OWASP Academy Portal Project

Main

Here the description has to come. Link to the actual portal: http://owaspa.org/

Project About

PROJECT INFO What does this OWASP project offer you?

RELEASE(S) INFO What releases are available for this project?

what is this project? Name: OWASP Academy Portal Project (home page) Purpose: Creation of a Portal to offer academic material in usable blocks, lab's, video's and forum. License: Choose wisely who is working on this project? Project Leader(s): Danny Harris @ Filipe Lacerda @ Project Contributor(s): Vasileos Vlachos @ Martin Knobloch @ Andreas Fuchsberger @ Jason Taylor @ Carlos Serrão @ Filipe Lacerda @ Ed Adams @ Ricardo Melo @ how can you learn more? Project Pamphlet: Not Yet Created Project Presentation: Mailing list: Mailing List Archives Project Roadmap: View Key Contacts Contact Danny Harris @ to contribute to this project Contact Danny Harris @ to review or sponsor this project

current release Not Yet Published last reviewed release Not Yet Reviewed other releases

Kick-Off notes January 2011

Each block should take up as time and present as much content as necessary and should list how long it typically

Each block should record the following metadata as applicable:

• Subject:
• Categories:
• Keywords:
• Description:
• Learning Outcomes:
• Requirements/Pre-req to understand:
• Theatrical/Practical
• Incl. Hands-on labs
• Contains a link to a lab if applicable
• Should be self-contained
• Should handle a single subject
• Target audience:
• Ability level: 100|200|300|400
• Lab links:
• Outside links:
• Text books

Rough guide to presentation time:

• Effort
• Corresponding OWASP effort

Some ideas for blocks:

• Overview and Introduction
• Justifying where
• Java Platform Security
• .NET Framework 3.5/4 security
• XSS
• Integer Overflows
• Mobile Code
• Security Development Lifecycle
• Web Application Risks and Threats (OWASP Top 10)
• Countermeasures
• Threat Modelling
• Secure Coding Practices
• Testing and Verification
• Static Code Analysis

Proposed block contents for the O(w)ASP Academy Portal

Notes 2011-03-21

• Status development
  • not much happened yet
  • there was a designer working on a template
  • Staging URL: http://staging.owaspa.org/ Note: if you want a test account please contact me at [email protected]
  • Staging URL for Moodle: http://staging.owaspa.org/moodle Note: if you want a test account please contact me at [email protected]

• Status training material
  • Carlos Serrao modules

TODO's

• material
  • upload material on the OWASP Academy wiki
• development
  • moodle/drupal

Notes 2011-04-04

We affirmed that the Creative Commons license will be used for all content on the acadamies portal.

Ricardo pointed out that we need a formal definition of the academy, primarily to enable the best used of time resources. As things are now, given a free hour to contribute to the project, most of that hour is spent trying to find the best direction to proceed. To that end, we discussed needing an environment for asynch conversation, and using google docs for shared document creation.

• Requirements: https://www.owasp.org/index.php/OWASP_Academy_Portal_Project/Requirements
• Requirements Discussion: https://www.owasp.org/index.php/Talk:OWASP_Academy_Portal_Project/Requirements

We had four participants in the conference call. Would another time work better for those who did not attend?

The project is at staging.owaspa.org(/moodle)