Project Information:template Securing WebGoat using ModSecurity - Revision history

Stephen Evans at 10:24, 3 February 2009

2009-02-03T10:24:47Z

Paulo Coimbra at 17:52, 23 January 2009

2009-01-23T17:52:25Z

Paulo Coimbra at 17:50, 23 January 2009

2009-01-23T17:50:18Z

Paulo Coimbra at 17:29, 23 January 2009

2009-01-23T17:29:11Z

Paulo Coimbra at 17:25, 23 January 2009

2009-01-23T17:25:34Z

Stephen Evans: changed book available to Word doc of wiki is now available (because the final version has not been posted on Lulu.com)

2008-12-31T11:24:07Z

changed book available to Word doc of wiki is now available (because the final version has not been posted on Lulu.com)

Paulo Coimbra at 18:10, 29 November 2008

2008-11-29T18:10:09Z

Paulo Coimbra at 17:00, 20 November 2008

2008-11-20T17:00:31Z

Paulo Coimbra at 16:08, 20 November 2008

2008-11-20T16:08:23Z

Ivanr at 13:31, 29 October 2008

2008-10-29T13:31:42Z

@@ Line 9: / Line 9: @@
   |-
   | style="width:15%; background:#7B8ABD" align="center"|'''Project key Information'''
-  | style="width:14%; background:#cccccc" align="center"|Project Leader<br>[[User:Stephen Evans|'''Stephen Evans''']]
+  | style="width:14%; background:#cccccc" align="center"|Project Leader<br>[[User:Stephen Evans|'''Stephen Craig Evans''']]
   | style="width:15%; background:#cccccc" align="center"|Project Contributors<br>(if applicable)
   | style="width:10%; background:#cccccc" align="center"|Mailing List<br>[https://lists.owasp.org/mailman/listinfo/owasp-webgoat-using-modsecurity '''Subscribe here''']<br>[mailto:Owasp-WebGoat-using-ModSecurity(at)lists.owasp.org '''Use here''']

@@ Line 31: / Line 31: @@
   | style="width:29%; background:#cccccc" align="center"|
 [[:Category:OWASP WebGoat Project|OWASP WebGoat Project]]
   |}

@@ Line 9: / Line 9: @@
   |-
   | style="width:15%; background:#7B8ABD" align="center"|'''Project key Information'''
-  | style="width:14%; background:#cccccc" align="center"|Project Leader<br>[mailto:stephencraig.evans(at)gmail.com '''Stephen Evans''']
+  | style="width:14%; background:#cccccc" align="center"|Project Leader<br>[[User:Stephen Evans|'''Stephen Evans''']]
   | style="width:15%; background:#cccccc" align="center"|Project Contributors<br>(if applicable)
   | style="width:10%; background:#cccccc" align="center"|Mailing List<br>[https://lists.owasp.org/mailman/listinfo/owasp-webgoat-using-modsecurity '''Subscribe here''']<br>[mailto:Owasp-WebGoat-using-ModSecurity(at)lists.owasp.org '''Use here''']

← Older revision		Revision as of 17:29, 23 January 2009
Line 16:		Line 16:
	\| style="width:15%; background:#cccccc" align="center"\|Sponsors<br>[[OWASP Summer of Code 2008\|'''OWASP SoC 08''']]		\| style="width:15%; background:#cccccc" align="center"\|Sponsors<br>[[OWASP Summer of Code 2008\|'''OWASP SoC 08''']]
	\|}		\|}
		+
		+	{\| style="width:100%" border="0" align="center"
		+	! align="center" style="background:#7B8ABD; color:white"\|<font color="black">'''Release Status'''
		+	! align="center" style="background:#7B8ABD; color:white"\|<font color="black">'''Main Links'''
		+	! align="center" style="background:#7B8ABD; color:white"\|<font color="black">'''Related Projects'''
		+	\|-
		+	\| style="width:29%; background:#cccccc" align="center"\|
		+	'''[[:Category:OWASP_Project_Assessment#Beta_Quality_Documentation_Criteria\|Beta Quality]]'''<br>[[:OWASP Securing WebGoat using ModSecurity Project - Assessment Frame\|Please see here for complete information.]]
		+	\| style="width:42%; background:#cccccc" align="center"\|
		+	* [[:OWASP Securing WebGoat using ModSecurity Project\|Main project page]]
		+	* [[:OWASP ModSecurity Securing WebGoat Section4 Sublesson 04.2\|Section 4, Mitigating the WebGoat lessons]]
		+	* [https://www.owasp.org/index.php/Appendix_D:_Additional_important_stuff Project wiki available as Word doc]
		+	*(If appropriate, links to be added)
		+	\| style="width:29%; background:#cccccc" align="center"\|
		+	[[:Category:OWASP WebGoat Project\|OWASP WebGoat Project]]
		+	\|}
		+

← Older revision		Revision as of 17:25, 23 January 2009
Line 1:		Line 1:
		+	{\| style="width:100%" border="0" align="center"
		+	! colspan="8" align="center" style="background:#4058A0; color:white"\|<font color="white">'''PROJECT IDENTIFICATION'''
		+	\|-
		+	\| style="width:15%; background:#7B8ABD" align="center"\|'''Project Name'''
		+	\| colspan="7" style="width:85%; background:#cccccc" align="left"\|<font color="black">'''OWASP Securing WebGoat using ModSecurity Project'''
		+	\|-
		+	\| style="width:15%; background:#7B8ABD" align="center"\| '''Short Project Description'''
		+	\| colspan="7" style="width:85%; background:#cccccc" align="left"\|The purpose of this project is to create custom Modsecurity rulesets that, in addition to the Core Set, will protect WebGoat 5.1 from as many of its vulnerabilities as possible (the goal is 90%) without changing one line of source code. To ensure that it will be a complete 'no touch' on WebGoat and its environment, ModSecurity will be configured on Apache server as a remote proxy server. For those vulnerabilities that cannot be prevented (partially or not at all), I will document my efforts in attempting to protect them. Business logic vulnerabilities will be particularly challenging to solve.
		+	\|-
		+	\| style="width:15%; background:#7B8ABD" align="center"\|'''Project key Information'''
		+	\| style="width:14%; background:#cccccc" align="center"\|Project Leader<br>[mailto:stephencraig.evans(at)gmail.com '''Stephen Evans''']
		+	\| style="width:15%; background:#cccccc" align="center"\|Project Contributors<br>(if applicable)
		+	\| style="width:10%; background:#cccccc" align="center"\|Mailing List<br>[https://lists.owasp.org/mailman/listinfo/owasp-webgoat-using-modsecurity '''Subscribe here''']<br>[mailto:Owasp-WebGoat-using-ModSecurity(at)lists.owasp.org '''Use here''']
		+	\| style="width:17%; background:#cccccc" align="center"\|License<br>[http://creativecommons.org/licenses/by-sa/3.0/ '''Creative Commons Attribution Share Alike 3.0''']
		+	\| style="width:14%; background:#cccccc" align="center"\|Project Type<br>[[:Category:OWASP_Project#Beta Status Projects\|'''Documentation''']]
		+	\| style="width:15%; background:#cccccc" align="center"\|Sponsors<br>[[OWASP Summer of Code 2008\|'''OWASP SoC 08''']]
		+	\|}
		+
		+
		+
		+	{\| style="width:100%" border="0" align="center"
		+	! colspan="6" align="center" style="background:#4058A0; color:white"\|<font color="white">'''PROJECT MAIN LINKS'''
		+	\|-
		+	\| style="width:100%; background:#cccccc" align="center"\|
		+	* [[:OWASP Securing WebGoat using ModSecurity Project\|Main project page]]
		+	* [[:OWASP ModSecurity Securing WebGoat Section4 Sublesson 04.2\|Section 4, Mitigating the WebGoat lessons]]
		+	* [https://www.owasp.org/index.php/Appendix_D:_Additional_important_stuff Project wiki available as Word doc]
		+	*(If appropriate, links to be added)
		+	\|}
		+	{\| style="width:100%" border="0" align="center"
		+	! colspan="6" align="center" style="background:#4058A0; color:white"\|<font color="white">'''RELATED PROJECTS'''
		+	\|-
		+	\| style="width:100%; background:#cccccc" align="center"\|
		+	[[:Category:OWASP WebGoat Project\|OWASP WebGoat Project]]
		+	\|}
		+	{\| style="width:100%" border="0" align="center"
		+	! colspan="6" align="center" style="background:#4058A0; color:white"\|<font color="white">'''SPONSORS & GUIDELINES'''
		+	\|-
		+	\| style="width:50%; background:#cccccc" align="center"\|[[OWASP Summer of Code 2008\|Sponsor - '''OWASP Summer of Code 2008''']]
		+	\| style="width:50%; background:#cccccc" align="center"\|[[OWASP Summer of Code 2008 Applications#Securing WebGoat using ModSecurity\|'''Sponsored Project/Guidelines/Roadmap''']]
		+	\|}
		+	{\| style="width:100%" border="0" align="center"
		+	! colspan="5" align="center" style="background:#4058A0; color:white"\|ASSESSMENT AND REVIEW PROCESS
		+	\|-
		+	\| style="width:15%; background:#6C82B5" align="center"\|'''Review/Reviewer'''
		+	\| style="width:21%; background:#b3b3b3" align="center"\|'''Author's Self Evaluation'''<br>(applicable for Alpha Quality & further)
		+	\| style="width:21%; background:#b3b3b3" align="center"\|'''First Reviewer'''<br>(applicable for Alpha Quality & further)
		+	\| style="width:21%; background:#b3b3b3" align="center"\|'''Second Reviewer'''<br>(applicable for Beta Quality & further)
		+	\| style="width:22%; background:#b3b3b3" align="center"\|'''OWASP Board Member'''<br>(applicable just for Release Quality)
		+	\|-
		+	\| style="width:15%; background:#7B8ABD" align="center"\|'''50% Review'''
		+	\| style="width:21%; background:#C2C2C2" align="center"\|Objectives & Deliveries reached?<br>'''Yes'''<br>---------<br>[[Project Information:template Securing WebGoat using ModSecurity - 50 Review - Self Evaluation - A\|See&Edit:50% Review/Self-Evaluation (A)]]
		+	\| style="width:21%; background:#C2C2C2" align="center"\|Objectives & Deliveries reached?<br>'''Yes'''<br>---------<br>[[Project Information:template Securing WebGoat using ModSecurity - 50 Review - First Reviewer - C\|See&Edit: 50% Review/1st Reviewer (C)]]
		+	\| style="width:21%; background:#C2C2C2" align="center"\|Objectives & Deliveries reached?<br>'''Yes'''<br>---------<br>[[Project Information:template Securing WebGoat using ModSecurity 50 Review Second Review E\|See&Edit: 50%Review/2nd Reviewer (E)]]
		+	\| style="width:22%; background:#C2C2C2" align="center"\|X
		+	\|-
		+	\| style="width:15%; background:#7B8ABD" align="center"\|'''Final Review'''
		+	\| style="width:21%; background:#C2C2C2" align="center"\|Objectives & Deliveries reached?<br>'''Yes'''<br>---------<br>Which status has been reached?<br>'''Beta Quality'''<br>---------<br>[[Project Information:template Securing WebGoat using ModSecurity - Final Review - Self Evaluation - B\|See&Edit: Final Review/SelfEvaluation (B)]]
		+	\| style="width:21%; background:#C2C2C2" align="center"\|Objectives & Deliveries reached?<br>'''Yes'''<br>---------<br>Which status has been reached?<br>'''Beta Quality'''<br>---------<br>[[Project Information:template Securing WebGoat using ModSecurity - Final Review - First Reviewer - D\|See&Edit: Final Review/1st Reviewer (D)]]
		+	\| style="width:21%; background:#C2C2C2" align="center"\|Objectives & Deliveries reached?<br>'''Yes'''<br>---------<br>Which status has been reached?<br>'''Beta Quality''' <br>---------<br>[[Project Information:template Securing WebGoat using ModSecurity - Final Review - Second Reviewer - F\|See&Edit: Final Review/2nd Reviewer (F)]]
		+	\| style="width:22%; background:#C2C2C2" align="center"\|X
		+	\|-
		+	\|}
		+
		+
		+
		+
		+
		+
		+
		+
		+
		+
		+
		+
		+
	{\| style="width:100%" border="0" align="center"		{\| style="width:100%" border="0" align="center"
	! colspan="7" align="center" style="background:#4058A0; color:white"\|<font color="white">'''PROJECT IDENTIFICATION'''		! colspan="7" align="center" style="background:#4058A0; color:white"\|<font color="white">'''PROJECT IDENTIFICATION'''

@@ Line 22: / Line 22: @@
 * [[:OWASP Securing WebGoat using ModSecurity Project|Main project page]]
 * [[:OWASP ModSecurity Securing WebGoat Section4 Sublesson 04.2|Section 4, Mitigating the WebGoat lessons]]
-* [http://www.lulu.com/content/4121995 Book: OWASP Securing WebGoat using ModSecurity - Beta Quality (a new and improved version will be available shortly).]
+* [https://www.owasp.org/index.php/Appendix_D:_Additional_important_stuff Project wiki available as Word doc]
 *(If appropriate, links to be added)
   |}

@@ Line 52: / Line 52: @@
   |-
   | style="width:15%; background:#7B8ABD" align="center"|'''Final Review'''
-  | style="width:21%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes'''<br>---------<br>Which status has been reached?<br>'''Season of Code Beta'''<br>---------<br>[[Project Information:template Securing WebGoat using ModSecurity - Final Review - Self Evaluation - B|See&Edit: Final Review/SelfEvaluation (B)]]
+  | style="width:21%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes'''<br>---------<br>Which status has been reached?<br>'''Beta Quality'''<br>---------<br>[[Project Information:template Securing WebGoat using ModSecurity - Final Review - Self Evaluation - B|See&Edit: Final Review/SelfEvaluation (B)]]
-  | style="width:21%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes'''<br>---------<br>Which status has been reached?<br>'''Season of Code Beta'''<br>---------<br>[[Project Information:template Securing WebGoat using ModSecurity - Final Review - First Reviewer - D|See&Edit: Final Review/1st Reviewer (D)]]
+  | style="width:21%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes'''<br>---------<br>Which status has been reached?<br>'''Beta Quality'''<br>---------<br>[[Project Information:template Securing WebGoat using ModSecurity - Final Review - First Reviewer - D|See&Edit: Final Review/1st Reviewer (D)]]
-  | style="width:21%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes'''<br>---------<br>Which status has been reached?<br>'''Season of Code Beta''' <br>---------<br>[[Project Information:template Securing WebGoat using ModSecurity - Final Review - Second Reviewer - F|See&Edit: Final Review/2nd Reviewer (F)]]
+  | style="width:21%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes'''<br>---------<br>Which status has been reached?<br>'''Beta Quality''' <br>---------<br>[[Project Information:template Securing WebGoat using ModSecurity - Final Review - Second Reviewer - F|See&Edit: Final Review/2nd Reviewer (F)]]
   | style="width:22%; background:#C2C2C2" align="center"|X
   |-
   |}