Projects/OWASP Code Review Project/Releases/Code Review Guide V1.1

back to project home page

what	is this release?
Code Review Guide V1.1 - 4 January 2009 - (download)
Release Description: Additional and expanded Chapters: Transactional analysis Expand chapter. Examples via diagrams. Threat Modeling and Analysis The approach to examining an application to be reviewed. Focusing on areas of interest. Example reports and how to write one How to determine the risk level of a finding. Automated code review Code crawler documentation and usage. Rich Internet Applications Expanded chapters on Flash, Ajax. The OWASP ESAPI (Enterprise Security API) What it is, Why use it. What to review. Code review Metrics: How to compile, use and analyse metrics. Rolling out metrics in the Enterprise. Integrating Code review with an existing SDLC Integration of Secure Code review with an existing SDLC. Secure Code review roadmap definition. Documentation requirements. Scope definition. SDLC steering comittee establishment. Performace criteria, benchmarks and metrics. Integration of SDLC results into key IT governance areas. Critical success factors.
Release License: Creative Commons Attribution Share Alike 3.0
who	worked on this release?
Release Leader(s): Eoin Keary @
how	can you learn more?
Release Notes: View
Main links: Former Project About Tab Code Review Guide V1.1 - List of Contributors OWASP Code Review Guide V1.1 - Word file OWASP Code Review Guide V1.1 - PDF file Code Review Guide Table of Contents
Release Rating: Stable Release - Assessment Details
Key Contacts
Contact Eoin Keary @ to contribute to this project Contact Eoin Keary @ to review or sponsor this project Contact the GPC to report a problem or concern about this release info or to update information.