OWASP Brasil Manifesto/en - Revision history

Sapao: /* How can OWASP help? */

2011-06-24T17:48:13Z

‎How can OWASP help?

Sapao: /* Allow and encourage research on cyber attacks and defenses */

2011-06-24T17:47:01Z

‎Allow and encourage research on cyber attacks and defenses

Sapao: /* The Open Web Application Security Project */

2011-06-24T17:44:53Z

‎The Open Web Application Security Project

Sapao: /* Web Insecurity */

2011-06-24T17:42:29Z

‎Web Insecurity

Sapao: /* Executive Summary */

2011-06-24T17:32:47Z

‎Executive Summary

Sapao: /* Web Security - A Window of Opportunity */

2011-06-24T17:30:10Z

‎Web Security - A Window of Opportunity

Clerkendweller: /* Requiring the use of encrypted connections (SSL) for web applications */

2011-06-21T17:37:17Z

‎Requiring the use of encrypted connections (SSL) for web applications

Clerkendweller: /* Competitive advantages for the country */ Suggested edits

2011-06-21T17:34:01Z

‎Competitive advantages for the country: Suggested edits

Clerkendweller: /* What can we do? */ Suggested edits

2011-06-21T17:31:26Z

‎What can we do?: Suggested edits

Show changes

Clerkendweller: /* The OWASP Project */ Suggested edits

2011-06-21T16:58:16Z

‎The OWASP Project: Suggested edits

← Older revision		Revision as of 17:48, 24 June 2011
Line 246:		Line 246:
	The materials and guidelines developed by OWASP can be translated into any language in order to serve as a subsidy in developing legislation or regulations. OWASP has good practice guides and standards that can be used as input to the development of governmental documents in line with the best international practices.		The materials and guidelines developed by OWASP can be translated into any language in order to serve as a subsidy in developing legislation or regulations. OWASP has good practice guides and standards that can be used as input to the development of governmental documents in line with the best international practices.

−	The experts that participate in OWASP are willing to contribute to make the country to move in the right direction and may serve as an advisory body or liaison with foreign experts if necessary~~. OWASP is a non-profit and all specialists involved are volunteers~~.	+	The experts that participate in OWASP are willing to contribute to make the country to move in the right direction and may serve as an advisory body or liaison with foreign experts if necessary.

@@ Line 72: / Line 72: @@
 ====Allow and encourage research on cyber attacks and defenses====
-Cyber crime legislation is needed and OWASP's position is the protection of illegal or harmful activities. However, OWASP realizes that some initiatives to legislate about electronic crimes may also hamper legitimate activities and the much needed research that will allow us to correctly address security vulnerabilities.
+Cyber crime legislation is needed and OWASP's position is not the protection of illegal or harmful activities. However, OWASP realizes that some initiatives to legislate about electronic crimes may also hamper legitimate activities and the much needed research that will allow us to correctly address security vulnerabilities.
 We believe that legislation should focus on intent, criminalizing activities that aim to cause damage to society and enabling research activities that benefit society by creating knowledge crucial to the improvement of secure systems.

@@ Line 54: / Line 54: @@
 OWASP is a new type of organization. Its freedom from commercial pressures allows it to provide unbiased, practical, cost-effective advice on application security. OWASP is not affiliated with any technology company, while supporting the informed use of commercial security technology. As many open-source software projects, OWASP produces many types of materials in a collaborative and open manner.
-The OWASP project has among its documents and important tools for maintaining the security of applications and also promotes important conferences in this area. All OWASP projects are published using [https://www.owasp.org/index.php/OWASP_Licenses free software or Creative Commons licenses].
+The OWASP project has among its documents and important tools for maintaining the security of applications and also promotes important conferences in this area. All OWASP projects are free to use and distribute.
 OWASP is a non-profit and its members participate in its activities voluntarily. All proceeds of the project come from donations and are used to support its activities and its infrastructure.

@@ Line 44: / Line 44: @@
   add local statistics here.
-The state of Internet security is delicate and tends to worsen as society increases its dependency on this infrastructure. In an analogy with recent financial market crisis (subprime crisis in the housing market), we have a vibrant ecosystem of applications and Web sites whose base is not solid enough. The risk is real that the basis of this ecosystem can collapse, as happened with the financial markets, and the consequences could be devastating for society as a whole. As in the case of financial markets, solidifying the infrastructure is important and the cost is certainly lower than expected if there were a crisis before acting.
+The state of Internet security is delicate and tends to worsen as society increases its dependency on this network and its applications. In an analogy with recent financial market crisis (subprime crisis in the housing market), we have a vibrant ecosystem of applications and Web sites whose base is not solid enough. The risk is real that the basis of this ecosystem can collapse, as happened with the financial markets, and the consequences could be devastating for society as a whole. As in the case of financial markets, securing the foundation is important and the cost is certainly lower than expected if there were a crisis before acting.
 ==The Open Web Application Security Project==

@@ Line 3: / Line 3: @@
 ==Executive Summary==
-The Open Web Application Security Project (OWASP) is a global and open community focused on improving the security of software systems and has chapters in several Brazilian cities. This document presents the vision of the Brazilian OWASP community on how the Brazilian government can act to improve security on the Internet.
+The Open Web Application Security Project (OWASP) is a global and open community focused on improving the security of software systems and has chapters in cities around the world. This document presents the vision of the Brazilian OWASP community on how the governments can act to improve security on the Internet.
-In this paper, we present suggestions and recommendations regarding public policy, legislation and other activities that we believe could contribute to improving the security of the Brazilian Internet and related software applications.
+In this paper, we present suggestions and recommendations regarding public policy, legislation and other activities that we believe could contribute to improving the security of the Internet and related software applications.
 The recommendations are divided according to the focus of each agency:
@@ Line 14: / Line 14: @@
 * all public bodies
-The recommendations do not have dependencies on each other, but we believe that maximum efficiency occurs with the implementation of all recommendations. Improving security in the Brazilian Internet could bring several advantages for the country, such  as the attraction of investment, training of the workforce and the development of an industry capable of exporting products and services with high added value.
+The recommendations do not have dependencies on each other, but we believe that maximum efficiency occurs with the implementation of all recommendations. Improving security in the local Internet could bring several advantages for the country, such  as the attraction of investment, training of the workforce and the development of an industry capable of exporting products and services with high added value.
-Brazilian experts that participate in OWASP are willing to contribute to the country, to help it move in the right direction and, for example, could serve as an advisory body or provide a channel for liaison with foreign experts if necessary. The OWASP organization is non-profit, and all specialists involved are volunteers.
+The experts that participate in OWASP are willing to contribute to the country, to help it move in the right direction and, for example, could serve as an advisory body or provide a channel for liaison with foreign experts if necessary. The OWASP organization is non-profit, and all specialists involved are volunteers.
 ==Web Insecurity==

@@ Line 1: / Line 1: @@
 =Web Security - A Window of Opportunity=
-'''A white paper from OWASP Brazil to the Brazilian Government'''
+'''A white paper from OWASP to Governments'''
 ==Executive Summary==

@@ Line 174: / Line 174: @@
 Many attacks exist today are only possible because some organizations do not use even the most basic security mechanisms available. One such mechanism is the SSL protocol, which allows the encryption of data transmitted between the browser and web servers, ensuring the confidentiality and authenticity of information.
-Thus, a simple and effective measure to improve safety web systems is to require that data must be transmitted securely over the Internet network.
+Thus, one simple measure to improve the security of web systems is to require that data must be transmitted securely over the Internet network.
 ===For research and teaching institutions===

@@ Line 232: / Line 232: @@
 ==Competitive advantages for the country==
-The technology field is an economic activity with high added value and the ability to generate wealth for the country. With the support and leadership from the government, the country has the potential to become a world leader in application security, and may also generate revenue by exporting products and services with high added value and by creating new businesses.
+The technology field is an economic activity with high added value, and therefore has the ability to generate wealth for the country. With the support and leadership from the government, the country has the potential to become a world leader in application security, and may also generate revenue by exporting products and services with high added value and by creating new businesses.
-Because it is a labor-intensive activity, there is also the possibility of creating jobs in the country for highly trained professionals. The existence of trained professionals in security also supports national sovereignty, since such knowledge is crucial in case of cyber-conflicts or electronic warfare.
+Because it is a labor-intensive activity, there is also the possibility of creating jobs in the country for highly trained professionals. The existence of trained professionals in security also supports national sovereignty, since such knowledge is crucial in cyber-conflicts, cyber espionage and electronic warfare.
-The development of a field closely linked to information technology also has the potential to foster the development of related areas, increasing the country's technological capability.
+The development of this field closely linked to information technology also has the potential to foster the development of related areas, increasing the country's technological capability.
-The improvement of the online business environment tends to improve the country's international image, so that it begins to be considered a safe haven for business, both online and off. A favorable business environment may attract international investments, especially investments in businesses directly related to the Internet or enterprise software development.
+The improvement of the online business environment tends to improve the country's international image, so that it begins to be considered a safe haven for business, both online and off. A favorable business environment may attract international investment, especially investment in businesses directly related to the Internet or enterprise software development.
 ==How can OWASP help?==

@@ Line 46: / Line 46: @@
 The state of Internet security is delicate and tends to worsen as society increases its dependency on this infrastructure. In an analogy with recent financial market crisis (subprime crisis in the housing market), we have a vibrant ecosystem of applications and Web sites whose base is not solid enough. The risk is real that the basis of this ecosystem can collapse, as happened with the financial markets, and the consequences could be devastating for society as a whole. As in the case of financial markets, solidifying the infrastructure is important and the cost is certainly lower than expected if there were a crisis before acting.
-==The OWASP Project==
+==The Open Web Application Security Project==
-The OWASP (Open Web Application Security Project) is a global community, focused on improving software security. There are over 180 local OWASP chapters in all regions of the globe that bring together the world's leading experts in application security.
+OWASP is a global community, focused on improving software security. There are over 180 local OWASP chapters in all regions of the globe that bring together the world's leading experts in application security.
-OWASP is an open community dedicated to empowering organizations to be able to conceive, develop, acquire, operate and maintain systems that are reliable. All tools, documents, forums, and sections of OWASP is free and open to anyone interested in improving application security.
+OWASP is an open community dedicated to empowering organizations to be able to conceive, develop, acquire, operate and maintain systems that are reliable. All tools, documents, forums, and sections of OWASP are free and open to anyone interested in improving application security.
-OWASP is a new type of organization. Our freedom from commercial pressures allows us to provide unbiased, practical, cost-effective advice on application security. The OWASP is not affiliated with any technology company, while supporting the informed use of commercial security technology. As many open-source software projects, OWASP produces many types of materials in a collaborative and open manner.
+OWASP is a new type of organization. Its freedom from commercial pressures allows it to provide unbiased, practical, cost-effective advice on application security. OWASP is not affiliated with any technology company, while supporting the informed use of commercial security technology. As many open-source software projects, OWASP produces many types of materials in a collaborative and open manner.
 The OWASP project has among its documents and important tools for maintaining the security of applications and also promotes important conferences in this area. All OWASP projects are published using [https://www.owasp.org/index.php/OWASP_Licenses free software or Creative Commons licenses].