| what
|
is this project?
|
| Name: OWASP LAPSE Project (home page)
|
| Purpose: LAPSE stands for a Lightweight Analysis for Program Security in Eclipse. LAPSE is designed to help with the task of auditing Java EE Applications for common types of security vulnerabilities found in Web Applications. LAPSE was developed by Benjamin Livshits as part of the Griffin Software Security Project. The project's second push is being led by Pablo Martín Pérez, Evalues Lab ICT Security Researcher, developing LAPSE+, an enhanced version of LAPSE.
|
| License: GNU General Public License v3
|
| who
|
is working on this project?
|
Project Leader(s):
- Pablo Martín Pérez @
- José María Sierra Cámara @
|
Project Contributor(s):
- Ben Livshits (former lead, non-active)
|
| how
|
can you learn more?
|
| Project Pamphlet: Not Yet Created
|
| Project Presentation:
|
| Mailing list: Mailing List Archives
|
| Project Roadmap: View
|
| Main links:
|
| Key Contacts
|
|
- Contact Pablo Martín Pérez @ to contribute to this project
- Contact Pablo Martín Pérez @ to review or sponsor this project
|
|
| current release
|
|
|
| LapsePlus 2.8.1 - March 2011 - (download)
|
| Release description: LAPSE+ is a security scanner for detecting vulnerabilities of untrusted data injection in Java EE Applications. It has been developed as a plugin for Eclipse Java Development Environment, working specifically with Eclipse Helios and Java 1.6 or higher. LAPSE+ is based on the GPL software LAPSE, developed by the SUIF Compiler Group of Stanford University. This new release of the plugin developed by Evalues Lab of Universidad Carlos III de Madrid provides more features to analyze the propagation of the malicious data through the application and includes the identification of new vulnerabilities.
|
Rating:  Not Reviewed - Assessment Details
|
|
|
| last reviewed release
|
| Not Yet Reviewed
|
|
|
