|
|
(6 intermediate revisions by 2 users not shown) |
Line 1: |
Line 1: |
| + | ---- |
| {| style="width:100%" border="0" align="center" | | {| style="width:100%" border="0" align="center" |
− | ! colspan="9" align="center" style="background:#4058A0; color:white"|<font color="white">'''PROJECT IDENTIFICATION''' | + | ! colspan="8" align="center" style="background:#4058A0; color:white"|<font color="white">'''PROJECT IDENTIFICATION''' |
| |- | | |- |
| | style="width:15%; background:#7B8ABD" align="center"|'''Project Name''' | | | style="width:15%; background:#7B8ABD" align="center"|'''Project Name''' |
− | | colspan="9" style="width:85%; background:#cccccc" align="left"|<font color="black">'''OWASP Application Security Desk Reference (ASDR) Project''' | + | | colspan="7" style="width:85%; background:#cccccc" align="left"|<font color="black">'''OWASP Application Security Desk Reference (ASDR) Project''' |
| |- | | |- |
| | style="width:15%; background:#7B8ABD" align="center"| '''Short Project Description''' | | | style="width:15%; background:#7B8ABD" align="center"| '''Short Project Description''' |
− | | colspan="9" style="width:85%; background:#cccccc" align="left"|This project is helpful as basic reference material when performing such activities as threat modeling, security architecture review, security testing, code review, and metrics. We intend to encourage understanding and consistency when discussing these basic foundational elements of application security. Security only works if people can make informed decisions about risk. The ASDR provides that basic information to help ensure all stakeholders are involved. | + | | colspan="7" style="width:85%; background:#cccccc" align="left"|This project is helpful as basic reference material when performing such activities as threat modeling, security architecture review, security testing, code review, and metrics. We intend to encourage understanding and consistency when discussing these basic foundational elements of application security. Security only works if people can make informed decisions about risk. The ASDR provides that basic information to help ensure all stakeholders are involved. |
| |- | | |- |
− | | style="width:12%; background:#7B8ABD" align="center"|'''Email Contacts''' | + | | style="width:15%; background:#7B8ABD" align="center"|'''Project key Information''' |
− | | style="width:11%; background:#cccccc" align="center"|Project Leader<br>[mailto:leonardocavallari(at)gmail.com '''Leonardo Cavallari Militelli'''] | + | | style="width:14%; background:#cccccc" align="center"|Project Leader<br>[[User:Leocavallari|'''Leonardo Cavallari Militelli''']] |
− | | style="width:11%; background:#cccccc" align="center"|Project Contributors<br>(if applicable)<br>[mailto:to(at)change '''Name&Email'''] | + | | style="width:15%; background:#cccccc" align="center"|Project Contributors<br>(if any) |
− | | style="width:11%; background:#cccccc" align="center"|Mailing List<br>[https://lists.owasp.org/mailman/listinfo/owasp-asdr-project '''To subscribe'''] | + | | style="width:10%; background:#cccccc" align="center"|Mailing List<br>[https://lists.owasp.org/mailman/listinfo/owasp-asdr-project '''Subscribe here'''] |
− | | style="width:11%; background:#cccccc" align="center"|First Reviewer<br>[mailto:williamtsmith(at)gmail.com '''William Smith''']
| + | | style="width:17%; background:#cccccc" align="center"|License<br>[http://creativecommons.org/licenses/by-sa/3.0/ '''Creative Commons Attribution Share Alike 3.0'''] |
− | | style="width:11%; background:#cccccc" align="center"|Second Reviewer<br>[mailto:ken(at)krvw.com '''Kenneth Van Wyk'''] | + | | style="width:14%; background:#cccccc" align="center"|Project Type<br>[[:Category:OWASP_Project#Alpha Status Projects|'''Documentation''']] |
− | | style="width:11%; background:#cccccc" align="center"|Third Reviewer<br>[mailto:kcfredman(at)gmail.com '''Frederick Donovan'''] | + | | style="width:15%; background:#cccccc" align="center"|Sponsors<br>[[OWASP Summer of Code 2008|'''OWASP SoC 08''']]<br>[http://www.ibliss.com.br '''iBLISS Segurança&Inteligência'''] |
− | | style="width:11%; background:#cccccc" align="center"|Fourth Reviewer<br>[mailto:Darren.Challey(at)ge.com '''Darren W. Challey''']
| |
− | | style="width:11%; background:#cccccc" align="center"|OWASP Board Member<br>[mailto:jeff.williams(at)owasp.org '''Jeff Williams'''] | |
| |} | | |} |
− | {| style="width:100%" border="0" align="center" | + | {| style="width:100%" border="0" align="center" |
− | ! colspan="6" align="center" style="background:#4058A0; color:white"|<font color="white">'''PROJECT MAIN LINKS''' | + | ! align="center" style="background:#7B8ABD; color:white"|<font color="black">'''Release Status''' |
− | |-
| + | ! align="center" style="background:#7B8ABD; color:white"|<font color="black">'''Main Links''' |
− | | style="width:100%; background:#cccccc" align="center"|
| + | ! align="center" style="background:#7B8ABD; color:white"|<font color="black">'''Related Projects''' |
− | * [[:ASDR Table of Contents|ASDR Table of Contents]]<br>
| |
− | * [[:OWASP ASDR Workplan|OWASP ASDR Workplan]]<br>
| |
− | * (If appropriate, more links to be added)
| |
− | |}
| |
− | {| style="width:100%" border="0" align="center"
| |
− | ! colspan="6" align="center" style="background:#4058A0; color:white"|<font color="white">'''RELATED PROJECTS''' | |
− | |-
| |
− | | style="width:100%; background:#cccccc" align="center"|
| |
− | *[[:Category:OWASP Honeycomb Project|OWASP Honeycomb Project]]<br>
| |
− | *[http://cve.mitre.org/cwe/about/index.html Common Weakness Enumeration (CWE)]<br>
| |
− | *[http://samate.nist.gov/index.php/Main_Page Software Assurance Metrics and Tool Evaluation (SAMATE)]
| |
− | |}
| |
− | {| style="width:100%" border="0" align="center"
| |
− | ! colspan="6" align="center" style="background:#4058A0; color:white"|<font color="white">'''SPONSORS & GUIDELINES''' | |
− | |-
| |
− | | style="width:50%; background:#cccccc" align="center"|[[OWASP Summer of Code 2008|Sponsor - '''OWASP Summer of Code 2008''']]
| |
− | | style="width:50%; background:#cccccc" align="center"|[[OWASP Summer of Code 2008 Applications#The Application Security Desk Reference - ASDR|'''Sponsored Project/Guidelines/Roadmap''']]
| |
− | |}
| |
− | {| style="width:100%" border="0" align="center"
| |
− | ! colspan="7" align="center" style="background:#4058A0; color:white"|ASSESSMENT AND REVIEW PROCESS
| |
− | |-
| |
− | | style="width:4%; background:#6C82B5" align="center"|'''Reviewer<br>Review'''
| |
− | | style="width:16%; background:#b3b3b3" align="center"|'''Author's Self Evaluation'''<br>(applicable for Alpha Quality & further)
| |
− | | style="width:16%; background:#b3b3b3" align="center"|'''First Reviewer'''<br>(applicable for Alpha Quality & further)
| |
− | | style="width:16%; background:#b3b3b3" align="center"|'''Second Reviewer'''<br>(applicable for Beta Quality & further)
| |
− | | style="width:16%; background:#b3b3b3" align="center"|'''Third Reviewer'''<br>(applicable for Beta Quality & further)
| |
− | | style="width:16%; background:#b3b3b3" align="center"|'''Fourth Reviewer'''<br>(applicable for Beta Quality & further)
| |
− | | style="width:16%; background:#b3b3b3" align="center"|'''OWASP Board Member'''<br>(applicable just for Release Quality)
| |
− | |-
| |
− | | style="width:4%; background:#7B8ABD" align="center"|'''50% Review'''
| |
− | | style="width:16%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes/No'''<br>(To update)<br>---------<br>[[Project Information:template ASDR Project - 50 Review - Self Evaluation - A|See&Edit: 50% Review<br>Self-Evaluation (A)]]
| |
− | | style="width:1%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes/No'''<br>(To update)<br>---------<br>[[Project Information:template ASDR Project - 50 Review - First Reviewer - C|See&Edit: 50% Review<br>1st Reviewer (C)]]
| |
− | | style="width:16%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes/No'''<br>(To update)<br>---------<br>[[Project Information:template ASDR Project 50 Review Second Review E|See&Edit: 50% Review<br>2nd Reviewer (E)]]
| |
− | | style="width:16%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes/No'''<br>(To update)<br>---------<br>[[Project Information:template ASDR Project 50 Review Third Review G|See&Edit: 50% Review<br>3rd Reviewer (G)]]
| |
− | | style="width:16%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes/No'''<br>(To update)<br>---------<br>[[Project Information:template ASDR Project 50 Review Fourth Review I|See&Edit: 50% Review<br>4th Reviewer (I)]]
| |
− | | style="width:16%; background:#C2C2C2" align="center"|X
| |
− | |-
| |
− | | style="width:4%; background:#7B8ABD" align="center"|'''Final Review'''
| |
− | | style="width:16%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes/No'''<br>(To update)<br>---------<br>Which status has been reached?<br>'''Season of Code'''<br>(To update)<br>---------<br>[[Project Information:template ASDR Project - Final Review - Self Evaluation - B|See&Edit: Final Review<br>SelfEvaluation (B)]]
| |
− | | style="width:16%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes/No'''<br>(To update)<br>---------<br>Which status has been reached?<br>'''Season of Code'''<br>(To update)<br>---------<br>[[Project Information:template ASDR Project - Final Review - First Reviewer - D|See&Edit: Final Review<br>1st Reviewer (D)]]
| |
− | | style="width:16%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes/No'''<br>(To update)<br>---------<br>Which status has been reached?<br>'''Season of Code'''<br>(To update)<br>---------<br>[[Project Information:template ASDR Project - Final Review - Second Reviewer - F|See&Edit: Final Review<br>2nd Reviewer (F)]]
| |
− | | style="width:16%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes/No'''<br>(To update)<br>---------<br>Which status has been reached?<br>'''Season of Code'''<br>(To update)<br>---------<br>[[Project Information:template ASDR Project - Final Review - Third Reviewer - H|See&Edit: Final Review<br>3rd Reviewer (H)]]
| |
− | | style="width:16%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes/No'''<br>(To update)<br>---------<br>Which status has been reached?<br>'''Season of Code'''<br>(To update)<br>---------<br>[[Project Information:template ASDR Project - Final Review - Fourth Reviewer - J|See&Edit: Final Review<br>4th Reviewer (J)]]
| |
− | | style="width:16%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes/No'''<br>(To update)<br>---------<br>Which status has been reached?<br>'''Season of Code'''<br>(To update)<br>---------<br>[[Project Information:template ASDR Project - Final Review - OWASP Board Member - K|See/Edit: Final Review<br>Board Member (K)]]
| |
| |- | | |- |
| + | | style="width:29%; background:#cccccc" align="center"| |
| + | '''[[:Category:OWASP_Project_Assessment#Alpha_Quality_Documentation_Criteria|Alpha Quality]]'''<br>[[:OWASP ASDR Project - Assessment Frame|Please see here for complete information.]] |
| + | | style="width:42%; background:#cccccc" align="center"| |
| + | [[:OWASP ASDR Workplan|OWASP ASDR Workplan]]<br> |
| + | [[:OWASP Honeycomb Project Roadmap|Old Honeycomb Roadmap]]<br> |
| + | | style="width:29%; background:#cccccc" align="center"| |
| + | [[:Category:OWASP Honeycomb Project|OWASP Honeycomb Project]]<br>[http://cve.mitre.org/cwe/about/index.html Common Weakness Enumeration (CWE)]<br>[http://samate.nist.gov/index.php/Main_Page Software Assurance Metrics and Tool Evaluation (SAMATE)] |
| |} | | |} |
| + | ---- |