Guide Frontispiece

A Guide to Building Secure Web Applications and Web Services

2.1 (DRAFT 3) February 2006 OWASP Foundation

Frontispiece

Dedication

To my fellow procrastinators and TiVo addicts, this book proves that given enough “tomorrows,” anything is possible. Andrew van der Stock

Copyright and license

© 2001 – 2006 OWASP Foundation. The Guide is licensed under the Free Documentation License, a copy of which is found in the Appendix. PERMISSION IS GRANTED TO COPY, DISTRIBUTE, AND/OR MODIFY THIS DOCUMENT PROVIDED THIS COPYRIGHT NOTICE AND ATTRIBUTION TO OWASP IS RETAINED.

Editors

The Guide has had several editors over various editions, all of whom have contributed immensely as authors, project managers, and editors over the lengthy period of the Guide’s gestation. Guide 2.x series editors:

Andrew van der Stock Adrian Wiesmann

Authors and Reviewers

The Guide would not be where it is today without the generous gift of volunteer time and effort from many individuals. The following people helped develop Guide 2.x:

Abraham Kang	Adrian Wiesmann	Amit Klein	Andrew van der Stock	Brian Greidanus
Christopher Todd	Darrel Grundy	Daniel Cornell	David Endler	Denis Pilipchuk
Dennis Groves	Derek Browne	Eoin Keary	Erik Lee	Ernesto Arroyo
Frank Lemmon	Gene McKenna	Hal Lockhart	Izhar By-Gad	Jeremy Poteet
José Pedro Arroyo	K.K. Mookhey	Kevin McLaughlin	Martin Eizner	Michael Howard
Michael Scovetta	Mikael Simonsson	Neal Krawetz	Nigel Tranter	Raoul Endres
Ray Stirbei	Richard Parke	Robert Hansen	Roy McNamara	Steve Taylor
Sverre Huseby	Tim Smith	William Hau

Revision History

Date	Version	Pages	Notes
July 26, 2005	2.0 Blackhat Edition	280 pages	Andrew van der Stock, Guide Lead
July 27, 2005	2.0.1 Blackhat Edition++	293 pages	Cryptography chapter review from Michael Howard incorporated
September 12, 2005	2.1 DRAFT 1	X pages	Changes from many sources New SQA chapter from Frank Lemmon
January 2006	2.1 DRAFT 2	X pages	Changes from Bill Pollock New chapters from Erick Lee New revisions from Dan Cornell
February 2006	2.1 DRAFT 3	X pages	Ajax chapter Many chapters back from reviewers

Table of Contents

Guide Table of Contents