This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "OWASP AppSensor Project"
John Melton (talk | contribs) (→Road Map and Getting Involved) |
(Fixed broken external link) (Tag: Visual edit) |
||
| Line 5: | Line 5: | ||
{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |- | {| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |- | ||
| − | | | + | | style="border-right: 1px dotted gray;padding-right:25px;" valign="top" | |
== OWASP AppSensor == | == OWASP AppSensor == | ||
| Line 36: | Line 36: | ||
* Norwegian University of Science and Technology in Tronheim | * Norwegian University of Science and Technology in Tronheim | ||
| − | ** [ | + | ** [https://brage.bibsys.no/xmlui/handle/11250/252956 AppSensor: Attack-Aware Applications Compared Against a Web Application Firewall and an Intrusion Detection System], Thomassen P, 2012 |
*US Department of Homeland Security | *US Department of Homeland Security | ||
| Line 54: | Line 54: | ||
© OWASP Foundation | © OWASP Foundation | ||
| − | + | | style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" valign="top" | | |
| − | | | ||
== What is AppSensor? == | == What is AppSensor? == | ||
| Line 98: | Line 97: | ||
* [[:Category:OWASP_ModSecurity_Core_Rule_Set_Project|OWASP ModSecurity Core Rule Set]] | * [[:Category:OWASP_ModSecurity_Core_Rule_Set_Project|OWASP ModSecurity Core Rule Set]] | ||
| − | + | | style="padding-left:25px;width:200px;" valign="top" | | |
| − | | | ||
== Quick Download == | == Quick Download == | ||
| Line 135: | Line 133: | ||
==Classifications== | ==Classifications== | ||
| − | {| | + | {| cellpadding="2" width="200" |
|- | |- | ||
| − | | | + | | rowspan="2" align="center" width="50%" valign="top" | [[File:Mature projects.png|100px|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Flagship_Projects]] |
| − | | align="center" | + | | align="center" width="50%" valign="top" | [[File:Owasp-builders-small.png|link=Builders]] |
|- | |- | ||
| − | | align="center" | + | | align="center" width="50%" valign="top" | [[File:Owasp-defenders-small.png|link=Defenders]] |
|- | |- | ||
| − | | colspan="2" align="center" | + | | colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]] |
|- | |- | ||
| − | | colspan="2" align="center" | + | | colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]] |
|- | |- | ||
| − | | colspan="2" align="center" | + | | colspan="2" align="center" | [[File:Project_Type_Files_CODE.jpg|link=]] |
|} | |} | ||
| Line 159: | Line 157: | ||
{| cellpadding="2" | {| cellpadding="2" | ||
|- | |- | ||
| − | | | + | | align="left" width="200" valign="top" | |
*Josh Amishav-Zlatin | *Josh Amishav-Zlatin | ||
| Line 179: | Line 177: | ||
*Sean Fay | *Sean Fay | ||
| − | | | + | | align="left" width="200" valign="top" | |
*Timo Goosen | *Timo Goosen | ||
| Line 199: | Line 197: | ||
*Craig Munson | *Craig Munson | ||
| − | | | + | | align="left" width="200" valign="top" | |
*Louis Nadeau | *Louis Nadeau | ||
| Line 499: | Line 497: | ||
| align="center" valign="top" | CISOs | | align="center" valign="top" | CISOs | ||
|- | |- | ||
| − | | | + | | align="left" width="200" valign="top" | [[File:Appsensor-developer-small.jpg|link=https://www.owasp.org/index.php/File:Appsensor_intro_for_developers.pdf]] |
| width="20" | | | width="20" | | ||
| − | | | + | | align="left" width="200" valign="top" | [[File:Appsensor_crosstalk_small.jpg|link=http://www.crosstalkonline.org/storage/issue-archives/2011/201109/201109-Watson.pdf]] |
| width="20" | | | width="20" | | ||
| − | | | + | | align="center" width="200" valign="top" | [[File:Appsensor-cisobriefing-small.jpg|link=https://www.owasp.org/index.php/File:Appsensor-ciso-briefing.pdf]] |
|} | |} | ||
| Line 512: | Line 510: | ||
[[File:Appsensor-website-large.jpg|link=http://appsensor.org/]] | [[File:Appsensor-website-large.jpg|link=http://appsensor.org/]] | ||
| − | + | http://appsensor.org/ | |
| Line 543: | Line 541: | ||
November, 2009 - AppSec DC - [http://www.owasp.org/images/0/06/Defend_Yourself-Integrating_Real_Time_Defenses_into_Online_Applications-Michael_Coates.pdf Defend Yourself: Integrating Real Time Defenses into Online Applications] | November, 2009 - AppSec DC - [http://www.owasp.org/images/0/06/Defend_Yourself-Integrating_Real_Time_Defenses_into_Online_Applications-Michael_Coates.pdf Defend Yourself: Integrating Real Time Defenses into Online Applications] | ||
| − | May, 2009 - [http://www.owasp.org/download/jmanico/owasp_podcast_51.mp3 OWASP Podcast #51 ] | + | May, 2009 - [http://www.owasp.org/download/jmanico/owasp_podcast_51.mp3 OWASP Podcast #51] |
May, 2009 - AppSec EU Poland - [https://www.owasp.org/images/b/b7/AppsecEU09_MichaelCoates.pptx Real Time Defenses against Application Worms and Malicious Attackers] | May, 2009 - AppSec EU Poland - [https://www.owasp.org/images/b/b7/AppsecEU09_MichaelCoates.pptx Real Time Defenses against Application Worms and Malicious Attackers] | ||
| Line 574: | Line 572: | ||
| − | }} | + | <nowiki>}} </nowiki> |
| − | __NOTOC__ <headertabs /> | + | __NOTOC__ <headertabs></headertabs> |
| − | [[Category: | + | [[Category:OWASP Project|AppSensor Project]] |
| + | [[Category:OWASP Project]] | ||
| + | [[Category:OWASP_Builders]] | ||
| + | [[Category:OWASP_Defenders]] | ||
| + | [[Category:OWASP_Document]] | ||
| + | [[Category:OWASP_Download]] | ||
| + | [[Category:SAMM-EH-3]] | ||
| + | [[Category:SAMM-SA-2]] | ||
| + | [[Category:SAMM-VM-3]] | ||
Revision as of 06:31, 23 April 2017
OWASP AppSensorThe AppSensor project defines a conceptual framework and methodology that offers prescriptive guidance to implement intrusion detection and automated response into applications. The project offers a comprehensive guide and a reference implementation. These resources can be used by architects, developers, security analyst and system administrators to plan, implement and monitor an AppSensor system. IntroductionIf you walk into a bank and try opening random doors, you will be identified, led out of the building and possibly arrested. However, if you log into an online banking application and start looking for vulnerabilities no one will say anything. This needs to change! As critical applications continue to become more accessible and inter-connected, it is paramount that critical information is sufficiently protected. We must also realize that our defenses may not be perfect. Given enough time, attackers can identify security flaws in the design or implementation of an application. In addition to implementing layers of defense within an application, we must identify malicious individuals before they are able to identify any gaps in our defenses. The best place to identify malicious activity against the application is within the application itself. Network based intrusion detection systems are not appropriate to handle the custom and intricate workings of an enterprise application and are ill-suited to detect attacks focusing on application logic such as authentication, access control, etc. This project delivers a framework which can be used to build a robust system of attack detection, analysis, and response within an enterprise application.
Detect and Respond to Attacks from Within the ApplicationDetectionAppSensor defines over 50 different detection points which can be used to identify a malicious attacker. ResponseAppSensor provides guidance on how to respond once a malicious attacker has been identified. Possible actions include: logging out the user, locking the account or notifying an administrator. More than a dozen response actions are described. Defending the ApplicationAn attacker often requires numerous probes and attack attempts in order to locate an exploitable vulnerability within the application. By using AppSensor it is possible to identify and eliminate the threat of an attacker before they are able to successfully identify an exploitable flaw.
Citations
LicensingOWASP AppSensor is free to use. GuideThe guide is licensed under the Creative Commons Attribution-ShareAlike 3.0 license, so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one. Reference ImplementationThe reference implementation is licensed under the MIT License, which is a permissive (commercial-friendly) license only requiring you to include a copy of the license upon distribution or copying. © OWASP Foundation |
What is AppSensor?Detect and respond to attacks from within the application. This project includes both a well documented idea (the Guide) and a reference implementation (the Code).
Intro for Developers
AppSensor Website
See the AppSensor website for an introduction and quick start instructions. Overview
Project Founder
Project Leaders
Related Projects |
Quick DownloadNews and Events
Code Repository
In Print
The AppSensor Guide and CISO Briefing can be purchased at cost as print on demand books. Classifications
| |||||||||
