This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Projects/OWASP Secure Web Application Framework Manifesto"

From OWASP
Jump to: navigation, search
(Created page with '{{Template:Project About | project_name = | project_home_page = | project_description = | project_license = | leader_name[1-10] = | leader_email[1-10] = | leader_username[1-10] =…')
 
Line 1: Line 1:
 
{{Template:Project About
 
{{Template:Project About
−
| project_name =
+
 
−
| project_home_page =
+
| project_name = OWASP Secure Web Application Framework Manifesto
 +
 
 +
| project_home_page = OWASP Secure Web Application Framework Manifesto
 +
 
 
| project_description =
 
| project_description =
−
| project_license =
+
The Secure Web Application Framework Manifesto is a document detailing a specific set of security requirements for developers of web application frameworks to adhere to. The goal is to help develop more secure applications from the start. The manifesto centers around the following beliefs:
−
| leader_name[1-10] =
+
* Frameworks that are ‘secure by default’ will yield a dramatic reduction in the number of common web application security vulnerabilities.
−
| leader_email[1-10] =
+
* Application security experts should provide, on a regularly basis, updated guidance to framework developers on how to incorporate mechanisms to avoid newly discovered vulnerabilities.
−
| leader_username[1-10] =  
+
 
−
| contributor_name[1-10] =  
+
| project_license = [http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution ShareAlike 3.0 license]
−
| contributor_email[1-10] =  
+
 
−
| contributor_username[1-10] =  
+
| leader_name1 = Rohit Sethi
 +
| leader_email1 = [email protected]
 +
| leader_username1 = rksethi
 +
 
 +
| leader_name2 = Yuk Fai Chan
 +
| leader_email2 = [email protected]
 +
| leader_username2 = 
 +
 
 +
| contributor_name1 = Tom Aratyn
 +
| contributor_email1 = [email protected]
 +
| contributor_username1 =
 +
 
 +
| contributor_name2 = Sahba Kazerooni
 +
| contributor_email2 = [email protected]
 +
| contributor_username2 =
 +
 
 +
| contributor_name3 = Patrick Szeto
 +
| contributor_email3 = [email protected]
 +
| contributor_username3 =
 +
 
 
| pamphlet_link =  
 
| pamphlet_link =  
−
| presentation_link =
+
 
 +
| presentation_link =
 +
 
 
| mailing_list_name =  
 
| mailing_list_name =  
 +
 
| project_road_map =  
 
| project_road_map =  
−
| links_url[1-10] =  
+
 
−
| links_name[1-10] =  
+
| links_url1 = http://labs.securitycompass.com/
 +
 
 +
| links_name1 = SECCOM LABS Resources for Secure Software Engineering from Security Compass
 +
 
 
| release_1 =  
 
| release_1 =  
 +
 
| release_2 =  
 
| release_2 =  
 +
 
| release_3 =
 
| release_3 =
 +
 
| release_4 =
 
| release_4 =
 
}}
 
}}

Revision as of 16:39, 1 October 2010

PROJECT INFO
What does this OWASP project offer you? 		RELEASE(S) INFO
What releases are available for this project?
what is this project?
Name: OWASP Secure Web Application Framework Manifesto (home page)
Purpose: The Secure Web Application Framework Manifesto is a document detailing a specific set of security requirements for developers of web application frameworks to adhere to. The goal is to help develop more secure applications from the start. The manifesto centers around the following beliefs:
  • Frameworks that are ‘secure by default’ will yield a dramatic reduction in the number of common web application security vulnerabilities.
  • Application security experts should provide, on a regularly basis, updated guidance to framework developers on how to incorporate mechanisms to avoid newly discovered vulnerabilities.
License: Creative Commons Attribution ShareAlike 3.0 license
who is working on this project?
Project Leader(s):
Project Contributor(s):
  • Tom Aratyn @
  • Sahba Kazerooni @
  • Patrick Szeto @
how can you learn more?
Project Pamphlet: Not Yet Created
Project Presentation:
Mailing list: N/A
Project Roadmap: Not Yet Created
Main links:
Key Contacts
current release
SWAF Manifesto v0.08 - 01/10/2010 - (download)
Release description: Developers are increasingly relying on scaffolding-based systems like Rails and Django to build applications. The number of web application frameworks, scaffolding or otherwise, is constantly growing and it's becoming increasingly clear that securing these frameworks will be a major boon for the future of secure web applications.

Recognizing that many developers are gravitating to leveraging web application frameworks, we decided it was time to provide a list of positive features that these frameworks should include. This "Secure Web Application Framework Manifesto" must, of course, be a living document. At any given point, it should provide a minimum baseline of what a web application framework should include to appeal to security-conscious developers. We contend that if such a web application framework is broadly adopted, it will have far reaching effects into web application security.

Rating: Yellow button.JPG Not Reviewed - Assessment Details
last reviewed release
Not Yet Reviewed


other releases

Retrieved from "https://wiki.owasp.org/index.php?title=Projects/OWASP_Secure_Web_Application_Framework_Manifesto&oldid=90483"