilation-2016-security-roadmap/ on our latest roadmap blog post].

← Older revision		Revision as of 19:45, 8 August 2016
Line 137:		Line 137:
	* Many more discovery agents. These turn out to be typically pretty simple, and can be written with very little knowledge of the project internals. They have a very shallow learning curve to get started.		* Many more discovery agents. These turn out to be typically pretty simple, and can be written with very little knowledge of the project internals. They have a very shallow learning curve to get started.

−	There is also a page that describes the future thinking as of August ~~2015~~ on [http://assimilationsystems.com/~~2015~~/08/10/~~cybersecurity~~-roadmap~~-2015~~/ our blog]~~. This does not include any thinking about security scoring~~.	+	There is also a page that describes the future thinking as of August 2016 on [http://assimilationsystems.com/2016/08/06/assimilation-2016-security-roadmap/ our blog].

← Older revision		Revision as of 18:50, 8 March 2016
Line 58:		Line 58:

	[http://assimilationsystems.com/category/how-to/ How-To articles]		[http://assimilationsystems.com/category/how-to/ How-To articles]
		+
		+	[http://assimilationsystems.com/category/blog/ Blog]

	== Project Leader ==		== Project Leader ==

@@ Line 8: / Line 8: @@
 ==OWASP Assimilation Project Summary==
-No matter your threat model, it's necessary to know what you have.
-Many people compare securing systems against attackers as a form of warfare. In ''The Art of War'', Sun Tzu said [https://en.wikiquote.org/wiki/Sun_Tzu#/media/File:Enchoen27n3200.jpg "If you know your enemies and know yourself, you will not be imperiled in a hundred battles"]. The Assimilation software helps you know yourself - your systems, networks, configurations in great detail, and then keeps it all that information ''continually'' up to date in a graph-based Configuration Management Database.
+Many people compare securing systems against attackers as a form of warfare. In ''The Art of War'', Sun Tzu said [https://en.wikiquote.org/wiki/Sun_Tzu#/media/File:Enchoen27n3200.jpg "If you know your enemies and know yourself, you will not be imperiled in a hundred battles"]. The Assimilation software helps you know yourself - your systems, networks, configurations in great detail, and then keeps it all that information ''continually'' up to date in a graph-based Configuration Management Database. This information is useful regardless of your threat model.
 We then leverage this knowledge to compare your systems against hardening best practices, to validate checksums of files, look for vulnerable versions of packages, and help you triage your way to better security.

← Older revision		Revision as of 17:49, 7 March 2016
Line 8:		Line 8:

	==OWASP Assimilation Project Summary==		==OWASP Assimilation Project Summary==
		+	No matter your threat model, it's necessary to know what you have.
	Many people compare securing systems against attackers as a form of warfare. In ''The Art of War'', Sun Tzu said [https://en.wikiquote.org/wiki/Sun_Tzu#/media/File:Enchoen27n3200.jpg "If you know your enemies and know yourself, you will not be imperiled in a hundred battles"]. The Assimilation software helps you know yourself - your systems, networks, configurations in great detail, and then keeps it all that information ''continually'' up to date in a graph-based Configuration Management Database.		Many people compare securing systems against attackers as a form of warfare. In ''The Art of War'', Sun Tzu said [https://en.wikiquote.org/wiki/Sun_Tzu#/media/File:Enchoen27n3200.jpg "If you know your enemies and know yourself, you will not be imperiled in a hundred battles"]. The Assimilation software helps you know yourself - your systems, networks, configurations in great detail, and then keeps it all that information ''continually'' up to date in a graph-based Configuration Management Database.