This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "OWASP File Format Validation Project"

From OWASP

Jump to: navigation, search

Revision as of 15:07, 12 September 2014

OWASP File Format Validation

Welcome to the home of OWASP File Format Validation (FFV) Project !

Introduction

The goal of the project is to provide a database of assertions to check the most of file format. Each assertion is a translation of an official specification (ISO, RFC, UIT-T, ...) in BIL (Binary Inspection Language), an other part of this project.

BIL is a useful language(language+compiler/interpreter) which allow you to write for each file format, a program to check all files in this format.

BIL is easy to learn and can be used by the persons who write specifications. More informations about BIL : https://sourceforge.net/projects/binil/

FFV + BIL would like offer a rugged validation of files format in the applications, NOT only based on the signature.

Description

The 3 sub-projects :

- File Format Description Language (FFDL) : It is a pseudo-language like regexp useful to describe structure of data in a file. FFDL is helpful to make assertion for each specification of a format.

- File Format Database (FFDB) : It is a sort of file/xml database, where each specifications of each file format are stored.

- File Format Validator : It is final package provide to final user. When a package is build, for each format in File Format Database a source file in the language

Licensing

OWASP File Format Validation is free to use. It is licensed under the Creative Commons Attribution-ShareAlike 3.0 license, so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.