Projects/The OWASP "Blue Book"

PROJECT INFO What does this OWASP project offer you?

RELEASE(S) INFO What releases are available for this project?

what is this project? Name: The OWASP "Blue Book" (home page) Purpose: In order to achieve our mission, OWASP needs to take advantage of every opportunity to affect software development everywhere. At the OWASP Summit 2011 in Portugal, the idea was created to try to influence educational institutions, government bodies, standards groups, and trade organizations. We set out to define a set of minimal requirements for these organizations specifying what we believe to be the most effective ways to support our mission. We call these requirements a “code of conduct” to imply that these are normative standards, they represent a minimum baseline, and that they are not difficult to achieve. This effort envisages to create and maintain The OWASP Application Security Code of Conduct for Educational Institutions/The OWASP "Blue Book". License: Creative Commons Attribution ShareAlike 3.0 license who is working on this project? Project Leader(s): Colin Watson @ Project Contributor(s): Jeff Williams @ Dave Wichers @ Dinis Cruz @ how can you learn more? Project Pamphlet: Not Yet Created Project Presentation: Mailing list: Mailing List Archives Project Roadmap: Book/Roadmap View Main links: Defining a minimal appsec program for universities, governments, and standards bodies (Summit 2011 Working Session) Key Contacts Contact Colin Watson @ to contribute to this project Contact Colin Watson @ to review or sponsor this project

current release The OWASP "Blue Book" v1.1 - March 27, 2013 - (download) Release description: This effort publishes a release version of The OWASP Application Security Code of Conduct for Educational Institutions/The OWASP "Blue Book", version v1.1. Rating: Stable Release - Assessment Details last reviewed release The OWASP "Blue Book" v1.1 - March 27, 2013 - (download) Release description: This effort publishes a release version of The OWASP Application Security Code of Conduct for Government Bodies/The OWASP "Green Book", version v1.1 This release includes the following significant changes: Formal review Rating: Stable Release - Assessment Details other releases The OWASP "Blue Book" 1.0