OWASP Common Numbering Project - Revision history

Kait Disney-Leugers at 16:02, 17 April 2014

2014-04-17T16:02:36Z

Jason Li at 03:14, 7 July 2011

2011-07-07T03:14:54Z

Wichers at 14:02, 24 March 2011

2011-03-24T14:02:14Z

Wichers at 14:36, 18 March 2011

2011-03-18T14:36:59Z

Wichers at 14:25, 18 March 2011

2011-03-18T14:25:06Z

Wichers at 14:54, 15 March 2011

2011-03-15T14:54:24Z

Wichers at 14:53, 15 March 2011

2011-03-15T14:53:45Z

Wichers at 22:02, 10 March 2011

2011-03-10T22:02:33Z

Wichers at 20:59, 10 March 2011

2011-03-10T20:59:25Z

Paulo Coimbra at 16:24, 7 March 2011

2011-03-07T16:24:24Z

← Older revision		Revision as of 16:02, 17 April 2014
Line 1:		Line 1:
		+	{\|
		+	\|-
		+	! width="700" align="center" \| <br>
		+	! width="500" align="center" \| <br>
		+	\|-
		+	\| align="right" \| [[Image:OWASP Inactive Banner.jpg\|800px\| link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Inactive_Projects]]
		+	\| align="right" \|
		+
		+	\|}
		+
	==== Home ====		==== Home ====
	<table width="100%" valign="top"><tr><th width="100%"> </th><th> </th></tr><tr valign="top">		<table width="100%" valign="top"><tr><th width="100%"> </th><th> </th></tr><tr valign="top">

@@ Line 10: / Line 10: @@
 </table>
-==== OWASP Common Requirements Numbering Scheme====
+==== OWASP Common Requirements Numbering Scheme DRAFT====
 <table width="100%" valign="top"><tr><th width="50%"> </th><th> </th></tr><tr valign="top">
 <td>'''Proposed OWASP Common Requirements Numbering Scheme Format:'''

@@ Line 116: / Line 116: @@
 |-
 | OCR-AUTH-19
-| The date/time of the last successful login is reported to the user during after they login, along with the number of failed login attempts since the last successful login.
+| The date/time of the last successful login is reported to the user after they login, along with the number of failed login attempts since the last successful login.
 |-
 | OCR-AUTH-20

@@ Line 156: / Line 156: @@
-{{{#!comment 00 Lets comment all this other stuff out for now.
+{{{#!comment         Lets comment all this other stuff out for now.
 ==== Mapping to Legacy Testing Guide IDs  ====
@@ Line 162: / Line 162: @@
 Note: This is still a work in progress and is currently incomplete.
-{| class="prettytable"
+{class="prettytable" <-- this needs a pipe character in front of class to work. I had to remove it because it was causing this line to be displayed even though this entire block is commented out.
-|-
 | <center>'''Ref. Number'''</center>
 | <center>'''Test Name'''</center>
@@ Line 457: / Line 457: @@
 Note: This is still a work in progress and is currently incomplete.
-{| class="prettytable"
+{| class="pretty3table"
 |-
 | <center>'''Ref. Number'''</center>

@@ Line 49: / Line 49: @@
 </td></tr>
 </table>
 ==== Mapping to Legacy Testing Guide IDs  ====
@@ Line 420: / Line 528: @@
 | OWASP-0201
 |}
 ==== Project About ====

@@ Line 43: / Line 43: @@
 </td>
 <td>'''Reference'''
-*1st Element - Document code (OCN=OWASP Common Number, ODG=OWASP Development Guide, OTG=OWASP Testing Guide, OCG=OWASP Code Review Guide, others reserved)
+*1st Element - Document code (OCR=OWASP Common Requirements Number, ODG=OWASP Development Guide, OTG=OWASP Testing Guide, OCG=OWASP Code Review Guide, others reserved)
 *2nd Element - Requirement Area (major)
 *3rd Element - Detailed Requirement Identifier (minor with up to one sublevel (e.g., .01, .02)

@@ Line 10: / Line 10: @@
 </table>
-==== Common OWASP Numbering Scheme====
+==== OWASP Common Requirements Numbering Scheme====
 <table width="100%" valign="top"><tr><th width="50%"> </th><th> </th></tr><tr valign="top">
-<td>'''Proposed OWASP Common Numbering Scheme Format:'''
+<td>'''Proposed OWASP Common Requirements Numbering Scheme Format:'''
-  OCN-AUTHN-01
+  OCR-AUTHN-01
-  OCN-AUTHN-02
+  OCR-AUTHN-02
-  OCN-AUTHN-02.01
+  OCR-AUTHN-02.01
-  OCN-AUTHN-03
+  OCR-AUTHN-03
-  OCN-INPVAL-01
+  OCR-INPVAL-01
-  OCB-INPVAL-02
+  OCR-INPVAL-02
-Common Numbering Scheme Proposed Requirement Areas:
+Common Requirements Numbering Scheme Proposed Requirement Areas:
-* OCN-AUTHN: Authentication
+* OCR-AUTHN: Authentication
-* OCN-SESS: Session Management
+* OCR-SESS: Session Management
-* OCN-INPVAL: Input Validation
+* OCR-INPVAL: Input Validation
-* OCN-OUTENC: Output Encoding
+* OCR-OUTENC: Output Encoding
-* OCN-AUTHZ: Functional and Data Layer Access Control
+* OCR-AUTHZ: Functional and Data Layer Access Control
-* OCN-BUS: Business Logic
+* OCR-BUS: Business Logic
-* OCN-DATAP: Sensitive Data Protection
+* OCR-DATAP: Sensitive Data Protection
-* OCN-CRYPST: Cryptographic Storage
+* OCR-CRYPST: Cryptographic Storage
-* OCN-COMMS: Communication Security
+* OCR-COMMS: Communication Security
-* OCN-ERROR: Error Handling
+* OCR-ERROR: Error Handling
-* OCN-LOG: Logging
+* OCR-LOG: Logging
-* OCN-DBASE: Secure Database Usage
+* OCR-DBASE: Secure Database Usage
-* OCN-FILE: Secure File Access
+* OCR-FILE: Secure File Access
-* OCN-MEM: Memory Management
+* OCR-MEM: Memory Management
-* OCN-GEN: General Coding Practices
+* OCR-GEN: General Coding Practices
-* OCN-CONFIG: Secure System Configuration
+* OCR-CONFIG: Secure System Configuration
-* OCN-INTEG: Integrity
+* OCR-INTEG: Integrity
-* OCN-AVAIL: Availability
+* OCR-AVAIL: Availability
 </td>

@@ Line 3: / Line 3: @@
 <td>'''Common OWASP Numbering'''
-An exciting development, a new numbering scheme that will be common across OWASP Guides and References is being developed. The numbering is loosely based on the OWASP ASVS section and detailed requirement numbering. OWASP ASVS, Guide, and Reference project leads and contributors as well as the OWASP leadership plan to work together to develop numbering that would allow for easy mapping between OWASP Guides and References, and that would allow for a period of transition as Guides and References are updated to reflect the new numbering. This project will provide a centralized clearinghouse for mapping information. For more information, please contact [mailto:dave.wichers@owasp.org Dave Wichers].
+An exciting development, a new numbering scheme that will be common across various OWASP Guides and References is being developed. This  numbering scheme is loosely based on the OWASP ASVS section and detailed requirements numbering. The OWASP ASVS, Guide, and Reference project leads and contributors plan to work together to develop a numbering scheme that facilitates easier mapping between various OWASP Guides and References, and that would allow for a period of transition as the Guides and References are updated to reflect the new numbering scheme. This project will provide a centralized clearinghouse for mapping information. For more information on this project, or if you wish to contribute, please contact [mailto:dave.wichers@owasp.org Dave Wichers].
-This common numbering will be of requirements. A mapping of vulnerabilities to this requirements list will most likely be developed after the common requirements list is created. This common numbering scheme is intended to be independent of any particular OWASP project and is not intended to dictate how those projects are developed and organized. Its intent is to be a resource to facilitate cross referencing between related topics and to encourage, but not require, projects like the OWASP Guides to adopt a similar structure. But that decision is up to the respective project leads.
+This common numbering scheme will be of requirements. A mapping of vulnerabilities to this requirements list will most likely be developed after the common requirements list is created. This common numbering scheme is intended to be independent of any particular OWASP project and is not intended to dictate how those projects are developed and organized. Its intent is to be a resource to facilitate cross referencing between related topics and to encourage, but not require, projects like the OWASP Guides to adopt a similar structure. But that decision is up to the respective project leads.
 </td>
 </tr>
@@ Line 12: / Line 12: @@
 ==== Common OWASP Numbering Scheme====
 <table width="100%" valign="top"><tr><th width="50%"> </th><th> </th></tr><tr valign="top">
-<td>'''Common OWASP Numbering Scheme'''
+<td>'''Proposed OWASP Common Numbering Scheme Format:'''
   OCN-AUTHN-01
@@ Line 346: / Line 346: @@
 ==== Mapping to Top 10 2010 IDs  ====
 {| class="prettytable"

@@ Line 419: / Line 419: @@
 |}
 ==== Project About ====
 {{:Projects/OWASP Common Numbering Project | Project About}}