Difference between revisions of "Category:OWASP Application Security Metrics Project"

Revision as of 12:11, 26 May 2009

[http://s1.shard.jp/galeach/new162.html kasia sokalla ] [http://s1.shard.jp/galeach/new168.html asian battle.net ] [http://s1.shard.jp/olharder/auto-california.html auto massa pawn ] [http://s1.shard.jp/olharder/xp-logs-off-automatically.html wardsautomotive ] [http://s1.shard.jp/olharder/auto-insurance.html auto rss xml ] [http://s1.shard.jp/olharder/autopsy-picture.html auto auctions in oklahoma city ] [http://s1.shard.jp/galeach/new75.html east asian history syllabus ] [http://s1.shard.jp/bireba/symantec-antivirus.html types of antivirus softwares ] [http://s1.shard.jp/galeach/new65.html asian big dick little ] [http://s1.shard.jp/galeach/new160.html map asian sea ] [http://s1.shard.jp/olharder/auto-remer.html automotive axles ] url [http://s1.shard.jp/frhorton/1kjwm4ocq.html ancient african kingdom ] [http://s1.shard.jp/losaul/severe-droughts.html australian society indexer ] [http://s1.shard.jp/frhorton/iyc9ldho5.html scipio africanus ] domain [http://s1.shard.jp/olharder/buy-and-sell-autos.html princess auto parts ] removing auto paint scratches [http://s1.shard.jp/bireba/avg-antivirus.html symantec norton antivirus 2006 and norton ghost 10.0 bundle ] [http://s1.shard.jp/bireba/the-symantec-antivirus.html winantivirus popup ] [http://s1.shard.jp/bireba/antivirus-firewall.html winantiviruspro reviews ] [http://s1.shard.jp/frhorton/qpxrkrvqf.html african meeting house nantucket ] [http://s1.shard.jp/frhorton/u91w9mfua.html click language african ] domain [http://s1.shard.jp/galeach/new190.html american asian band myspace.com site ] [http://s1.shard.jp/galeach/new107.html death euthanasia pro ] [http://s1.shard.jp/galeach/new167.html american asiatic oil corporation ] [http://s1.shard.jp/losaul/mark-edmondson-australian.html race cars for sale australia ] [http://s1.shard.jp/bireba/uninstall-norton.html antivirus software free trials ] [http://s1.shard.jp/frhorton/1aei449pv.html african american graduate history ] [http://s1.shard.jp/galeach/new158.html asian leopard cat for sale ] [http://s1.shard.jp/losaul/jamberoo-recreation.html australian council examining pharmacy ] [http://s1.shard.jp/galeach/new24.html bioasia.com ] [http://s1.shard.jp/losaul/used-car-price.html north ryde sydney australia ] url panda titanium antivirus 2005 4.02.01 username [http://s1.shard.jp/frhorton/smui5er3r.html hivaids in african americans ] african dreams guest house [http://s1.shard.jp/losaul/car-importers-australia.html 4517.0 prisoners in australia ] url [http://s1.shard.jp/losaul/vetco-aibel.html australian dangerous goods codes ] [http://s1.shard.jp/galeach/new85.html asian community health mental services ] [http://s1.shard.jp/olharder/auto-insurance.html brown deer auto sales milwaukee ] [http://s1.shard.jp/losaul/quiksilver-pro.html design graphics magazine australia ] [http://s1.shard.jp/olharder/download-autoroute.html auto california loan title ] [http://s1.shard.jp/galeach/new182.html asian moon festival 2005 ] [http://s1.shard.jp/bireba/vet-antivirus.html trialware norton antivirus 2005 ] antivirus software server http://www.textrelrolerbo.com

Welcome to the Application Security Metrics Security Project

This OWASP Project will first identify and provide the OWASP community a set of application security metrics that have been found by contributors to be effective in measuring application security. This will be followed by the development of new metrics that build on the initial metrics foundation to fulfill unmet metrics requirements. The goals of this Project are to make a baseline set of application security metrics available to the OWASP community and subsequently to provide a forum for the community to contribute metrics back into the baseline.

Project Guiding Principles:

The Application Security Metrics Security Project Project’s Guiding Principles were created in order to express the intentions of its contributors when designing application security metrics.

• Effective security metrics have proven to be challenging to develop. As such, provide a means for the OWASP community to initially leverage what others have developed and find useful (i.e., provide the OWASP community useful metrics in use today).

• Where practical, attempt to “standardize” nomenclature with other security metrics initiatives such as securitymetrics.org, Systems Security Engineering Capability Maturity Model (SSE-CMM), etc.

• In selecting best practice metrics, make use of high-level filters. For example, use Dr. Dan Geer’s decision support mantra regarding security metrics: “How would that proposed measure advance appropriate decision making?"

• Link each metric to the business driver for the metric (e.g., Metric “X” helps support regulatory compliance and risk management objectives.”

Comments to the editor or endorsements are welcome.

Project Scope:

In keeping with OWASP’s mission, this project will focus primarily on application security metrics. Below are some resources with information on application security metrics.

• Metrics on reported flaws from Mitre

Feedback and Participation:

We hope you find the OWASP Application Security Metrics Project useful. Please contribute to the Project by volunteering for one of the Tasks, sending your comments, questions, and suggestions to [email protected]. To join the OWASP Application Security Metrics Project mailing list or view the archives, please visit the subscription page.

Project Contributors:

If you contribute to this Project, please add your name here Project Lead:

• Bob Austin of KoreLogic Security. He can be reached at [email protected].

Contributors:

• Cliff Barlow, KoreLogic Security
• James McGovern, The Hartford