Projects/OWASP Application Security Requirements Project

PROJECT INFO What does this OWASP project offer you?

RELEASE(S) INFO What releases are available for this project?

what is this project? Name: OWASP Application Security Requirements Project (home page) Purpose: The intent of this project is to assemble a useful base of generic/common web application security requirements that could be used in most projects. The product of this project is intended to help all involved in web application security, whether it is project management, risk assessment, software development, testing, etc. The reason d'etre of this project is that, whilst security requirements are sometimes well captured and clearly defined, there are other times when they are not, for any number of reasons. License: Creative Commons Attribution ShareAlike 3.0 license who is working on this project? Project Leader(s): Luis Martinez Bacha @ Project Contributor(s): Zaki Akhmad @ how can you learn more? Project Pamphlet: Not Yet Created Project Presentation: Mailing list: Mailing List Archives Project Roadmap: [# Identify taxonomy/categorization and prioritize Identify industry standards for requirements definition Define detailed work plan Define requirements according to plan Publish first draft Get feedback and adjust plan View] Main links: High Level Requirements Categories Tips for using the project's requirements, use-cases, and user stories Other really good requirements that aren't generic enough to be part of the project but that might be what you're looking for in YOUR environment Key Contacts Contact Luis Martinez Bacha @ to contribute to this project Contact Luis Martinez Bacha @ to review or sponsor this project

current release Not Yet Published last reviewed release Not Yet Reviewed other releases