OWASP Enterprise Application Security Project - Revision history

Alexander at 08:38, 29 November 2017

2017-11-29T08:38:04Z

2016-02-13T04:43:36Z

2014-04-13T22:58:59Z

2013-09-16T16:48:11Z

2013-09-15T21:33:24Z

2013-09-15T20:30:59Z

2012-12-17T17:03:51Z

2012-12-17T17:02:04Z

2012-12-17T17:01:45Z

2012-12-17T17:00:07Z

@@ Line 5: / Line 5: @@
 The OWASP Enterprise Application Security Project (OWASP-EAS) exists to provide guidance to people involved in the procurement, design, implementation, or sign-off of large scale (i.e. 'Enterprise') applications.
 == The purpose of the project  ==
@@ Line 25: / Line 27: @@
 [[Enterprise Application Security Development Issues]]
 == Project Roadmap  ==
@@ Line 42: / Line 40: @@
 __NOTOC__ <headertabs />
-[[Category:OWASP_Project|Enterprise Application Security Project]] [[Category:OWASP_Document]] [[Category:OWASP_Alpha_Quality_Document]]
+[[Category:OWASP Project|Enterprise Application Security Project]]

@@ Line 1: / Line 1: @@
 === Main  ===
+<!-- DO NOT ALTER OR REMOVE THE TEXT ON NEXT LINE -->
 == Objective  ==

@@ Line 15: / Line 15: @@
 Aware people about enterprise application security vulnerabilities by releasing annual statistics of enterprise business application security vulnerabilities.
-[[Enterprise Business Application Vulnerability Statistics]]
+[[Enterprise Application Vulnerability Statistics]]
 Help companies to begin the assessment of enterprise applications
-[[Enterprise Business Application Security Implementation Assessment]]
+[[Enterprise Application Security Vulnerability Assessment]]
 Help companies to securely develop and customize business applications
-[[Enterprise Business Application Security Development Issues]]
+[[Enterprise Application Security Development Issues]]
 Develop free tools for enterprise business applications assessment
-[[Enterprise Business Application Security Software]]
+[[Enterprise Application Security Software]]
 == Project Roadmap  ==

@@ Line 3: / Line 3: @@
 == Objective  ==
-The OWASP Enterprise Application Security Project (OWASP-EAS) exists to provide guidance to people involved in the procurement, design, implementation or sign-off of large scale (i.e. 'Enterprise') applications.
+The OWASP Enterprise Application Security Project (OWASP-EAS) exists to provide guidance to people involved in the procurement, design, implementation, or sign-off of large scale (i.e. 'Enterprise') applications.
 == The purpose of the project  ==
@@ Line 17: / Line 17: @@
 [[Enterprise Business Application Vulnerability Statistics]]
-Help companies to begin assessment of enterprise applications
+Help companies to begin the assessment of enterprise applications
 [[Enterprise Business Application Security Implementation Assessment]]
@@ Line 25: / Line 25: @@
 [[Enterprise Business Application Security Development Issues]]
-Develop free tools for Enterprise business applications assessment
+Develop free tools for enterprise business applications assessment
 [[Enterprise Business Application Security Software]]

@@ Line 15: / Line 15: @@
 Aware people about enterprise application security vulnerabilities by releasing annual statistics of enterprise business application security vulnerabilities.
-Subproject [[Enterprise Business Application Vulnerability Statistics]]
+[[Enterprise Business Application Vulnerability Statistics]]
-[[Projects/OWASP Enterprise Application Security Project|Statistics]]
+Help companies to begin assessment of enterprise applications
-Help companies to begin assessment of enterprise applicatios by creating Subproject [[Enterprise Business Application Security Implementation Assessment Guide]]
+[[Enterprise Business Application Security Implementation Assessment]]
-Help software companies to improve security of their solutions by creating Subproject [[Enterprise Business Application Security Vulnerability Testing Guide v1]]
+Help companies to securely develop and customize business applications
-Develop free tools for Enterprise business applicatioons assessment
+[[Enterprise Business Application Security Development Issues]]
-Subproject [[Enterprise Business Application Security Software]]
+Develop free tools for Enterprise business applications assessment
 == Project Roadmap  ==
 Have a look at the [[OWASP Enterprise Application Security Project/Roadmp]]
 === Statistics  ===

@@ Line 50: / Line 50: @@
 Business applications are very large and complex systems that consist of different components such as Database server, Front-end, Web server, Application server and other parts. Also, those systems rely on different hardware and software that can have their own vulnerabilities.
 Overall security of an Enterprise Business Application consist of different layers, such as:
-• Network architecture security </br>
+• Network architecture security <br>
-• OS security </br>
+• OS security <br>
-• Database security </br>
+• Database security <br>
-• Application security </br>
+• Application security <br>
-• Front-end security </br>
+• Front-end security <br>
 Every described layer may have its own vulnerabilities that can give attacker full access to business data even if other layers are completely secured. In this document, all the popular applications from described levels and their vulnerabilities will be shown. The purpose of this document is to increase awareness of Business Application security.