OWASP TASC Framework Project

• Main
• FAQs
• Acknowledgements
• Road Map and Getting Involved

TASC Framework Project Things Authentication and Secure Communications (for Resource Constrained Systems) Makers, professionally or as hobbyists, are creating "Internet of Things" (IoT) devices using low power systems such as Arduino. Security is often an afterthought or not considered at all. This project will make it easy to secure communications between devices. Using an AES library such as: http://forum.arduino.cc/index.php?topic=88890.0 This project will put a communications protocol and medium agnostic encryption and authentication layer onto resource constrained devices such as the Arduino. It will do this via symmetric key encryption of the message payloads to ensure the authentication, integrity, and confidentiality of messages. The use of this framework will require no specialist security knowledge. Description The TASC Framework (Things Authentication and Secure Communications) provides a lightweight abstracted security framework and supporting libraries to provide authentication and secure communications on resource constrained systems. For example developers creating "Internet of Things" (IoT) devices using low power or resource constrained systems such as Arduino who are not security experts. Licensing The libraries and source code / examples associated with this project are licenced under Apache 2.0 Licence in order to encourage the broadest possible use in embedded systems where dynamic linking may not be practical. The documentation and guidelines are licenced under Creative Commons Attribution ShareAlike 3.0 Licence.

What is OWASP Security Principles Project? Here you should add a short description of what your project actually does. What is the primary goal of your project, and why is it important? The end goal is to identify, cite, and document the fundamental principles of information security. Once this is well organised, I think it would be great to publish this through the OWASP Press. Of course, it will always remain freely available, and any money collected will go directly into the project to absorb costs with any remaining funds going to the OWASP Foundation. This document should serve as a guide to technical architects and designers outlining the fundamental principles of security. Presentation Not yet...but watch this space... Project Leader Andy Boura Related Projects This is where you can link to other OWASP Projects that are similar to yours. OWASP_CISO_Survey Openhub OWASP Project Openhub

Quick Download This is where you can link to your repository. The home of the OWASP Security Principles is on GitHub. You are encourged to fork, edit and push your changes back to the project through git or edit the project directly on github. However, if you like you may also download the master repository from the following links: .zip file. .tgz file. News and Events [23 July 2015] First version of the project wiki page up! Classifications How can I participate in your project? All you have to do is make the Project Leader's aware of your available time to contribute to the project. It is also important to let the Leader's know how you would like to contribute and pitch in to help the project meet it's goals and milestones. There are many different ways you can contribute to an OWASP Project, but communication with the leads is key. Please see the getting involved tab. If I am not a programmer can I participate in your project? Yes, you can certainly participate in the project if you are not a programmer or technical. The project needs different skills and expertise and different times during its development. Currently, we are looking for researchers, writers, graphic designers, and a project administrator. What platforms are supported by the framework? The framework itself is platform agnostic and can be readily ported to any platform. Initially the Arduino platform will be targeted as a reference implementation due to it's broad adoption, starting point for budding developers, and strong community. Contributors The OWASP Security Principles project is developed by a worldwide team of volunteers. The first contributors to the project were: Andy Boura Pete Ikusz Malcolm Boura YOUR NAME BELONGS HERE The key milestones are: Use cases Requirements API and data structures Documented lightweight security framework and API Reference implementation for Arduino platform Client libraries and ports to other platforms The key deliverables are Formal documentation Arduino reference implementation and documentation Additional platform ports for both clients and servers Getting Involved Involvement in the development and promotion of the OWASP TASC Framework Project is actively encouraged! You do not have to be a security expert in order to contribute. Some of the ways you can help: Core framework developer Framework functional testing Framework penetration testing Helping alpha and beta testing the framework on different hardware: Sharing example code Creating "How to" articles and videos Providing feedback Project administration support. Publicity and awareness / advocacy

Navigation menu

Personal tools

• Log in
• Request account

Namespaces

• Page
• Discussion

Variants

Views

• Read
• View source
• View history

More

Search

Navigation

• Home
• About OWASP
• Acknowledgements
• Advertising
• Books
• Brand Resources
• Careers
• Chapters
• Downloads
• Events
• Funding
• Governance
• Initiatives
• Mailing Lists
• Merchandise
• Presentations
• Press
• Projects
• Supporting Partners
• Video

Reference

• Activities
• Attacks
• Code Snippets
• Controls
• Glossary
• How To...
• Java Project
• .NET Project
• Principles
• Technologies
• Threat Agents
• Vulnerabilities

Tools

• What links here
• Related changes
• Special pages
• Printable version
• Permanent link
• Page information

• Content is available under Creative Commons Attribution-ShareAlike unless otherwise noted.

• Privacy policy
• About OWASP
• Disclaimers

• Open Web Application Security Project, OWASP, Global AppSec, AppSec Days, AppSec California, SnowFROC, LASCON, and the OWASP logo are trademarks of the OWASP Foundation.