Difference between revisions of "OWASP Store Sheep Project"

OWASP Store Sheep

OWASP Store Sheep is a work in progress application do demonstrate security concepts relating to Windows Store Apps.

Introduction

Store Sheep is a training app for Developers wishing to learn to securely code a Windows Store ('Metro Style') App, and Testers wanting to learn to test one. It contains a number of security vulnerabilities with explanations and fixes for them.

Description

Store Sheep (in line with the 'Goat' theme of Web Goat, Rails Goat etc - I thought it was about time we had a Sheep instead) is a training application for developers and testers. It takes the form of a pretend Windows Store App called 'A friend for Ewe' which is a dating agency for owners of pet Sheep.

The purpose of Store Sheep is for developers and testers alike to learn where these apps resemble and differ from traditional Win32 and Web applications and how to build them to resist attack. A side benefit from this project will be for the community to learn more about how the certification process for a big app store works and the kind of problems it does (and doesn't) find. I would imagine this would be relevant not only to Microsoft's Store but to Apple and Google's as well.

Broadly the idea at this stage is to get a basic app and some documentation up and running quite quickly and then to refine it as time goes on.

Licensing

OWASP Store Sheep is free to use. It is licensed under the GNU GPL v3 license, so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

What is Store Sheep?

OWASP Store Sheep provides:

• A Visual Studio project containing a JavaScript/HTML Windows Store app which can be side loaded on to a development machine running Windows 8.1.

Presentation

Project Leader

Marion McCune

Related Projects

Ohloh

Quick Download

Email List

Sign Up

News and Events

In Print

Classifications