OWASP Snakes and Ladders - Revision history

Clerkendweller: Added note about missing mailing list

2019-03-22T09:45:59Z

Added note about missing mailing list

Clerkendweller: /* Editions */ Dates

2018-05-09T18:00:30Z

‎Editions: Dates

Clerkendweller: /* OWASP Snakes and Ladders - Web Applications */ Dates

2018-05-09T18:00:06Z

‎OWASP Snakes and Ladders - Web Applications: Dates

Clerkendweller: /* Editions */ To reflect release

2018-05-09T17:57:50Z

‎Editions: To reflect release

Clerkendweller: News v1.20 EN / Project plan

2018-05-09T17:57:16Z

News v1.20 EN / Project plan

Clerkendweller: /* Release History */ v1.20 EN

2018-05-09T17:54:14Z

‎Release History: v1.20 EN

Clerkendweller: /* How to Play */ Enhanced learning tips

2017-08-07T21:37:10Z

‎How to Play: Enhanced learning tips

Clerkendweller: /* Volunteers */ Added Manfred Hofmeier

2017-08-07T21:31:29Z

‎Volunteers: Added Manfred Hofmeier

Clerkendweller: /* Quick Download */ Link to TR webapp added

2017-05-12T10:03:29Z

‎Quick Download: Link to TR webapp added

Clerkendweller: /* Current Release */ Added TR

2017-05-12T10:01:54Z

‎Current Release: Added TR

@@ Line 340: / Line 340: @@
 ==Feedback==
 Please use the [https://lists.owasp.org/mailman/listinfo/owasp_snakes_and_ladders project mailing list] for feedback:
 * How did you use it?

@@ Line 15: / Line 15: @@
 ''Web Applications''
-<!-- <div style="height:75px;max-width:375px;border:0,margin:0;overflow:hidden;">[[File:Snakes_and_ladders_webapp-mini-banner.png|link=]]</div>-->In the board game for {{#switchtablink:Web Applications Edition|web applications}}, the virtuous behaviours (ladders) are secure coding practices (from [[OWASP Proactive Controls|OWASP Proactive Controls project]] 2014-2018) and the vices (snakes) are application security risks (from [[:Category:OWASP Top Ten Project|OWASP Top Ten Project]] 2013). See also a [https://www.owasp.org/index.php/OWASP_Proactive_Controls#tab=Top_Ten_Mapping mapping between these two lists].
+<!-- <div style="height:75px;max-width:375px;border:0,margin:0;overflow:hidden;">[[File:Snakes_and_ladders_webapp-mini-banner.png|link=]]</div>-->In the board game for {{#switchtablink:Web Applications Edition|web applications}}, the virtuous behaviours (ladders) are secure coding practices (from [[OWASP Proactive Controls|OWASP Proactive Controls project]] 2014-2018) and the vices (snakes) are application security risks (from [[:Category:OWASP Top Ten Project|OWASP Top Ten Project]] 2013-2017). See also a [https://www.owasp.org/index.php/OWASP_Proactive_Controls#tab=Top_Ten_Mapping mapping between these two lists].
 ''Mobile Apps''

@@ Line 131: / Line 131: @@
 == OWASP Snakes and Ladders - Web Applications ==
-This was the first edition created. The objective is to raise awareness of the security controls that every web application should have, but link that with the much more widely known Top Ten Risks. The virtuous behaviours (ladders) are secure coding practices (from [[OWASP Proactive Controls|OWASP Proactive Controls project]] 2014-2018) and the vices (snakes) are application security risks (from [[:Category:OWASP Top Ten Project|OWASP Top Ten Project]] 2013).
+This was the first edition created. The objective is to raise awareness of the security controls that every web application should have, but link that with the much more widely known Top Ten Risks. The virtuous behaviours (ladders) are secure coding practices (from [[OWASP Proactive Controls|OWASP Proactive Controls project]] 2014-2018) and the vices (snakes) are application security risks (from [[:Category:OWASP Top Ten Project|OWASP Top Ten Project]] 2013-2017).
 <div style="height:539px;max-width:750px;border:0,margin:0;overflow:hidden;">[[File:Osn-poster-web-de.jpg|link=]]</div>

@@ Line 15: / Line 15: @@
 ''Web Applications''
-<!-- <div style="height:75px;max-width:375px;border:0,margin:0;overflow:hidden;">[[File:Snakes_and_ladders_webapp-mini-banner.png|link=]]</div>-->In the board game for {{#switchtablink:Web Applications Edition|web applications}}, the virtuous behaviours (ladders) are secure coding practices (from [[OWASP Proactive Controls|OWASP Proactive Controls project]] 2014-2016) and the vices (snakes) are application security risks (from [[:Category:OWASP Top Ten Project|OWASP Top Ten Project]] 2013). See also a [https://www.owasp.org/index.php/OWASP_Proactive_Controls#tab=Top_Ten_Mapping mapping between these two lists].
+<!-- <div style="height:75px;max-width:375px;border:0,margin:0;overflow:hidden;">[[File:Snakes_and_ladders_webapp-mini-banner.png|link=]]</div>-->In the board game for {{#switchtablink:Web Applications Edition|web applications}}, the virtuous behaviours (ladders) are secure coding practices (from [[OWASP Proactive Controls|OWASP Proactive Controls project]] 2014-2018) and the vices (snakes) are application security risks (from [[:Category:OWASP Top Ten Project|OWASP Top Ten Project]] 2013). See also a [https://www.owasp.org/index.php/OWASP_Proactive_Controls#tab=Top_Ten_Mapping mapping between these two lists].
 ''Mobile Apps''
 <!-- <div style="height:75px;max-width:375px;border:0,margin:0;overflow:hidden;">[[File:Snakes_and_ladders_mobapp-mini-banner.png|link=]]</div>-->The identical board game for {{#switchtablink:Mobile Apps Edition|mobile apps}} uses mobile controls (from the [https://www.owasp.org/index.php/OWASP_Mobile_Security_Project#tab=Top_10_Mobile_Controls Mobile Security Project Top Ten Controls] 2013) as the virtuous behaviours and mobile risks (from the [https://www.owasp.org/index.php/OWASP_Mobile_Security_Project#tab=Top_10_Mobile_Risks Top Ten Mobile Risks] 2014 from the same project) as the vices.
 == Background ==

@@ Line 88: / Line 88: @@
 == News and Events ==
 * [12 May 2017] Web Applications TR
 * [30 Jun 2016] Free copies at OWASP AppSec EU Rome 2017
@@ Line 134: / Line 135: @@
 == OWASP Snakes and Ladders - Web Applications ==
-This was the first edition created. The objective is to raise awareness of the security controls that every web application should have, but link that with the much more widely known Top Ten Risks. The virtuous behaviours (ladders) are secure coding practices (from [[OWASP Proactive Controls|OWASP Proactive Controls project]] 2014-2016) and the vices (snakes) are application security risks (from [[:Category:OWASP Top Ten Project|OWASP Top Ten Project]] 2013).
+This was the first edition created. The objective is to raise awareness of the security controls that every web application should have, but link that with the much more widely known Top Ten Risks. The virtuous behaviours (ladders) are secure coding practices (from [[OWASP Proactive Controls|OWASP Proactive Controls project]] 2014-2018) and the vices (snakes) are application security risks (from [[:Category:OWASP Top Ten Project|OWASP Top Ten Project]] 2013).
 <div style="height:539px;max-width:750px;border:0,margin:0;overflow:hidden;">[[File:Osn-poster-web-de.jpg|link=]]</div>
@@ Line 248: / Line 249: @@
 Other people's versions of Snakes and Ladders [https://search.disconnect.me/searchTerms/serp?search=c45431fe-9ce8-415a-ac25-1e511f45ef51 use a wide variety of designs and colour schemes]. Thus to make a complete contrast to the edition for web applications, the colours used are the designatory colours of the underground and mainline train services that run through Colin Watson's local station at Farringdon in Clerkenwell, London EC1. The colours in 'Farringdon' are:
-* Purple (future Crossrail)
+* Purple (future <strike>Crossrail</strike> Elizabeth)
 * Yellow (Circle)
 * White (Thameslink)
@@ Line 317: / Line 318: @@
 Recently completed:
-* Update web applications edition to Proactive Controls 2016 [EN recently completed]
+* Update web applications edition to Proactive Controls 2018 [EN recently completed]
 * Translate into other languages [TR recently completed]
 * Handouts at events
-As of May 2017, the priorities are:
+As of May 2018, the priorities are:
-* Update as other referenced projects updated (e.g. Top Ten 2017)
+* Update as other referenced projects updated (e.g. Top Ten)
 Other ideas are:

@@ Line 193: / Line 193: @@
 == Release History ==
 * [12 May 2017] 1.11 - TR version release
 * [15 Jun 2016] 1.1 - EN version updated

@@ Line 60: / Line 60: @@
 * Put all the players' counters onto the first square labelled “Start 1”.
 * In turn, each player rolls the die and moves their counter by the number of squares indicated on the die. At the end of the move, if a player’s counter is at the bottom end of a ladder, the counter must be moved up the ladder to the square at its higher end. Conversely, if the player’s counter is located at the mouth of a snake, the counter must be moved down to the end of the snake’s tail.
 *The first player to reach “100” at the top left wins. Give a prize.

@@ Line 295: / Line 295: @@
 * Martin Haslinger
 * Yongliang He
 * Cédric Messeguer
 * Takanori Nakanowatari

@@ Line 79: / Line 79: @@
 *  Web Applications v1.0/v1.1
-** [[media:OWASP-SnakesAndLadders-WebApplications-BR.pdf|BR]], [[media:OWASP-SnakesAndLadders-WebApplications-DE.pdf|DE]], [[media:OWASP-SnakesAndLadders-WebApplications-EN.pdf|EN]], [[media:OWASP-SnakesAndLadders-WebApplications-ES.pdf|ES]], [[media:OWASP-SnakesAndLadders-WebApplications-FR.pdf|FR]], [[media:OWASP-SnakesAndLadders-WebApplications-JA.pdf|JA]], [[media:OWASP-SnakesAndLadders-WebApplications-ZH.pdf|ZH]]
+** [[media:OWASP-SnakesAndLadders-WebApplications-BR.pdf|BR]], [[media:OWASP-SnakesAndLadders-WebApplications-DE.pdf|DE]], [[media:OWASP-SnakesAndLadders-WebApplications-EN.pdf|EN]], [[media:OWASP-SnakesAndLadders-WebApplications-ES.pdf|ES]], [[media:OWASP-SnakesAndLadders-WebApplications-FR.pdf|FR]], [[media:OWASP-SnakesAndLadders-WebApplications-JA.pdf|JA]],  [[media:OWASP-SnakesAndLadders-WebApplications-TR.pdf|TR]], [[media:OWASP-SnakesAndLadders-WebApplications-ZH.pdf|ZH]]
 ** {{#switchtablink:Web Applications Edition|More options...}}

@@ Line 138: / Line 138: @@
 == Current Release ==
 {|
 | align="center" valign="top" | [https://www.owasp.org/index.php/File:OWASP-SnakesAndLadders-WebApplications-BR.pdf BR: Português Brasileiro]
-| align="center" valign="top" |
+| align="center" valign="top" | [https://www.owasp.org/index.php/File:OWASP-SnakesAndLadders-WebApplications-DE.pdf DE: Deutsch]
-| align="center" valign="top" |
+| align="center" valign="top" | [https://www.owasp.org/index.php/File:OWASP-SnakesAndLadders-WebApplications-EN.pdf EN: English]
 |-
 | align="center" valign="top" | [[Image:Osn-webapp-BR.png|link=File:OWASP-SnakesAndLadders-WebApplications-BR.pdf]]
-| align="center" valign="top" |
+| align="center" valign="top" | [[Image:Osn-webapp-DE.png|link=File:OWASP-SnakesAndLadders-WebApplications-DE.pdf]]
-| align="center" valign="top" |
+| align="center" valign="top" |[[Image:Osn-webapp-EN.png|link=File:OWASP-SnakesAndLadders-WebApplications-EN.pdf]]
 |-
 | align="center" valign="top" width="250" | Serpentes e Escadas<br>Aplicativos da Web
-| align="center" valign="top" width="250" |
+| align="center" valign="top" width="250" | Schlangen und Leitern<br>Web Anwendungen
-| align="center" valign="top" width="250" |
+| align="center" valign="top" width="250" | Snakes and Ladders<br>Web Applications
 |-
 | <br><br>
@@ Line 156: / Line 157: @@
 | <br><br>
 |-
 | align="center" valign="top" | [https://www.owasp.org/index.php/File:OWASP-SnakesAndLadders-WebApplications-ES.pdf ES: Español]
 |-
 | align="center" valign="top" | [[Image:Osn-webapp-ES.png|link=File:OWASP-SnakesAndLadders-WebApplications-ES.pdf]]
 |-
 | align="center" valign="top" width="250" | Serpientes y Escaleras<br>Aplicaciones Web
 |-
 | <br><br>
@@ Line 172: / Line 173: @@
 | <br><br>
 |-
-| align="center" valign="top" | [https://www.owasp.org/index.php/File:OWASP-SnakesAndLadders-WebApplications-FR.pdf FR: Français]
+| align="center" valign="top" | [https://www.owasp.org/index.php/File:OWASP-SnakesAndLadders-WebApplications-TR.pdf TR: Türkçe]
 | align="center" valign="top" | [https://www.owasp.org/index.php/File:OWASP-SnakesAndLadders-WebApplications-ZH.pdf ZH: 中文]
 |-
-| align="center" valign="top" | [[Image:Osn-webapp-FR.png|link=File:OWASP-SnakesAndLadders-WebApplications-FR.pdf]]
+| align="center" valign="top" | [[Image:Osn-webapp-TR.png|link=File:OWASP-SnakesAndLadders-WebApplications-TR.pdf]]
 | align="center" valign="top" | [[Image:Osn-webapp-ZH.png|link=File:OWASP-SnakesAndLadders-WebApplications-ZH.pdf]]
 |-
-| align="center" valign="top" width="250" | Serpents et Échelles<br>Application Web
+| align="center" valign="top" width="250" | Yılanlar ve Merdivenler<br>Web Uygulamaları
 | align="center" valign="top" width="250" | 蛇梯棋<br>WEB应用程序
 |}
 ([https://www.owasp.org/index.php/File:OWASP-SnakesAndLadders-WebApplications-Illustrator.zip Source Adobe Illustrator file])