OWASP Python Security Project - Revision history

Imifos: added global owasp python project as related information

2015-12-07T09:24:50Z

added global owasp python project as related information

2015-10-18T17:52:46Z

2015-07-17T08:29:49Z

2015-07-06T17:34:20Z

‎General Roadmap

2015-07-06T17:34:02Z

‎General Roadmap

2015-07-06T17:33:00Z

‎Road Map and Getting Involved

2015-07-06T16:52:32Z

‎Quick Download

2015-07-06T16:48:54Z

‎Classifications

2015-07-06T16:48:23Z

‎Classifications

2015-07-06T16:44:46Z

‎Detect and Respond to Attacks from Within the Application

← Older revision		Revision as of 09:24, 7 December 2015
Line 62:		Line 62:
	* OWASP Python Security Github https://github.com/ebranca/owasp-pysec/ (Current)		* OWASP Python Security Github https://github.com/ebranca/owasp-pysec/ (Current)

		+	== Related ==
		+	* [[OWASP Python Project\|OWASP Python Project]]

	==Classifications==		==Classifications==

@@ Line 1: / Line 1: @@
 =Main=
+<div style="width:100%;height:100px;border:0,margin:0;overflow: hidden;">[[File: lab_big.jpg|link=OWASP_Project_Stages#tab.3DLab_Projects]]</div>
 {| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
 | valign="top"  style="border-right: 1px dotted gray;padding-right:25px;" |

← Older revision		Revision as of 08:29, 17 July 2015
Line 34:		Line 34:

	== What is the Python Security Project? ==		== What is the Python Security Project? ==
		+
		+
		+	== Other Python Security Related Research ==
		+	This is a list of security related research on python core modules by other researchers.
		+
		+	*[https://media.blackhat.com/bh-us-11/Slaviero/BH_US_11_Slaviero_Sour_Pickles_WP.pdf Sour Pickles Paper Blackhat 2011 Marco Slaviero]
		+	*[https://media.blackhat.com/bh-us-11/Slaviero/BH_US_11_Slaviero_Sour_Pickles_Slides.pdf Sour Pickles Slides Blackhat 2011]

← Older revision		Revision as of 17:34, 6 July 2015
Line 127:		Line 127:

	- Release utility for PE extraction and hash generation from web files		- Release utility for PE extraction and hash generation from web files
−
−	~~- Release update version of ""OWASP-ESAPI-python"""~~

	= Project Approach =		= Project Approach =

@@ Line 90: / Line 90: @@
 === General Roadmap ===
-"- Set up website with wiki
+- Set up website with wiki
 - Configure mailing list

← Older revision		Revision as of 17:33, 6 July 2015
Line 79:		Line 79:

	Please join the project's mailing lists to keep up-to-date with what's going on, and to contribute your ideas, feedback, and experience:		Please join the project's mailing lists to keep up-to-date with what's going on, and to contribute your ideas, feedback, and experience:
−	* [https://lists.owasp.org/mailman/listinfo/~~owasp-appsensor-project~~ General project]	+	* [https://lists.owasp.org/mailman/listinfo/owasp_python_security_project General project]
−	* [https://lists.owasp.org/mailman/listinfo/owasp-appsensor-dev Code development]

@@ Line 52: / Line 52: @@
 == Quick Download ==
-* OWASP AppSensor Guide v2.0.1 EN
+* OWASP Python Security Flyer
-** [https://www.owasp.org/index.php/File:Owasp-appsensor-guide-v2.pdf PDF]
+** [https://www.owasp.org/images/2/2b/OWASP_PYSEC_FLYER.pdf PDF]
 == Code Repository ==

@@ Line 73: / Line 73: @@
     | align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
     |-
     |-
     | colspan="2" align="center"  | [[File:Project_Type_Files_DOC.jpg|link=]]

← Older revision		Revision as of 16:44, 6 July 2015
Line 24:		Line 24:
	Security of python: black-box analysis, identify and address security-related issues		Security of python: black-box analysis, identify and address security-related issues
	Security with python: develop security hardened python suitable for high-risk and high-security environments		Security with python: develop security hardened python suitable for high-risk and high-security environments
−
−
−	~~== Detect and Respond to Attacks from Within the Application ==~~
−
−	~~=== Detection ===~~
−	~~AppSensor defines over 50 different detection points which can be used to identify a malicious attacker.~~
−	~~=== Response===~~
−	AppSensor provides guidance on how to respond once a malicious attacker has been identified. Possible actions include: logging out the user, locking the account or notifying an administrator. More than a dozen response actions are described.
−	~~===Defending the Application===~~
−	An attacker often requires numerous probes and attack attempts in order to locate an exploitable vulnerability within the application. By using AppSensor it is possible to identify and eliminate the threat of an attacker before they are able to successfully identify an exploitable flaw.
−