OWASP Mobile Security Project Call For Volunteers - Revision history

Jack Mannino at 05:36, 2 June 2011

2011-06-02T05:36:07Z

Jack Mannino at 05:34, 2 June 2011

2011-06-02T05:34:40Z

Jack Mannino at 05:31, 2 June 2011

2011-06-02T05:31:06Z

Jack Mannino at 05:29, 2 June 2011

2011-06-02T05:29:53Z

Jack Mannino at 05:28, 2 June 2011

2011-06-02T05:28:23Z

Jack Mannino at 05:22, 2 June 2011

2011-06-02T05:22:59Z

Jack Mannino at 05:21, 2 June 2011

2011-06-02T05:21:49Z

Jack Mannino: Created page with "We are pleased to announce a call for participation to help shape the OWASP Mobile Top 10 Risks. This “Top 10” initiative is intended to help organizations determine how to b..."

2011-06-02T05:20:55Z

Created page with "We are pleased to announce a call for participation to help shape the OWASP Mobile Top 10 Risks. This “Top 10” initiative is intended to help organizations determine how to b..."

New page

We are pleased to announce a call for participation to help shape the OWASP Mobile Top 10 Risks. This “Top 10” initiative is intended to help organizations determine how to best apply development and security resources to better protect their mobile applications and data.

In order to compile the most thorough and universally accepted guidance possible, we are reaching out to software developers, security consultants, and thought leaders from all industries to participate. This includes independent developers and consultants, startups, large consultancies, and large development companies. If you have an interest in mobile application security and the expertise to contribute, we invite you to get involved with this initiative. The OWASP organization is built on openness and transparency, and our vision is for this initiative to adhere to these very same high standards. Participation is open and highly encouraged for all.

We are breaking this initiative into three distinct phases. Each phase will build upon the previous phase's achievements and outputs, helping to refine our data set as we progress. The phases are broken down as follows:

Phase I (6/2/2011- 6/30/2011)

*Survey for recommendations for promotion, demotion, and removal of current risks
*Suggestions for new candidates to consider for inclusion in the final Top 10 Risks
*Survey can be found here: [https://spreadsheets.google.com/spreadsheet/viewform?hl=en_US&formkey=dGNRclMxQ3FaMWd3N1A1c0tDX2otM1E6MQ spreadsheets.google.com/spreadsheet/viewform]

 Phase II (7/7/2011- 8/4/2011) Compile all information from Phase I Release new set of candidates for consideration Rate and rank candidates using the official OWASP Risk Rating Methodology Provide metrics and supporting information

 Phase III (8/11/2011- 9/8/2011) Compute and compile Phase II information Create Top 10 release candidate list Release list to Phase I and II participants for feedback Perform final revisions and solicit final feedback before official release

 While participation is open to all, we will be enforcing one rule: participation in Phases II and III is dependent upon participation in all phases. We are pursuing aggressive time lines, and in order to promote an orderly and focused effort, the projects' leadership felt that this would be the best way to achieve it. Therefore, we ask that if you wish to be heavily involved in this initiative, that you plan accordingly based on the proposed time lines above.

We thank all of you in advance for your participation and hard work in making this initiative a success. Your participation will be noted and recorded when compiling the list of contributors for the final release of the Mobile Top 10 Risks documentation.

Sincerely, OWASP Mobile Security Project Leadership

@@ Line 15: / Line 15: @@
 *Survey to obtain recommendations for promotion, demotion, and removal within current risks
 *Suggestions for new candidates to consider for inclusion in the final Top 10 Risks
-*Survey can be found here:&nbsp;[https://spreadsheets.google.com/spreadsheet/viewform?hl=en_US&formkey=dGNRclMxQ3FaMWd3N1A1c0tDX2otM1E6MQ spreadsheets.google.com/spreadsheet/viewform]
+*Survey can be found here: [https://spreadsheets.google.com/spreadsheet/viewform?hl=en_US&formkey=dGNRclMxQ3FaMWd3N1A1c0tDX2otM1E6MQ Mobile Top 10 Risks Survey]
 <br>'''Phase II (7/7/2011- 8/4/2011)'''
@@ Line 37: / Line 37: @@
 We thank all of you in advance for your participation and hard work in making this initiative a success. Your participation will be noted and recorded when compiling the list of contributors for the final release of the Mobile Top 10 Risks documentation.
 If you have questions regarding this initiative, please contact the [https://www.owasp.org/index.php/OWASP_Mobile_Security_Project project leaders listed on the main page. &nbsp;]&nbsp;&nbsp;We also encourage you to join the [https://lists.owasp.org/mailman/listinfo/owasp-mobile-security-project mailing list]&nbsp;and [http://myowasp.ning.com/group/owaspmobilesecurityproject My OWASP groups] in order to collaborate with other participants.
 <br>
 Sincerely,<br>OWASP Mobile Security Project Leadership

@@ Line 9: / Line 9: @@
 We are breaking this initiative into three distinct phases. Each phase will build upon the previous phase's achievements and outputs, helping to refine our data set as we progress. The phases are broken down as follows:
+<br>
 '''Phase I (6/2/2011- 6/30/2011)'''
@@ Line 36: / Line 36: @@
 We thank all of you in advance for your participation and hard work in making this initiative a success. Your participation will be noted and recorded when compiling the list of contributors for the final release of the Mobile Top 10 Risks documentation.
 <br>
 Sincerely,<br>OWASP Mobile Security Project Leadership

← Older revision		Revision as of 05:31, 2 June 2011
Line 8:		Line 8:

	We are breaking this initiative into three distinct phases. Each phase will build upon the previous phase's achievements and outputs, helping to refine our data set as we progress. The phases are broken down as follows:		We are breaking this initiative into three distinct phases. Each phase will build upon the previous phase's achievements and outputs, helping to refine our data set as we progress. The phases are broken down as follows:
		+
		+

	'''Phase I (6/2/2011- 6/30/2011)'''		'''Phase I (6/2/2011- 6/30/2011)'''

@@ Line 1: / Line 1: @@
-We are pleased to announce a call for participation to help shape the OWASP Mobile Top 10 Risks. This “Top 10” initiative is intended to help organizations determine how to best apply development and security resources to better protect their mobile applications and data.
+The [https://www.owasp.org/index.php/OWASP_Mobile_Security_Project OWASP Mobile Security Project] is&nbsp;pleased to announce a call for participation to help shape the OWASP Mobile Top 10 Risks. This “Top 10” initiative is intended to help organizations determine how to best apply development and security resources to better protect their mobile applications and data.
 <br>
@@ Line 19: / Line 19: @@
 *Compile all information from Phase I
 *Release new set of candidates for consideration
 *Rate and rank candidates using the official [https://www.owasp.org/index.php/OWASP_Risk_Rating_Methodology OWASP Risk Rating Methodology]
 *Provide metrics and supporting information

@@ Line 11: / Line 11: @@
 '''Phase I (6/2/2011- 6/30/2011)'''
-*Survey for recommendations for promotion, demotion, and removal of current risks
+*Survey to obtain recommendations for promotion, demotion, and removal within current risks
 *Suggestions for new candidates to consider for inclusion in the final Top 10 Risks
 *Survey can be found here:&nbsp;[https://spreadsheets.google.com/spreadsheet/viewform?hl=en_US&formkey=dGNRclMxQ3FaMWd3N1A1c0tDX2otM1E6MQ spreadsheets.google.com/spreadsheet/viewform]
@@ Line 19: / Line 19: @@
 *Compile all information from Phase I
 *Release new set of candidates for consideration
-*Rate and rank candidates using the official OWASP Risk Rating Methodology
+*Rate and rank candidates using the official [https://www.owasp.org/index.php/OWASP_Risk_Rating_Methodology OWASP Risk Rating Methodology]
 *Provide metrics and supporting information