Security Ecosystem Project - Revision history

Paulo Coimbra at 19:07, 14 April 2011

2011-04-14T19:07:23Z

Frank Alexander at 02:09, 21 September 2010

2010-09-21T02:09:19Z

Craig Younkins: Adding pythonsecurity.org

2010-06-28T20:19:09Z

Adding pythonsecurity.org

Jeff Williams: /* The OWASP Security Ecosystem Project */

2010-03-29T14:56:26Z

‎The OWASP Security Ecosystem Project

Jeff Williams: /* So what is a “security ecosystem”? */

2010-03-29T14:40:24Z

‎So what is a “security ecosystem”?

Paulo Coimbra at 18:55, 5 March 2010

2010-03-05T18:55:00Z

Paulo Coimbra: Undo revision 79229 by Paulo Coimbra (Talk)

2010-03-05T18:54:22Z

Undo revision 79229 by Paulo Coimbra (Talk)

Paulo Coimbra at 18:53, 5 March 2010

2010-03-05T18:53:02Z

Paulo Coimbra at 18:47, 5 March 2010

2010-03-05T18:47:39Z

Jeff Williams at 17:34, 17 February 2010

2010-02-17T17:34:56Z

← Older revision		Revision as of 19:07, 14 April 2011
Line 50:		Line 50:

	__NOTOC__ <headertabs />		__NOTOC__ <headertabs />
		+
		+	[[Category:OWASP Project\|Security Ecosystem Project]]
		+	[[Category:OWASP Document]]
		+	[[Category:OWASP Alpha Quality Document]]

@@ Line 1: / Line 1: @@
 ==== Main  ====
-==The OWASP Security Ecosystem Project==
+The time has come for OWASP to do even more to lead technology companies towards getting their software secure! One key component of achieving secure software is to have a thriving community ecosystem focused on the security of the technology. A few organizations are starting to build these, like Microsoft’s BlueHat community and perhaps a few others. But there’s a huge opportunity for us to do better and OWASP is uniquely positioned to lead this important effort.
-OWASP has recently been approached by several large SaaS vendors to help them work improve their security. We're bootstrapping these ecosystems right now and are actively recruiting motivated leaders to grow security ecosystems around other technologies. OWASP will support your efforts in many different ways.
+== The OWASP Security Ecosystem Project ==
-* [[:Category:OWASP_Enterprise_Security_API#tab=Force.com|SalesForce (force.com)]]
+OWASP has recently been approached by several large SaaS vendors to help them work improve their security. We're bootstrapping these ecosystems right now and are actively recruiting motivated leaders to grow security ecosystems around other technologies. OWASP will support your efforts in many different ways.
-==So what is a “security ecosystem”?==
+*[[:Category:OWASP Enterprise Security API#tab.3DForce.com|SalesForce (force.com)]]
-Nobody (and no company) can build secure software by themselves. We have seen that vulnerability research can help to drive security forward in companies, but it’s a painful process. We envision a partnership between technology platform vendors and a thriving ecosystem focused on the security of their technology. A healthy security ecosystem should include (at least):
+== So what is a “security ecosystem”? ==
-* A centralized portal where the community can interact
+Nobody (and no company) can build secure software by themselves. We have seen that vulnerability research can help to drive security forward in companies, but it’s a painful process. We envision a partnership between technology platform vendors and a thriving ecosystem focused on the security of their technology. A healthy security ecosystem should include (at least):
-==Why collaborate with vendors?==
+*A centralized portal where the community can interact
-It might be possible for OWASP to try to start an ecosystem without the vendor’s involvement. In fact the OWASP Java and .NET project partially fit that description. But these efforts may seem like a threat to technology vendors.  Vendors might start their own ecosystem, but it is much more likely to succeed with an independent partner like OWASP. The OWASP Ecosystem Project is intended to help create a collaborative open effort focused on improving the security of the technology by focusing on visibility, understanding, and informed decisions about risk.  OWASP’s independence and positive approach makes us the perfect environment for these ecosystems to grow.
+== Why collaborate with vendors? ==
-==How do we get started?==
+It might be possible for OWASP to try to start an ecosystem without the vendor’s involvement. In fact the OWASP Java and .NET project partially fit that description. But these efforts may seem like a threat to technology vendors. Vendors might start their own ecosystem, but it is much more likely to succeed with an independent partner like OWASP. The OWASP Ecosystem Project is intended to help create a collaborative open effort focused on improving the security of the technology by focusing on visibility, understanding, and informed decisions about risk. OWASP’s independence and positive approach makes us the perfect environment for these ecosystems to grow.
-The first step is to create a framework for a healthy security ecosystem! Then we can choose a few key technologies and vendors that want to work with us to start.  We need to pull together the materials we have and other materials out on the net into a OWASP Security Ecosystem Portal. To grow the ecosystem, we’ll solicit research, tools, and other materials and work with both end-users and the vendor to focus on eliminating the key risks associated with the technology.
+== How do we get started? ==
-==The future!==
+The first step is to create a framework for a healthy security ecosystem! Then we can choose a few key technologies and vendors that want to work with us to start. We need to pull together the materials we have and other materials out on the net into a OWASP Security Ecosystem Portal. To grow the ecosystem, we’ll solicit research, tools, and other materials and work with both end-users and the vendor to focus on eliminating the key risks associated with the technology.
-This could mark the dawning of a new collaborative era of application security, where companies actively engage with security researchers in order to make their products better. Everyone benefits by creating an ecosystem focused on fostering transparency. The time has come for security experts and software developers to collaborate. The stakes are way too high to waste time and effort on obscurity and infighting.
+== The future! ==
-==Join us==
+This could mark the dawning of a new collaborative era of application security, where companies actively engage with security researchers in order to make their products better. Everyone benefits by creating an ecosystem focused on fostering transparency. The time has come for security experts and software developers to collaborate. The stakes are way too high to waste time and effort on obscurity and infighting.
-We're looking for energetic technical leaders who would like to build a thriving security ecosystem around a technology. If you have at least 10 hours a week to dedicate to this important effort, and you think you're the right person, contact us at owasp@owasp.org.
+== Join us ==
-==== Project Details ====
+We're looking for energetic technical leaders who would like to build a thriving security ecosystem around a technology. If you have at least 10 hours a week to dedicate to this important effort, and you think you're the right person, contact us at owasp@owasp.org.
 {{:Projects/Security Ecosystem Project | Project About}}
 __NOTOC__ <headertabs />

@@ Line 9: / Line 9: @@
 * [[Facebook]]
 * [[:Category:OWASP_Java_Project|Java]]
 * [add more here...]

@@ Line 4: / Line 4: @@
 ==The OWASP Security Ecosystem Project==
-OWASP has recently been approached by several large SaaS vendors to help them work improve their security. We’ll be announcing these vendors and launching their ecosystems as soon as we get permission.  Now is the time for us to organize our “Security Ecosytem Project” so that we are ready to help get these programs off the ground quickly and successfully.
+OWASP has recently been approached by several large SaaS vendors to help them work improve their security. We're bootstrapping these ecosystems right now and are actively recruiting motivated leaders to grow security ecosystems around other technologies. OWASP will support your efforts in many different ways.
 ==So what is a “security ecosystem”?==

@@ Line 8: / Line 8: @@
 ==So what is a “security ecosystem”?==
-Nobody (and no company) can build secure software by themselves. We have seen that vulnerability research can help to drive security forward in companies, but it’s a painful process. We envision a partnership between technology platform vendors and a thriving ecosystem focused on the security of their technology. The ecosystem will include researchers (both builders and breakers), tools, libraries, guidelines, awareness materials, standards, education, conferences, forums, feeds, announcements, and probably more.
+Nobody (and no company) can build secure software by themselves. We have seen that vulnerability research can help to drive security forward in companies, but it’s a painful process. We envision a partnership between technology platform vendors and a thriving ecosystem focused on the security of their technology. A healthy security ecosystem should include (at least):
 ==Why collaborate with vendors?==

@@ Line 27: / Line 27: @@
 ==== Project Details ====
-{{:Projects/Security Ecosystem Project}}
+{{:Projects/Security Ecosystem Project | OWASP Project Identification Tab}}
 __NOTOC__ <headertabs />

← Older revision		Revision as of 18:47, 5 March 2010
Line 1:		Line 1:
		+	==== Main ====
	The time has come for OWASP to do even more to lead technology companies towards getting their software secure! One key component of achieving secure software is to have a thriving community ecosystem focused on the security of the technology. A few organizations are starting to build these, like Microsoft’s BlueHat community and perhaps a few others. But there’s a huge opportunity for us to do better and OWASP is uniquely positioned to lead this important effort.		The time has come for OWASP to do even more to lead technology companies towards getting their software secure! One key component of achieving secure software is to have a thriving community ecosystem focused on the security of the technology. A few organizations are starting to build these, like Microsoft’s BlueHat community and perhaps a few others. But there’s a huge opportunity for us to do better and OWASP is uniquely positioned to lead this important effort.

Line 24:		Line 25:

	We're looking for energetic technical leaders who would like to build a thriving security ecosystem around a technology. If you have at least 10 hours a week to dedicate to this important effort, and you think you're the right person, contact us at owasp@owasp.org.		We're looking for energetic technical leaders who would like to build a thriving security ecosystem around a technology. If you have at least 10 hours a week to dedicate to this important effort, and you think you're the right person, contact us at owasp@owasp.org.
		+
		+	==== Project Details ====
		+	{{:Projects/Security Ecosystem Project \| OWASP Project Identification Tab}}
		+
		+	__NOTOC__ <headertabs />