This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "OWASP ModSec CRS Paranoia Mode"

From OWASP
Jump to: navigation, search
m (New tasklist)
m (Tasklist -> Table)
Line 19: Line 19:
 
===Open Tasks===
 
===Open Tasks===
  
−
* Assemble list of 2.2.x rules, which have disappeared from 3.0.0-rc1
+
{|- class="wikitable"
−
* Assemble list of disappeared rules, which should be brought back
+
  |'''Task'''
−
* Assemble list of 3.0.0-rc1 rules, which could be moved to the paranoia mode
+
  |         '''Who'''       
−
* Assemble list of 3.0.0-rc1 rules, which could be accompanied with stricter siblings in paranoia mode (same idea of the rule, but harder limit etc.)
+
  |    '''Status'''   
−
* Write new stricter siblings for existing rules
+
|-
−
* Sort out mechanics of the paranoia mode
+
  | Assemble list of 2.2.x rules, which have disappeared from 3.0.0-rc1
−
* Define exact syntax of paranoia mode setup
+
  | n.n.
−
* Write pull request
+
  | open
−
* Submit pull request
+
|-
−
* Sort out name: Is "Paranoia Mode" really the right term?
+
  | Assemble list of disappeared rules, which should be brought back
 +
  | n.n.
 +
  | open
 +
|-
 +
  | Assemble list of 3.0.0-rc1 rules, which could be moved to the paranoia mode
 +
  | n.n.
 +
  | open
 +
|-
 +
  | Assemble list of 3.0.0-rc1 rules, which could be accompanied with<br />stricter siblings in paranoia mode<br />(same idea of the rule, but harder limit etc.)
 +
  | n.n.
 +
  | open
 +
|-
 +
  | Write new stricter siblings for existing rules
 +
  | n.n.
 +
  | open
 +
|-
 +
  | Sort out mechanics of the paranoia mode
 +
  | n.n.
 +
  | open
 +
|-
 +
  | Define exact syntax of paranoia mode setup
 +
  | n.n.
 +
  | open
 +
|-
 +
  | Write pull request
 +
  | n.n.
 +
  | open
 +
|-
 +
  | Submit pull request
 +
  | n.n.
 +
  | open
 +
|-
 +
  | Sort out name: Is "Paranoia Mode" really the right term?
 +
  | Christian
 +
  | open
 +
|}
 +
 
 +
 
  
 
===Closed Tasks===
 
===Closed Tasks===
  
 
n.n.
 
n.n.

Revision as of 15:39, 6 January 2016

Paranoia Mode

This is a page about the development of a paranoia mode aka bringing back the rules that used to yield a high number of false positives. This little project is aimed at inclusion into the 3.0.0 release of the OWASP ModSecurity Core Rules, where some rules have been removed in order to reduce the number of false positives with vanilla installations.

More Detailed Description

Sub-Project Infos

  • Status: active (January 2016)
  • Schedule: January 2016
  • Who: Christian Folini (dune73), FIXME
  • Documentation: here on the owasp wiki: [[1]]
  • Discussion / Archive: Core Rules Mailinglist FIXME
  • Github Link: FIXME
  • Final Pull Request: FIXME

Tasks

Open Tasks

Task         Who           Status   
Assemble list of 2.2.x rules, which have disappeared from 3.0.0-rc1 n.n. open
Assemble list of disappeared rules, which should be brought back n.n. open
Assemble list of 3.0.0-rc1 rules, which could be moved to the paranoia mode n.n. open
Assemble list of 3.0.0-rc1 rules, which could be accompanied with
stricter siblings in paranoia mode
(same idea of the rule, but harder limit etc.) 		n.n. open
Write new stricter siblings for existing rules n.n. open
Sort out mechanics of the paranoia mode n.n. open
Define exact syntax of paranoia mode setup n.n. open
Write pull request n.n. open
Submit pull request n.n. open
Sort out name: Is "Paranoia Mode" really the right term? Christian open


Closed Tasks

n.n.

Retrieved from "https://wiki.owasp.org/index.php?title=OWASP_ModSec_CRS_Paranoia_Mode&oldid=205951"