This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Category talk:FIXME"

From OWASP
Jump to: navigation, search
m
(Updated my suggestion)
 
Line 21: Line 21:
 
|}
 
|}
  
−
<!-- Special Links -->
+
<!-- News -->
−
<!-- |style="width:110px;font-size:95%;color:#000"|
+
|[[Image:My recent documents.gif|center]]<center><h5><IfLanguage>
−
  *[https://www.owasp.org/index.php/Projects_Reboot_2012 2012 Project Support Initiative] --->
+
  <@en>[[:Category:OWASP_Newsletter | News]]</@en>
−
|style="width:180px;font-size:95%"|
+
  <@es>[[:Category:OWASP_News | Periódicos]]</@es>
−
*[https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project ZAP Proxy]
+
  </IfLanguage></h5></center>
−
*[https://www.owasp.org/index.php/Cheat_Sheets Cheat Sheets]
+
| <div style="margin:0;border:0px;text-align:left;color:#000;padding:0.2em 0.4em;">{{Latest Newsletter}}</div>
−
|style="width:180px;font-size:95%"|
+
|}
−
*[[:Category:OWASP Top Ten Project|Top 10]]
+
<!-- End Banner -->
−
*[[:Category:OWASP_Enterprise_Security_API|ESAPI]]
 
−
*[[:Category:OWASP_Application_Security_Verification_Standard_Project |ASVS]]
 
−
*[[:Category:Software_Assurance_Maturity_Model|SAMM]]
 
−
|style="width:180px;font-size:95%"|
 
−
*[[:Category:OWASP Guide Project|Development Guide]]
 
−
*[https://www.owasp.org/index.php/OWASP_Appsec_Tutorial_Series AppSec Tutorial Series]
 
−
|style="width:180px;font-size:95%"|
 
−
*[[:Category:OWASP Testing Project|Testing Guide]]
 
−
*[https://www.owasp.org/index.php/Category:OWASP_ModSecurity_Core_Rule_Set_Project ModSecurity Ruleset]
 
−
|style="width:110px;font-size:95%"|
 
−
*'''[[:Category:OWASP_Project|More...]]'''
 
−
 
 
−
|} <!-- End Banner -->
 
  
 
<center>
 
<center>
Line 52: Line 39:
 
<!-- User Guide -->
 
<!-- User Guide -->
 
<h3>I'd like to ...</h3>
 
<h3>I'd like to ...</h3>
−
{{BoxTableBeginTemplate}} {{TextBoxTemplate|title=get Information|position=firstLeft|color=#F8F8FF|bgcolor=#F8F8FF}}
+
{{BoxTableBeginTemplate}} {{TextBoxTemplate|title=get more Information about OWASP|position=firstLeft|color=#F8F8FF|bgcolor=#F8F8FF}}
−
* as programmer
+
{|  
−
* as manager looking to understand what security means for your business
+
| The Open Web Application Security Project (OWASP) is a 501c3 not-for-profit worldwide charitable organization focused on improving the security of application software
−
* security professional
+
|-
−
 
+
| &#9679;&nbsp; [[about OWASP]]
−
{{TextBoxTemplate|title=get Tools|position=right|color=#F8F8FF|bgcolor=#F8F8FF}} 
 
−
* as programmer
 
−
* security professional
 
−
 
 
−
{{TextBoxTemplate|title=get more Information about OWASP|position=left|color=#F8F8FF|bgcolor=#F8F8FF}}
 
−
{| cellpadding="7"
 
−
| &#9679;&nbsp; about
 
 
|-
 
|-
−
| &#9679;&nbsp; OWASP Statement of the Security of the Internet
+
| &#9679;&nbsp; [[OWASP_Statement_on_the_Security_of_the_Internet_2014|OWASP Statement of the Security of the Internet]]
 
|-
 
|-
 
| <IfLanguage>
 
| <IfLanguage>
Line 73: Line 53:
 
|[[File:Social-networking.png|30px|center]]
 
|[[File:Social-networking.png|30px|center]]
 
|}
 
|}
−
 
+
{{TextBoxTemplate|title=get Information|position=right|color=#F8F8FF|bgcolor=#F8F8FF}} 
 +
* as programmer
 +
* as manager looking to understand what security means for your business
 +
* security professional
 +
{{TextBoxTemplate|title=get Tools|position=left|color=#F8F8FF|bgcolor=#F8F8FF}} 
 +
* as programmer
 +
* security professional
 
{{TextBoxTemplate|title=meet the OWASP Community|position=right|color=#F8F8FF|bgcolor=#F8F8FF}}
 
{{TextBoxTemplate|title=meet the OWASP Community|position=right|color=#F8F8FF|bgcolor=#F8F8FF}}
 
{| cellpadding="7"  
 
{| cellpadding="7"  
Line 86: Line 72:
 
! [[File:Podium-icon.jpg|30px|center]]
 
! [[File:Podium-icon.jpg|30px|center]]
 
|}
 
|}
−
 
 
{{TextBoxTemplate|title=help the Community|position=left|color=#F8F8FF|bgcolor=#F8F8FF}}   
 
{{TextBoxTemplate|title=help the Community|position=left|color=#F8F8FF|bgcolor=#F8F8FF}}   
 
* give Feedback
 
* give Feedback
Line 92: Line 77:
 
* launch a project
 
* launch a project
 
* found a Chapter
 
* found a Chapter
−
 
 
{{TextBoxTemplate|title=get help for my Project/Chapter|position=right|color=#F8F8FF|bgcolor=#F8F8FF}}
 
{{TextBoxTemplate|title=get help for my Project/Chapter|position=right|color=#F8F8FF|bgcolor=#F8F8FF}}
 
* Wiki
 
* Wiki
 
* ...
 
* ...
−
 
+
{{TextBoxTemplate|title=... Special Links ...|position=left|color=#F8F8FF|bgcolor=#F8F8FF}}
−
{{TextBoxTemplate|title=... more Information ...|position=whole|color=#F8F8FF|bgcolor=#F8F8FF}}
+
{|<!-- |style="width:110px;font-size:95%;color:#000"|
 +
  *[https://www.owasp.org/index.php/Projects_Reboot_2012 2012 Project Support Initiative] --->
 +
||
 +
*[https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project ZAP Proxy]
 +
*[https://www.owasp.org/index.php/Cheat_Sheets Cheat Sheets]
 +
*[[:Category:OWASP Top Ten Project|Top 10]]
 +
||&nbsp;||
 +
*[[:Category:OWASP_Application_Security_Verification_Standard_Project |ASVS]]
 +
*[[:Category:Software_Assurance_Maturity_Model|SAMM]]
 +
*[[:Category:OWASP Guide Project|Development Guide]]
 +
||&nbsp;||
 +
*[https://www.owasp.org/index.php/OWASP_Appsec_Tutorial_Series AppSec Tutorial Series]
 +
*[[:Category:OWASP Testing Project|Testing Guide]]
 +
*[https://www.owasp.org/index.php/Category:OWASP_ModSecurity_Core_Rule_Set_Project ModSecurity Ruleset]
 +
*'''[[:Category:OWASP_Project|More...]]'''
 +
|}
 +
{{TextBoxTemplate|title=Multimedia|position=right|color=#F8F8FF|bgcolor=#F8F8FF}}
 +
<center>{{Community-Sandbox}}</center>
 +
{{TextBoxTemplate|title=... more Information ...|position=left|color=#F8F8FF|bgcolor=#F8F8FF}}
 
* Wiki
 
* Wiki
 
* ...
 
* ...
 +
{{TextBoxTemplate|title=Thank you|position=right|color=#F8F8FF|bgcolor=#F8F8FF}}
 +
[[Image:Thank-you-word-cloud-1024x791.jpg|center|400px]]
 +
'''Thank you ''' to our our corporate supporters that enable us to make software security visible, so that individuals and organizations worldwide can make informed decisions about true software security risks.  A complete list of our current corporate and academic supporters can be found on our [https://www.owasp.org/index.php/Acknowledgements  Acknowledgements Page]
 
{{BoxTableEndTemplate}}
 
{{BoxTableEndTemplate}}
 +
  
 
<!-- End User Guide -->
 
<!-- End User Guide -->

Latest revision as of 20:30, 27 April 2014

Let's try to create and test a new 'Main Page' here

OWASP Project Header.jpg


Welcome to OWASP

the free and open software security community
My recent documents.gif

News

OWASP News

OWASP in the news: An excellent article on OWASP and the Internet of Things
OWASP newsletters report on events, projects, people, tools, updates Sign Up Here...

About · Searching · Editing · New Article · OWASP Categories Statistics · Recent Changes

I'd like to ...

get more Information about OWASP

The Open Web Application Security Project (OWASP) is a 501c3 not-for-profit worldwide charitable organization focused on improving the security of application software
●  about OWASP
●  OWASP Statement of the Security of the Internet

●  Social Media

Social-networking.png

get Information

  • as programmer
  • as manager looking to understand what security means for your business
  • security professional

get Tools

  • as programmer
  • security professional

meet the OWASP Community

● OWASP worldwide

Globe Icon House 1330502.jpg

● Security Conferences, Training

Podium-icon.jpg

help the Community

  • give Feedback
  • get involved in Projects
  • launch a project
  • found a Chapter

get help for my Project/Chapter

  • Wiki
  • ...

... Special Links ...

   

Multimedia


Hundreds of Hours of AppSec Videos

... more Information ...

  • Wiki
  • ...

Thank you

Thank-you-word-cloud-1024x791.jpg

Thank you to our our corporate supporters that enable us to make software security visible, so that individuals and organizations worldwide can make informed decisions about true software security risks. A complete list of our current corporate and academic supporters can be found on our Acknowledgements Page


only for stripping the assets

Every vibrant technology marketplace needs an unbiased source of information on best practices as well as an active body advocating open standards. In the Application Security space, one of those groups is the Open Web Application Security Project™ (or OWASP for short).

The Open Web Application Security Project (OWASP) is a 501(c)(3) worldwide not-for-profit charitable organization focused on improving the security of software. Our mission is to make software security visible, so that individuals and organizations are able to make informed decisions. OWASP is in a unique position to provide impartial, practical information about AppSec to individuals, corporations, universities, government agencies, and other organizations worldwide. Operating as a community of like-minded professionals, OWASP issues software tools and knowledge-based documentation on application security.

Everyone is free to participate in OWASP and all of our materials are available under a free and open software license. You'll find everything about OWASP here on or linked from our wiki and current information on our OWASP Blog. OWASP does not endorse or recommend commercial products or services, allowing our community to remain vendor neutral with the collective wisdom of the best minds in software security worldwide.

We ask that the community look out for inappropriate uses of the OWASP brand including use of our name, logos, project names, and other trademark issues.

There are thousands of active wiki users around the globe who review the changes to the site to help ensure quality. If you're new, you may want to check out our getting started page. As a global group of volunteers with over 45,000 participants, questions or comments should be sent to one of our many mailing lists focused on a topic or directed to the staff using the OWASP Contact Us Form.

Pick an OWASP Project - Find Your Local OWASP Chapter

Flagship Projects

Projects that have demonstrated strategic value to OWASP and application security as a whole

Tool Projects
Automatically finds security vulnerabilities in your web applications while you are developing and testing your applications
A collection of easy-to-use application security tools and documentation available in multiple formats
Pentesting tool to more efficiently find, verify and combine vulnerabilities in short timeframes
A utility that identifies project dependencies and checks if there are any known, publicly disclosed, vulnerabilities
A web and mobile application security training platform to foster and improve security awareness among a varied skill-set demographic
An open source vulnerability management tool that streamlines the testing process by offering templating, report generation, metrics, and baseline self-service tools
An intentionally insecure webapp for security trainings written entirely in JavaScript which encompasses the entire OWASP Top Ten and other severe security flaws
A tool that is used as a guide for building and verifying secure software that can also be used to train developers about application security
A Software Composition Analysis (SCA) platform that keeps track of all third-party components used in all the applications an organization creates or consumes. It monitors all applications in its portfolio in order to proactively identify vulnerabilities in components that are placing your applications at risk
Code Projects
A set of generic attack detection rules for use with ModSecurity or compatible web application firewalls which aims to protect web applications from a wide range of attacks
A library that implements a variant of the synchronizer token pattern to mitigate the risk of Cross-Site Request Forgery (CSRF) attacks
Documentation Projects
Provides a basis for testing web application technical security controls and also provides developers with a list of requirements for secure development
A conceptual framework and methodology that offers prescriptive guidance to implement intrusion detection and automated response into applications
An open framework to help organizations formulate and implement a strategy for software security that is tailored to the specific risks facing the organization
A powerful awareness document for web application security that represents a broad consensus about the most critical security risks to web applications
Includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics. These cheat sheets were created by various application security professionals who have expertise in specific topics.
A security standard for mobile apps and a comprehensive testing guide that covers the processes, techniques, and tools used during a mobile app security test, as well as an exhaustive set of test cases that enables testers to deliver consistent and complete results.

Thank-you-word-cloud-1024x791.jpg

Thank you to our our corporate supporters that enable us to make software security visible, so that individuals and organizations worldwide can make informed decisions about true software security risks. A complete list of our current corporate and academic supporters can be found on our Acknowledgements Page





Hundreds of Hours of AppSec Videos



Stack-of-books.jpg

Citations

Who Trusts OWASP?
Citations of National & International Legislation, Standards, Guidelines, Committees and Industry Codes of Practice - Click Here
Book-cup2.png

OCoC

How can OWASP help your org?
Government Bodies
Educational Institutions
Standards Groups
Trade Organizations
Certifying Bodies
Development Organizations

Security101

Ask a software security question on our Slack channel - open to all, experts to beginners
Podium-icon.jpg

Upcoming Events

Security Conferences, Training
Global, Regional and Local - Click Here
ProjectIcon 1.png

Start a Project

How to Start an OWASP Project

New Project

How to update an existing project

Existing Project

My recent documents.gif

News

OWASP News

OWASP in the news: An excellent article on OWASP and the Internet of Things
OWASP newsletters report on events, projects, people, tools, updates Sign Up Here...

Social-networking.png

Social Media

Blog-icon-200.png

Blog

OWASP Blog
The OWASP blog has global announcements - Click Here
Podcast.png

Podcast

Security Podcast
Listen as interviews are conducted with OWASP volunteers, industry experts Click Here
Globe Icon House 1330502.jpg

Start a Chapter

OWASP Chapters

Start/Locate a Local Chapter

QuestionMark.png

Contact Us

Got Questions?
Please submit your questions, comments and requests and our staff will help Click Here




Retrieved from "https://wiki.owasp.org/index.php?title=Category_talk:FIXME&oldid=173635"