OWASP Summer of Code 2008

Updates

Main Links	WoC 08 Logo
OWASP Winter Of Code 2008 - main page Winter of Code 2008 Logo OWASP Winter Of Code 2008 Press Release - Press release OWASP Winter Of Code 2008 Applications - To submit applications OWASP Winter Of Code 2008 : Selection - Jury's evaluation of applications

OWASP is now launching the Winter of Code 2008 (WoC 08), following the previous OWASP Spring of Code 2007 (SpoC 07), in which 21 projects were sponsored with a budget of US$117,500, and the OWASP Autumn of Code 2006 (AoC 06), in which 9 projects were sponsored with a budget of US$20,000.
WoC 08 is an open sponsorship program were participants/developers are paid to work on OWASP (and web security) related projects.
The WoC 08 is also an opportunity for external individual or company sponsors to challenge the participants/developers to work in areas in which they are willing to invest additional funding.
The Open Web Application Security Project (OWASP) is a worldwide free and open community focused on improving the security of application software. Our mission is to make application security "visible," so that people and organizations can make informed decisions about application security risks.

The only requirement is that the candidate shows the potential to accomplish the project's objectives/deliveries and the commitment to dedicate the time required to complete it in the appropriate period.
Current active OWASP Project Contributors (including Project leaders) are encouraged to apply.
No member of the OWASP board is allowed to apply for a SpoC 08 sponsorship.
There are no any other restrictions on who can apply for an "OWASP Spring of Code 2008" sponsorship.

Ideas to work can be chosen from:
- Participants/developers’ own interest and choice, as long as the OWASP main objectives are considered;
- Projects prioritized by the OWASP Board to be done with WoC 08 funds;
- Existing OWASP Projects;
- Projects directly linked to external individual or company sponsorship.
To submit a project you have to post it on the OWASP WoC of Code 2000 Applications Page.
- Please see AoC 06 and SpoC 07 for contents to be included in the Application
- Note that no sensitive personal details should be posted in that page, i.e., full name, postal address, email, and so on.
Once your application is published on the WIKI, send an email to Paulo Coimbra with the following details:
- Project name;
- Contact details, i.e., full name, postal address and email.
Both Paulo Coimbra and Dinis Cruz can also be contacted for further discussion on issues related to WoC 08 applications, i.e., project ideas, review of draft applications, etc..

1st March – WoC 2008 season of code is officially launched. Start date for submitting applications.
25th March - Deadline for project applications.
2nd April – Publishing of selected applications and start of WoC 08 projects.
30th May - Participants to report on project status.
30th July - Project completion. Participants should deliver final project report.

Jury: OWASP Board Members (Jeff Williams, Dave Wichers, Tom Brennan, Sebastien Deleersnyder and Dinis Cruz).

Whenever possible the participant should suggest a WoC 08 Project Reviewer, which will be responsible for reviewing the project’s deliverables and authorize payments.
All and each Project Reviewer suggested by participants has to be confirmed by majority vote of the OWASP Board.
Whenever the participants fail to suggest a WoC 08 Project Reviewer, the OWASP Board, by majority vote, will appoint one. The same will happen whenever the reviewer suggested by the participant does not have the required approval.
Each and every project should have its Project Progress page always completely updated with all information regarding the project status.
The Project Reviewer will provide his assessment twice for each project, respectively with 50% and 100% claimed completion. The Project Reviewer will deliver his evaluation filling in his Project Reviewer Page.
Each new project should obtain Reviewer’s agreement that, at least, a Beta Quality stage was achieved.
Each project built on previous work done within OWASP should obtain Reviewer’s agreement that a Release Quality stage was achieved.
Projects Final Deliveries will be evaluated by an assigned WoC 08 Reviewer. However, the Jury will provide final oversight.
Payments will be made, via Pay Pal, in two installments, respectively 50% halfway and 50% on completion of the project.
Basically, if you do not deliver you will NOT be paid.

By taking part on WoC 08, the participant will authorize OWASP to host and advertise without any limitations his participation and all related contents including proposal and all deliveries.
All tools, documentation, or any other materials whatsoever, created by the participants within WoC 08 context must be released under an Open Source Initiative approved license. However, the participant may mirror development on her/his personal infrastructure at her/his option.
Participants and OWASP is free to use the results, including code, of the WoC's 008 code in any way they choose provided it is not in conflict with the license under which the code was developed.
OWASP reserves the right, at its sole discretion, to revoke any, and all, privileges associated with participating in this program, and to take any other action it deems appropriate, for no reason or any reason whatsoever. OWASP reserves the right to cancel, terminate or modify the program if it is not capable of completion as planned for any reason.
Any situation arising not included in the above mentioned set of rules will be decided according to the discretionary judgement of OWASP Board.

The initial Budget for WoC 08 will be US$100,000, and it is funded by OWASP.
In parallel with the Request for Proposals, OWASP is also doing a membership drive where all membership fees committed during that period will be allocated to WoC 08 projects (the new members have the option to choose which projects they would like to sponsor).
The funds available will be allocated to select projects. However, strong proposals will be accepted by majority vote of the OWASP Board before the final project selection. Remaining budget will be allocated to remaining projects.
Note: The referred budget allocation is just a guideline and the final values will be adjusted based on the successful proposals.