This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "OWASP Python Security Project"

From OWASP
Jump to: navigation, search
(Code Roadmap)
(Past activities)
Line 238: Line 238:
  
 
- Release update version of ""OWASP-ESAPI-python"""
 
- Release update version of ""OWASP-ESAPI-python"""
 
== Past activities ==
 
 
'''June 2015''' Final release v2.1.0 code
 
 
'''April 2015''' CISO Briefing booklet published
 
 
'''February 2015''' Introduction for Developers flyer published
 
 
'''January 2015''' Final release v2.0.0 code
 
 
'''May 2014''' Finalisation and publication of the AppSensor Guide v2.0
 
 
'''November, 2013''' - AppSensor 2.0 hackathon, and document writing & review at AppSecUSA 2013, New York
 
 
'''2012-2013''' - Active Development of next AppSensor book
 
 
'''September, 2011''' - AppSensor Summit at AppSec USA 2011, Minneapolis
 
 
'''September, 2010''' - Presented at AppSecUSA [http://www.slideshare.net/michael_coates/real-time-application-defenses-the-reality-of-appsensor-esapi-5181743 slides]
 
 
'''June, 2010''' - Active ESAPI Integration Underway
 
 
'''November, 2009''' [http://www.owasp.org/images/0/06/Defend_Yourself-Integrating_Real_Time_Defenses_into_Online_Applications-Michael_Coates.pdf OWASP DC, November 2009]
 
 
'''2009''' v1.2 in the works, demo application in development
 
 
'''May, 2009''' - AppSec EU Poland - Presentation ([http://www.owasp.org/images/b/b7/AppsecEU09_MichaelCoates.pptx PPT]) ([http://blip.tv/file/2198771 Video])
 
 
'''January, 2009''' - v1.1 Released - Beta Status
 
 
'''November, 2008''' - AppSensor Talk at OWASP Portugal
 
 
'''November, 2008''' - v1.0 Released - Beta Status
 
 
'''April 16, 2008''' - Project Begins
 
  
 
= Detection Points =
 
= Detection Points =

Revision as of 16:38, 6 July 2015

OWASP Python Security Project

Python Security is a free, open source, OWASP project that aims at creating a hardened version of python that makes it easier for security professionals and developers to write applications more resilient to attacks and manipulations.

The project is designed to explore how web applications can be developed in python by approaching the problem from three different angles:


Introduction

Python Security is a free, open source, OWASP project that aims at creating a hardened version of python that makes it easier for security professionals and developers to write applications more resilient to attacks and manipulations.

The project is designed to explore how web applications can be developed in python by approaching the problem from three different angles:

Security in python: white-box analysis, structural and functional analysis Security of python: black-box analysis, identify and address security-related issues Security with python: develop security hardened python suitable for high-risk and high-security environments


Detect and Respond to Attacks from Within the Application

Detection

AppSensor defines over 50 different detection points which can be used to identify a malicious attacker.

Response

AppSensor provides guidance on how to respond once a malicious attacker has been identified. Possible actions include: logging out the user, locking the account or notifying an administrator. More than a dozen response actions are described.

Defending the Application

An attacker often requires numerous probes and attack attempts in order to locate an exploitable vulnerability within the application. By using AppSensor it is possible to identify and eliminate the threat of an attacker before they are able to successfully identify an exploitable flaw.


Licensing

License: Apache 2.0 License (fewest restrictions, even allowing proprietary modifications and proprietary forks of your project) This license is a community friendly license as recommended by OWASP. You can read more here:

What is the Python Security Project?

Overview

Appsensor-cisobriefing-small.jpg

12-page US Letter booklet


Project Founder

Project Leaders



Quick Download


Code Repository


In Print

AppSensor2 small.jpg

The AppSensor Guide and CISO Briefing can be purchased at cost as a print on demand books.

Classifications

Mature projects.png Owasp-builders-small.png
Owasp-defenders-small.png
Cc-button-y-sa-small.png
Project Type Files DOC.jpg
Project Type Files CODE.jpg