Category:OWASP Java Project

About

The OWASP Java™ and JVM Project is the clearing house for all information related to building secure web applications and services based on Java and JVM technologies. The focus of the project is on guidance for developers using Java frameworks and JVM based technologies for web application development, on OWASP components that use Java and on participation in OWASP projects that use Java and JVM technologies. The project is not limited to Java. It aims to also address topics around the JVM in general.

Community content is key to security information. The project depends on content from developers throughout the Java and JVM ecosystem.

Purpose

• Provide deep, rich guidance for Java developers in using the security features of Java and of Java frameworks.
• Address security in relation to the Java Virtual Machine and derived technologies.
• Create guidance for use of OWASP components that are designed for use with Java or other JVM languages.
• Focus on information about working with and on OWASP tools built using Java or other JVM technologies.
• Provide a stream of security related information, like vulnerabilities and security patches, related to the Java and JVM universe.
• Build an ecosystem allowing to all actors interested to discuss, share and learn.

Licensing

OWASP Java™ Project is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

Oracle® and Java™ are trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.

Team

Lead: Tasha CARL

Other Resources

Mailing List

Twitter

GitHub

Related Projects

• Main Project Repository
• OWASP .NET
• OWASP DevSec
• OWASP IoT Security
• OWASP Mobile Security

Classifications