This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "OWASP SAMM Project"

From OWASP
Jump to: navigation, search
m
Line 3: Line 3:
  
 
{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
 
{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
−
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |
+
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |
  
 
<div style="font-size:120%;border:none;margin: 0;color:#000">
 
<div style="font-size:120%;border:none;margin: 0;color:#000">
Line 31: Line 31:
 
{{Social Media Links}}
 
{{Social Media Links}}
  
−
| valign="top" style="padding-left:25px;width:200px;" |
+
| valign="top" style="padding-left:25px;width:200px;" |
  
 
== Quick Download v1.5 ==
 
== Quick Download v1.5 ==
Line 64: Line 64:
 
== Project Leaders ==
 
== Project Leaders ==
  
−
[https://www.owasp.org/index.php/User:Sdeleersnyder Seba Deleersnyder] <br/>  [https://www.owasp.org/index.php/User:Bart_De_Win Bart De Win] <br/> [https://www.owasp.org/index.php/User:Brianglas Brian Glas]
+
[https://www.owasp.org/index.php/User:Sdeleersnyder Seba Deleersnyder] <br />  [https://www.owasp.org/index.php/User:Bart_De_Win Bart De Win] <br /> [https://www.owasp.org/index.php/User:Brianglas Brian Glas]
  
 
== Related Projects ==
 
== Related Projects ==
Line 75: Line 75:
 
   {| width="200" cellpadding="2"
 
   {| width="200" cellpadding="2"
 
   |-
 
   |-
−
   | align="center" valign="top" rowspan="2" width="50%" | [[File:Owasp-flagship-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Flagship_Projects]]
+
   | rowspan="2" align="center" valign="top" width="50%" | [[File:Owasp-flagship-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Flagship_Projects]]
−
   | align="center" valign="center" width="50%"| [[File:Owasp-defenders-small.png|link=]]
+
   | align="center" valign="center" width="50%" | [[File:Owasp-defenders-small.png|link=]]
 
   |
 
   |
 
   |-
 
   |-
−
   | align="center" valign="center" width="50%"| [[File:Owasp-builders-small.png|link=]]   
+
   | align="center" valign="center" width="50%" | [[File:Owasp-builders-small.png|link=]]   
 
   |-
 
   |-
−
   | colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
+
   | colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
 
   |-
 
   |-
−
   | colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
+
   | colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
 
   |}
 
   |}
  
Line 100: Line 100:
 
|[https://www.owasp.org/index.php/SAMM_-_Governance https://www.owasp.org/images/f/f7/G.png]
 
|[https://www.owasp.org/index.php/SAMM_-_Governance https://www.owasp.org/images/f/f7/G.png]
 
|-
 
|-
−
|align="center"|'''Strategy & Metrics'''
+
| align="center" |'''Strategy & Metrics'''
 
|{{SAMM-BadgeList|name=Strategy_&_Metrics|abbr=SM|padding=0}}
 
|{{SAMM-BadgeList|name=Strategy_&_Metrics|abbr=SM|padding=0}}
 
|-
 
|-
−
|align="center"|'''Policy & Compliance'''
+
| align="center" |'''Policy & Compliance'''
 
|{{SAMM-BadgeList|name=Policy_&_Compliance|abbr=PC|padding=0}}
 
|{{SAMM-BadgeList|name=Policy_&_Compliance|abbr=PC|padding=0}}
 
|-
 
|-
−
|align="center"|'''Education & Guidance'''
+
| align="center" |'''Education & Guidance'''
 
|{{SAMM-BadgeList|name=Education_&_Guidance|abbr=EG|padding=0}}
 
|{{SAMM-BadgeList|name=Education_&_Guidance|abbr=EG|padding=0}}
 
|-
 
|-
 
|[https://www.owasp.org/index.php/SAMM_-_Construction https://www.owasp.org/images/e/ee/C.png]
 
|[https://www.owasp.org/index.php/SAMM_-_Construction https://www.owasp.org/images/e/ee/C.png]
 
|-
 
|-
−
|align="center"|'''Threat Assessment'''
+
| align="center" |'''Threat Assessment'''
 
|{{SAMM-BadgeList|name=Threat_Assessment|abbr=TA|padding=0}}
 
|{{SAMM-BadgeList|name=Threat_Assessment|abbr=TA|padding=0}}
 
|-
 
|-
−
|align="center"|'''Security Requirements'''
+
| align="center" |'''Security Requirements'''
 
|{{SAMM-BadgeList|name=Security_Requirements|abbr=SR|padding=0}}
 
|{{SAMM-BadgeList|name=Security_Requirements|abbr=SR|padding=0}}
 
|-
 
|-
−
|align="center"|'''Secure Architecture'''
+
| align="center" |'''Secure Architecture'''
 
|{{SAMM-BadgeList|name=Secure_Architecture|abbr=SA|padding=0}}
 
|{{SAMM-BadgeList|name=Secure_Architecture|abbr=SA|padding=0}}
 
|-
 
|-
 
|[https://www.owasp.org/index.php/SAMM_-_Verification https://www.owasp.org/images/8/83/V.png]
 
|[https://www.owasp.org/index.php/SAMM_-_Verification https://www.owasp.org/images/8/83/V.png]
 
|-
 
|-
−
|align="center"|'''Design Review'''
+
| align="center" |'''Design Review'''
 
|{{SAMM-BadgeList|name=Design_Review|abbr=DR|padding=0}}
 
|{{SAMM-BadgeList|name=Design_Review|abbr=DR|padding=0}}
 
|-
 
|-
−
|align="center"|'''Code Review'''
+
| align="center" |'''Code Review'''
 
|{{SAMM-BadgeList|name=Code_Review|abbr=CR|padding=0}}
 
|{{SAMM-BadgeList|name=Code_Review|abbr=CR|padding=0}}
 
|-
 
|-
−
|align="center"|'''Security Testing'''
+
| align="center" |'''Security Testing'''
 
|{{SAMM-BadgeList|name=Security_Testing|abbr=ST|padding=0}}
 
|{{SAMM-BadgeList|name=Security_Testing|abbr=ST|padding=0}}
 
|-
 
|-
 
|[https://www.owasp.org/index.php/SAMM_-_Deployment https://www.owasp.org/images/5/54/D.png]
 
|[https://www.owasp.org/index.php/SAMM_-_Deployment https://www.owasp.org/images/5/54/D.png]
 
|-
 
|-
−
|align="center"|'''Vulnerability Management'''
+
| align="center" |'''Vulnerability Management'''
 
|{{SAMM-BadgeList|name=Vulnerability_Management|abbr=VM|padding=0}}
 
|{{SAMM-BadgeList|name=Vulnerability_Management|abbr=VM|padding=0}}
 
|-
 
|-
−
|align="center"|'''Environment Hardening'''
+
| align="center" |'''Environment Hardening'''
 
|{{SAMM-BadgeList|name=Environment_Hardening|abbr=EH|padding=0}}
 
|{{SAMM-BadgeList|name=Environment_Hardening|abbr=EH|padding=0}}
 
|-
 
|-
−
|align="center"|'''Operational Enablement'''
+
| align="center" |'''Operational Enablement'''
 
|{{SAMM-BadgeList|name=Operational_Enablement|abbr=OE|padding=0}}
 
|{{SAMM-BadgeList|name=Operational_Enablement|abbr=OE|padding=0}}
 
|-
 
|-
Line 288: Line 288:
 
* Spanish
 
* Spanish
 
* Japanese
 
* Japanese
 +
* Chinese
  
 
Carlos Allendes created a presentation in Spanish on SAMM during the 2011 LatAm tour, download the [https://www.owasp.org/images/c/cf/05_OWASP_LatamTur2011_OpenSAMM.pdf presentation].
 
Carlos Allendes created a presentation in Spanish on SAMM during the 2011 LatAm tour, download the [https://www.owasp.org/images/c/cf/05_OWASP_LatamTur2011_OpenSAMM.pdf presentation].
Line 379: Line 380:
  
  
−
__NOTOC__ <headertabs />
+
__NOTOC__ <headertabs></headertabs>
  
−
<br/>
+
<br />
 
{{OWASP Book|6888083}}
 
{{OWASP Book|6888083}}
−
<br/>
+
<br />
  
−
[[Category:OWASP_Project|Zed Attack Proxy Project]]
+
[[Category:OWASP Project|Zed Attack Proxy Project]]
 
[[Category:OWASP_Tool]]
 
[[Category:OWASP_Tool]]
−
[[Category:OWASP_Release_Quality_Tool|OWASP Release Quality Tool]]
+
[[Category:OWASP Release Quality Tool|OWASP Release Quality Tool]]
 
[[Category:OWASP_Download]]
 
[[Category:OWASP_Download]]
 
[[Category:Popular]]
 
[[Category:Popular]]

Revision as of 14:05, 21 May 2017

Flagship big.jpg

OWASP SAMM v1.5 available in the downloads section! (Announcement Coming)


2017 OWASP SAMM Summit (12-16 JUNE 2017, London)

  • Join our 2017 OWASP SAMM Summit near London as part of the OWASP DevOps Security Summit.
  • We organize working sessions in a 5-day sprint to draft SAMM v2.0. Check out the working session details online
  • Register online here
  • Sponsor the SAMM Summit as Platinum or Gold sponsor


The Software Assurance Maturity Model (SAMM) is an open framework to help organizations formulate and implement a strategy for software security that is tailored to the specific risks facing the organization. SAMM helps you:

  • Evaluate an organization’s existing software security practices
  • Build a balanced software security assurance program in well-defined iterations
  • Demonstrate concrete improvements to a security assurance program
  • Define and measure security-related activities throughout an organization


Dell uses OWASP’s Software Assurance Maturity Model (Owasp SAMM) to help focus our resources and determine which components of our secure application development program to prioritize., (Michael J. Craigue, Information Security & Compliance, Dell, Inc.)

Follow OWASP SAMM on twitter: @owaspsamm


Share this:  E-mail this story Bookmark with Facebook Share on Digg.com Share on delicious Share on reddit.com Share on stumbleupon.com Share on LinkedIn.com Share on twitter.com Seed on Newsvine

Quick Download v1.5

All SAMM v1.5 files (.zip)
SAMM Core Model
How-To Guide
Quick Start Guide
SAMM Toolbox
SAMM Toolbox Example
OWASP SAMM on GitHub

Quick Download v1.1.1

SAMM Core Model
How-To Guide
Quick-Start Guide
Updated SAMM Tool Box
OWASP SAMM on GitHub

News and Events

Please see the News and Talks tabs

Change Log

Email List

Questions? Please ask on the SAMM Mailing List

Project Leaders

Seba Deleersnyder
Bart De Win
Brian Glas

Related Projects


Classifications

Owasp-flagship-trans-85.png Owasp-defenders-small.png
Owasp-builders-small.png
Cc-button-y-sa-small.png
Project Type Files DOC.jpg


OWASP Books logo.png This project has produced a book that can be downloaded or purchased.
Feel free to browse the full catalog of available OWASP books.

Retrieved from "https://wiki.owasp.org/index.php?title=OWASP_SAMM_Project&oldid=229861"