OWASP Threat Modelling Project - Revision history

Swierckx: /* Main */ linked to active threat model project

2018-03-28T18:05:17Z

‎Main: linked to active threat model project

Kait Disney-Leugers at 20:01, 23 January 2014

2014-01-23T20:01:59Z

Kait Disney-Leugers at 18:44, 23 January 2014

2014-01-23T18:44:45Z

Kait Disney-Leugers at 02:12, 23 January 2014

2014-01-23T02:12:29Z

Anurag Agarwal: OWASP Threat Modeling Methodology

2011-05-02T13:00:01Z

OWASP Threat Modeling Methodology

Anurag Agarwal at 16:55, 4 April 2011

2011-04-04T16:55:40Z

Anurag Agarwal at 16:48, 4 April 2011

2011-04-04T16:48:03Z

Paulo Coimbra at 14:24, 1 April 2011

2011-04-01T14:24:41Z

Paulo Coimbra: Created page with "==== Main ==== ==== Project About ==== {{:Projects/OWASP Threat Modelling Project | Project About}} NOTOC Category:OWASP Download [[Category:OWASP_Alp..."

2011-03-18T17:08:59Z

Created page with "==== Main ==== ==== Project About ==== {{:Projects/OWASP Threat Modelling Project | Project About}} __NOTOC__ <headertabs /> Category:OWASP Download [[Category:OWASP_Alp..."

New page

==== Main ====

==== Project About ====
{{:Projects/OWASP Threat Modelling Project | Project About}}

__NOTOC__ <headertabs />

[[Category:OWASP Download]]
[[Category:OWASP_Alpha_Quality_Tool]]
[[Category:OWASP Project|Threat Modelling Project]]
[[Category:OWASP Tool]]

@@ Line 4: / Line 4: @@
 ! width="500" align="center" | <br>
 |-
-| align="right" | [[Image:OWASP Inactive Banner.jpg|800px| link=https://www.owasp.org/index.php/Category:OWASP_Project]]
+| align="right" | [[Image:OWASP Inactive Banner.jpg|800px| link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Inactive_Projects]]
 | align="right" |

← Older revision		Revision as of 18:44, 23 January 2014
Line 1:		Line 1:
−	[[Image:OWASP Inactive Banner.jpg\|~~1155px~~]]	+	{\|
		+	\|-
		+	! width="700" align="center" \| <br>
		+	! width="500" align="center" \| <br>
		+	\|-
		+	\| align="right" \| [[Image:OWASP Inactive Banner.jpg\|800px\| link=https://www.owasp.org/index.php/Category:OWASP_Project]]
		+	\| align="right" \|
		+
		+	\|}
	==== Main ====		==== Main ====

← Older revision		Revision as of 02:12, 23 January 2014
Line 1:		Line 1:
		+	[[Image:OWASP Inactive Banner.jpg\|1155px]]
	==== Main ====		==== Main ====

← Older revision		Revision as of 13:00, 2 May 2011
Line 6:		Line 6:
	__NOTOC__ <headertabs />		__NOTOC__ <headertabs />

		+
		+	== '''OWASP Threat Modeling Methodology''' ==
		+
		+	'''Mission'''
		+
		+	Establish a single and inclusive software-centric OWASP Threat modeling Methodology, addressing vulnerability in client and web application-level services over the Internet.
		+
		+
		+	'''Motivation'''
		+
		+	Provide a repeatable and extensible threat modeling methodology for which applications or the web technologies on which they're built can be analyzed in order to drive activities within a secure development cycle.
		+
		+
		+	'''Scope'''
		+
		+	The scope of this project, in terms of approach, will be "software-centric", rather than asset- or risk-centric. We do, however, recognize that without risk management, threat modeling provides little value. We will make efforts to establish methodology- neutral risk management tie-in through factors (like threat skill and capabilities) as well as through vulnerability factors (such as susceptibility or accessibility).
		+
		+
		+	From a technical perspective, this group's efforts will be confined to the application layer of the OSI stack, focusing first on interaction between a browser-based client and the server-side web technologies that service it. The group will not confine itself based on languages, platforms, or tool kits at this time. Architecturally, this group will consider classic n-tier applications, federated applications, RESTful services, and simple client-server interaction.
		+
		+
		+	'''Deliverables'''
		+
		+	Pursuant to its mission, this group will deliver:
		+
		+	* A glossary of threat modeling terms
		+
		+	* An OWASP Threat Modeling methodology document
		+
		+	* Step-wise activities to be performed
		+
		+	* Examples of each step's result
		+
		+	* Threat Library (which may beget an Attack library)
		+
		+
		+
		+	==[Background]==

	== Portugal Summit Working Session Summary ==		== Portugal Summit Working Session Summary ==

@@ Line 6: / Line 6: @@
 __NOTOC__ <headertabs />
 Threat Modeling Working Session Summary from OWASP Portugal Summit
-Discussion Points:
+===Discussion Points:===
@@ Line 52: / Line 54: @@
-Accomplishments:
+===Accomplishments:===
 .	An insight into how people have been doing threat modeling individually. There is no set standard used by people but everyone has their own.
@@ Line 61: / Line 63: @@
-Output:
+===Output:===
 .	A unanimous vote to having an OWASP threat modeling project.
@@ Line 70: / Line 72: @@
-Next Steps:
+== Next Steps: ==
 . High level project roadmap with milestones.

@@ Line 9: / Line 9: @@
 |}
 ==== Main  ====
 ==== Project About ====
@@ Line 97: / Line 98: @@
 .	Do we need an OWASP Threat Modeling project?
@@ Line 130: / Line 130: @@
 . Publish the first draft
 [[Category:OWASP_Alpha_Quality_Tool]]
 [[Category:OWASP Project|Threat Modelling Project]]
 [[Category:OWASP Tool]]