OWASP Project Reviewers Database - Revision history

Paulo Coimbra at 22:38, 26 November 2010

2010-11-26T22:38:04Z

Paulo Coimbra: Unprotected "OWASP Project Reviewers Database"

2010-11-24T14:43:22Z

Unprotected "OWASP Project Reviewers Database"

Paulo Coimbra: Protected "OWASP Project Reviewers Database" ([edit=sysop] (indefinite) [move=sysop] (indefinite)) [cascading]

2010-11-24T14:40:31Z

Protected "OWASP Project Reviewers Database" ([edit=sysop] (indefinite) [move=sysop] (indefinite)) [cascading]

Paulo Coimbra at 18:57, 22 November 2010

2010-11-22T18:57:48Z

Paulo Coimbra at 15:41, 9 September 2010

2010-09-09T15:41:50Z

Paulo Coimbra at 12:19, 3 September 2010

2010-09-03T12:19:31Z

Paulo Coimbra at 13:13, 2 September 2010

2010-09-02T13:13:03Z

Paulo Coimbra at 19:42, 31 August 2010

2010-08-31T19:42:12Z

Paulo Coimbra at 11:43, 30 August 2010

2010-08-30T11:43:38Z

Paulo Coimbra at 11:41, 30 August 2010

2010-08-30T11:41:19Z

@@ Line 87: / Line 87: @@
 {{:GPC_Project_Assessment/OWASP Secure Coding Practices - Quick Reference Guide              | OWASP_Project_Assessment/Row}}
 {{:GPC Project Assessment/OWASP Secure Coding Practices - Quick Reference Guide - SCP v2     | OWASP_Project_Assessment/Row}}
 |}
 __NOTOC__
 <headertabs/>

@@ Line 86: / Line 86: @@
 {{:GPC_Project_Assessment/OWASP Top Ten                                                      | OWASP_Project_Assessment/Row}}
 {{:GPC_Project_Assessment/OWASP Secure Coding Practices - Quick Reference Guide              | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP Secure Coding Practices - Quick Reference Guide - SCP v1.1   | OWASP_Project_Assessment/Row}}
+{{:GPC Project Assessment/OWASP Secure Coding Practices - Quick Reference Guide - SCP v2     | OWASP_Project_Assessment/Row}}
 |}
 __NOTOC__
 <headertabs/>

@@ Line 51: / Line 51: @@
 {{:Template:OWASP_Project_Assessment/Columns}}
-{{:GPC_Project_Assessment/OWASP Live CD                                            | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP Live CD                                                      | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP Testing Guide                                      | OWASP Project Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP Testing Guide                                                | OWASP Project Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP Ruby on Rails                                      | OWASP Project Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP Ruby on Rails                                                | OWASP Project Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP Code Review                                        | OWASP Project Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP Code Review                                                  | OWASP Project Assessment/Row}}
-{{:GPC Project Assessment/OWASP AntiSamy .NET                                      | OWASP Project Assessment/Row}}
+{{:GPC Project Assessment/OWASP AntiSamy .NET                                                | OWASP Project Assessment/Row}}
-{{:GPC Project Assessment/OWASP .NET                                               | OWASP Project Assessment/Row}}
+{{:GPC Project Assessment/OWASP .NET                                                         | OWASP Project Assessment/Row}}
-{{:GPC Project Assessment/OWASP Review Project                                     | OWASP Project Assessment/Row}}
+{{:GPC Project Assessment/OWASP Review Project                                               | OWASP Project Assessment/Row}}
-{{:GPC Project Assessment/OWASP AppSensor                                          | OWASP Project Assessment/Row}}
+{{:GPC Project Assessment/OWASP AppSensor                                                    | OWASP Project Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP Backend Security                                   | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP Backend Security                                             | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP Securing WebGoat using ModSecurity                 | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP Securing WebGoat using ModSecurity                           | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP Teachable Static Analysis Workbench                | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP Teachable Static Analysis Workbench                          | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP Access Control Rules Tester                        | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP Access Control Rules Tester                                  | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP Skavenger                                          | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP Skavenger                                                    | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP OpenSign Server                                    | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP OpenSign Server                                              | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP Code Crawler                                       | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP Code Crawler                                                 | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP OpenPGP Extensions for HTTP                        | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP OpenPGP Extensions for HTTP                                  | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP ASVS                                               | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP ASVS                                                         | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP Classic ASP Security                               | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP Classic ASP Security                                         | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP JSP Testing Tool                                   | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP JSP Testing Tool                                             | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP SQLiBENCH                                          | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP SQLiBENCH                                                    | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP Spanish                                            | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP Spanish                                                      | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP Internationalization                               | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP Internationalization                                         | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/w3af                                                     | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/w3af                                                               | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP Orizon                                             | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP Orizon                                                       | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP ASDR                                               | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP ASDR                                                         | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP Application Security Tool Benchmarking Environment | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP Application Security Tool Benchmarking Environment           | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP Education                                          | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP Education                                                    | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP Python Static Analysis                             | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP Python Static Analysis                                       | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP JBroFuzz                                           | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP JBroFuzz                                                     | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP EnDe                                               | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP EnDe                                                         | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP ModSecurity Core Rule Set                          | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP ModSecurity Core Rule Set                                    | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP Vicnum                                             | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP Vicnum                                                       | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP Content Validation using Java Annotations          | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP Content Validation using Java Annotations                    | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP Top Ten                                            | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP Top Ten                                                      | OWASP_Project_Assessment/Row}}
-{{:GPC_Project_Assessment/OWASP Secure Coding Practices - Quick Reference Guide    | OWASP_Project_Assessment/Row}}
+{{:GPC_Project_Assessment/OWASP Secure Coding Practices - Quick Reference Guide              | OWASP_Project_Assessment/Row}}
 |}
 __NOTOC__
 <headertabs/>

@@ Line 38: / Line 38: @@
 {{:GPC_Project_Reviewers/Volunteer_9 | OWASP_Reviewers_Volunteers/Row}}
 {{:GPC_Project_Reviewers/Volunteer_10 | OWASP_Reviewers_Volunteers/Row}}
 |}

@@ Line 15: / Line 15: @@
 ## Add information regarding the new review campaign in OWASP media, such as mailing lists, conferences, and the newsletter,
 #Create a mandatory rotation for all members of the GPC, so that each member will be involved in reviews as they come available.
-#Create a review template guide so that reviewers have an idea of what is expected of them. A great example of a top notch review can be seen by Matt Tesauro on JbroFuzz 1.7 [http://www.owasp.org/index.php/Category:OWASP_JBroFuzz_Project_-_Version_1.7_Release_-_Assessment#Stable_Release_Review_of_the_OWASP_JBroFuzz_Project_-_Release_1.7 here] and [https://docs.google.com/Doc?docid=0ATb3QwFMHCXrZGdubjI3ZHNfNWhkejdkY2Rj&hl=en here].
+#Create a review template guide so that reviewers have an idea of what is expected of them. A great example of a top notch review can be seen by Matt Tesauro on JbroFuzz 1.7 [http://www.owasp.org/index.php/Category:OWASP_JBroFuzz_Project_-_Version_1.7_Release_-_Assessment#tab=First_Reviewer here] and [https://docs.google.com/Doc?docid=0ATb3QwFMHCXrZGdubjI3ZHNfNWhkejdkY2Rj&hl=en here].
 These are merely early thoughts of how I’d like to see this formulated. Feedback is, as always, welcome.

← Older revision	Revision as of 14:43, 24 November 2010
(No difference)

← Older revision	Revision as of 14:40, 24 November 2010
(No difference)

@@ Line 1: / Line 1: @@
 ==== Reviewers Drive Overview ====
-{| style="width:70%" border="0" cellpadding="1" align="left"
+{| style="width:100%" border="0" cellpadding="1" align="left"
   |-
   | style="width:100%" valign="middle" height="30" bgcolor="#CCCCEE" align="center" colspan="1" rowspan="1"  |

@@ Line 7: / Line 7: @@
   |-
   | style="width:100%" valign="middle" height="200" bgcolor="#EEEEEE" align="left" colspan="0" rowspan="0" |
-*New Drive for Project Reviewers You may or may not have noticed, but as of the assessment criteria v2, each release will require at least three reviews as it moves from beta to stable. This reintroduces problems we have had in the past finding reviewers for these projects. In addition, at least one of these reviewers should be from the GPC. Based on the last GPC call on Monday, November 23, I am going to spear-head a drive for centralizing the collection and recruitment of OWASP Project reviewers. The general idea for this is to create a pool of known-good persons that can be pulled in when a reviewer is not supplied by the project lead. There are several phases I am planning to implement in order to streamline this.
+*'''New Drive for Project Reviewers'''<br>
-#Thanks to Paulo, this is already done: Create a sane tracking page where reviewers can register, allowing us to easily find them when needed. You can find a preliminary view of this here: http://www.owasp.org/index.php/OWASP_Project_Reviewers_Database.
+You may or may not have noticed, but as of the assessment criteria v2, each release will require at least three reviews as it moves from beta to stable. This reintroduces problems we have had in the past finding reviewers for these projects. In addition, at least one of these reviewers should be from the GPC. Based on the last GPC call on Monday, November 23, I am going to spear-head a drive for centralizing the collection and recruitment of OWASP Project reviewers. The general idea for this is to create a pool of known-good persons that can be pulled in when a reviewer is not supplied by the project lead. There are several phases I am planning to implement in order to streamline this.
 #Launch a campaign to recruit as many reviewers as possible:
-##Parse the wiki for existing reviewers that have been active in the last 24 months, as them if they are willing to participate in future reviews
+##Parse the wiki for existing reviewers that have been active in the last 24 months, as them if they are willing to participate in future reviews,
-##Create a new “how to get involved” page on the wiki with detailed information on what levels of involvement are available within OWASP, to include “Benefits”. “Time commitment”, and “Role” type metrics
+##Create a new “how to get involved” page on the wiki with detailed information on what levels of involvement are available within OWASP, to include “Benefits”. “Time commitment”, and “Role” type metrics,
-## Add information regarding the new review campaign in OWASP media, such as mailing lists, conferences, and the newsletter
+## Add information regarding the new review campaign in OWASP media, such as mailing lists, conferences, and the newsletter,
 #Create a mandatory rotation for all members of the GPC, so that each member will be involved in reviews as they come available.
 #Create a review template guide so that reviewers have an idea of what is expected of them. A great example of a top notch review can be seen by Matt Tesauro on JbroFuzz 1.7 [http://www.owasp.org/index.php/Category:OWASP_JBroFuzz_Project_-_Version_1.7_Release_-_Assessment#Stable_Release_Review_of_the_OWASP_JBroFuzz_Project_-_Release_1.7 here] and [https://docs.google.com/Doc?docid=0ATb3QwFMHCXrZGdubjI3ZHNfNWhkejdkY2Rj&hl=en here].