This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Project Information:template Source Code Flaws Top 10 Project

From OWASP

Revision as of 12:37, 14 December 2008 by Paulo Coimbra (talk | contribs) (New page: {| style="width:100%" border="0" align="center" ! colspan="8" align="center" style="background:#4058A0; color:white"|<font color="white">'''PROJECT IDENTIFICATION''' |- | style="width:...)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Jump to: navigation, search

PROJECT IDENTIFICATION
Project Name	OWASP Source Code Flaws Top 10 Project
Short Project Description	While trying to build a taxonomy for source code flaw categories to be applied to both Code Review Guide than to Owasp Orizon project, I proposed Eoin Keary (Code Review Guide's Leader) a sort of Top 10 of flaw categories that can be used to match vulnerabilities found during a code review. I started hacking over the venerable work of Gary McGraw and his "Seven kingdoms" but I found that something can be extendend to match a sort of Top 10 document also for Code Review assessement. This project deliverable will be a document with an outline very close to the "Owasp Top 10" one.
Key Project Information	Licensed under Choose here & replace link with license name	Project Leader Michael V. Scovetta	Project Contributors Name	Mailing List To Subscribe To Use	First Reviewer Name	Second Reviewer Name	OWASP Board Member (if applicable) Name&Email

PROJECT MAIN LINKS
Yasca is hosted on SourceForge (http://sourceforge.net/projects/yasca) with additional information at http://yasca.org.

RELATED PROJECTS
OWASP Orizon Project OWASP Code Review_Project OWASP Open Review Project

SPONSORS & GUIDELINES
Sponsor name, if applicable	Guidelines/Roadmap

ASSESSMENT AND REVIEW PROCESS
Review/Reviewer	Author's Self Evaluation (applicable for Alpha Quality & further)	First Reviewer (applicable for Alpha Quality & further)	Second Reviewer (applicable for Beta Quality & further)	OWASP Board Member (applicable just for Release Quality)
First Review	Objectives & Deliveries reached? Not yet (To update) --------- Which status has been reached? Alpha Status - (To update) --------- See&Edit: First Review/SelfEvaluation (A)	Objectives & Deliveries reached? Not yet (To update) --------- Which status has been reached? Alpha Status - (To update) --------- See&Edit: First Review/1st Reviewer (B)	Objectives & Deliveries reached? Yes/No (To update) --------- Which status has been reached? Alpha Status - (To update) --------- See&Edit: First Review/2nd Reviewer (C)	Objectives & Deliveries reached? Yes/No (To update) --------- Which status has been reached? Alpha Status - (To update) --------- See/Edit: First Review/Board Member (D)