Difference between revisions of "Key Project Information:OWASP PCI Project"

OWASP PCI Toolkit

OWASP PCI toolkit is an Open Source Google Engine App, that will help you to scope the PCI-DSS requirements for your System Components. Beta version of this tool will be released May 2014

Introduction

The PCI toolkit is based on a decision tree assesment methodology, to help you define if the system components of your network, fall within the PCI-DSS requirements. By decomposing , one by one with the help of this Google App Engine, you will be able to create an assesment and a final report of your scope delimitation.

Licensing

OWASP PCI Toolkit is free to use. It is licensed under the Creative Commons Attribution-ShareAlike 3.0 license, so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

Preview tool

Presentation

Soon

Project Leader(s)

Johanna Curiel
Ignacio Salom

Related Projects

• OWASP Secure Coding Practices - Quick Reference Guide
• OWASP Application Security Verification Standard

Hyperlink to Google Engine App

http://pci-toolkit.appspot.com/

Reference Files

• OWASP SCP requirements
• OWASP ASVS verification IDs
• OWASP AppSensor attack detection point IDs
• CAPEC IDs
• SAFECode security-focused story IDs

The OWASP SCP does not include identity values for the requirements, so please use this list.

News and Events

PCIDSS

OWASP Cornucopia Ecommerce Website Edition is referenced in the new Payment Card Industry Security Standards Council information supplement PCI DSS E-commerce Guidelines v2, January 2013

Classifications