OWASP Data Exchange Format Project - Revision history

Claudia casanovas at 04:26, 13 February 2016

2016-02-13T04:26:31Z

2015-05-03T00:33:16Z

‎Main

2014-06-05T15:34:43Z

2014-06-03T18:28:59Z

2011-08-26T14:22:49Z

2011-07-26T12:24:04Z

2011-07-23T15:01:24Z

2011-07-22T16:12:05Z

2011-07-21T12:29:16Z

2011-07-21T12:26:27Z

@@ Line 1: / Line 1: @@
 ==== Main  ====
-<div style="width:100%;height:100px;border:0,margin:0;overflow: hidden;">[[File:Low_activity.jpg|link=]]</div>
+<!-- DO NOT ALTER OR REMOVE THE TEXT ON NEXT LINE -->
 At the moment exchanging data between pentest tools it is far too difficult.

@@ Line 1: / Line 1: @@
 ==== Main  ====
+<div style="width:100%;height:100px;border:0,margin:0;overflow: hidden;">[[File:Low_activity.jpg|link=]]</div>
 At the moment exchanging data between pentest tools it is far too difficult.
@@ Line 12: / Line 12: @@
 Old Project Leader(s) Contact [[User:Psiinon|Simon]] or [[User:Dinis_Cruz|Dinis]].
 === Requirements  ===

@@ Line 25: / Line 25: @@
 # Tom Stage to document a strawman proposal
 # All - rip the strawman to pieces and agree an improved format
 # Finalize DEF v1.0
@@ Line 33: / Line 34: @@
 ==== Strawman  ====
-The strawman as it looks today (03-06-2014)
+The strawman as it looks today (03-06-2014), for the latest strawman visit the above GitHub page.
 This tab documents a strawman proposal for all concerned to rip to pieces :)

@@ Line 29: / Line 29: @@
 ==== Strawman  ====
-This tab will document a strawman proposal for all concerned to rip to pieces :)
+This tab documents a strawman proposal for all concerned to rip to pieces :)
-Rather than diving into the detail of the format I think its worth agreeing some of the proposed characteristics of v1.0:
+<pre>
-* The format will be JSON (to make it as simple as possible)
+<Session>
-* Products can generate and/or consume DEF
+    <!-- Note that most of the elements will probably be optional-->
-* Products will be able to generate DEF via a defined REST interface and/or simple files - products can choose
+    <Session-reference>Product specific reference</Session-reference>
-* Products which consume DEF must support both REST and file options
+    <Tool-name>Name of the tool that found the issue</Tool-name>
-* There will be minimal security (but REST based services can limit by IP addr)
+    <Tool-version>Version of the tool that found the issue</Tool-version>
-* The data model will cover: hosts, ports, sites (host:port), urls, issues, requests/responses
+    <Date-time>Date and time the session was started</Date-time>
-* Products can generate a subset of DEF, the level support will be described in the DEF
+    <Summary>A sort (one line) description</Summary>
 ==== Supporting projects  ====

← Older revision		Revision as of 12:24, 26 July 2011
Line 6:		Line 6:

	Involvement is encouraged, so if you would like to contribute to this project then please join the [https://lists.owasp.org/mailman/listinfo/owasp-data-exchange-format mailing list] and / or contact one of the project leaders.		Involvement is encouraged, so if you would like to contribute to this project then please join the [https://lists.owasp.org/mailman/listinfo/owasp-data-exchange-format mailing list] and / or contact one of the project leaders.
		+
		+	Theres also a Google Code project http://code.google.com/p/owasp-def/ which we're using to store things like example formats used by pentest products.
		+	Contact [[User:Psiinon\|Simon]] or [[User:Dinis_Cruz\|Dinis]] to get commit access to this project.

	=== Requirements ===		=== Requirements ===

@@ Line 52: / Line 52: @@
 | [http://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project Zed Attack Proxy]
 | [[User:Psiinon|Simon Bennetts (Psiinon)]]
 |}

@@ Line 4: / Line 4: @@
 So ... the purpose of this project is to define a simple, open format for exchanging data between pentest tools!
 === Requirements  ===
@@ Line 32: / Line 34: @@
 The following project leaders have agreed to support this format and (once it has been agreed) adopt it within their projects.
-If you want your project added to this list then feel free to update it, or contact one of the project leaders to update it for you.
+If you would like your project added to this list then feel free to update it, or contact one of the project leaders to update it for you.
 {| border="1" align="left" cellspacing="1" cellpadding="1"

@@ Line 17: / Line 17: @@
 # Psiinon to document a strawman proposal
 # All - rip the strawman to pieces and agree an improved format
-# Supporting project leaders to adopt the format in their tool
+# Finalize DEF v1.0
 # Publicize and drive adoption in other tools
 # Learn from our experiences and start on the next version, repeat ;)