This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Category:OWASP Code Review Project"

From OWASP
Jump to: navigation, search
(Owasp Orizon Code review engine)
Line 1: Line 1:
 
{{OWASP Book|1415989}}
 
{{OWASP Book|1415989}}
 +
 +
'''Download here:'''<br>
 +
http://www.lulu.com/items/volume_63/1415000/1415989/4/print/OWASP_Code_Review_2007__RC2_-_Version_for_print.pdf <br>
 +
<br>
 
[[:Category:OWASP Project|Click here to return to OWASP Projects page.]]<br>
 
[[:Category:OWASP Project|Click here to return to OWASP Projects page.]]<br>
 
[[:Project Information:template Code Review Project|Click here to see (& edit, if wanted) the template.]]  
 
[[:Project Information:template Code Review Project|Click here to see (& edit, if wanted) the template.]]  
 
{{:Project Information:template Code Review Project}}
 
{{:Project Information:template Code Review Project}}
 +
  
  

Revision as of 14:34, 16 September 2008

OWASP Books logo.png This project has produced a book that can be downloaded or purchased.
Feel free to browse the full catalog of available OWASP books.

Download here:
http://www.lulu.com/items/volume_63/1415000/1415989/4/print/OWASP_Code_Review_2007__RC2_-_Version_for_print.pdf

Click here to return to OWASP Projects page.
Click here to see (& edit, if wanted) the template.


PROJECT IDENTIFICATION
Project Name OWASP Code Review Guide V1.1
Short Project Description The code review guide is currently at release version 1.1 and the second best selling OWASP book in 2008. Many positive comments have been feedback regarding this initial version and believe it’s a key enabler for the OWASP fight against software insecurity. It has even inspired individuals to build tools based on its information. The combination of a book on secure code review and tools to support such an activity is very powerful as it gives the developer community a place to start regarding secure application development.

Going forward I hope to further integrate with the ASVS and other guides such as the testing and ASDR guides shall be perfromed for version 2.0

Project key Information Project Leader
Eoin Keary
Project Contributors
See here
Mailing List
Subscribe here
Use here
License
Creative Commons Attribution Share Alike 3.0
Project Type
Documentation
Sponsor
OWASP SoC 08
Release Status Main Links Related Projects

Release Quality
Please see here for complete information.

OWASP Code Review Guide V1.1 - Word & PDF Files - NEW RELEASE!!!
OWASP Code Review's PowerPoint Presentation
Code Review Guide Table of Contents
Code Review Guide/Old Version (RC2) Book
(If appropriate, links to be added)

OWASP Testing Guide Project V 3.0
OWASP Development Guide Project
OWASP ASDR Project
OWASP Code Crawler



Contents

OWASP Code Review Guide Table of Contents

Code review guide to be part of Summer of Code 2008

The OWASP code review guide is to given the go-ahead for the summer of code 2008. This shall enable the authors to further expand and refine the guide.
Volunteers welcome for SoC 2008

Code Review Guide (RC2) Completed

The code review guide has been completed and is available here: http://www.lulu.com/content/1415989 Either as a free PDF or a bound book.

Code review tool

The following link is for the new version of Code Crawler,code review tool which examines code for keywords discussed in the section "First sweep of the code base"
It has a new look and feel and also uses MS SQL Server express.

you can find it here:

http://www.cyphersec.com/software_archive/CodeCrawler.rar It's a lightweight tool and undergoing constant development.

Source code can be found here: http://www.cyphersec.com/software_archive/CodeCrawler_source.rar

Owasp Orizon Code review engine

The Owasp Orizon Project is born in 2006 to provide a set of APIs to provide an opensource engine to provide static analysis services to developers that wants to build a code review tool.

The Owasp Orizon will evolve accordingly in order to implement security checks described in the Code Review Guide. With the framework a UI is also provided in order to give people a standalone tool to realize code review for the security flaws listed in the "The Owasp Code Review Top 10 flaw categories"


The Owasp Orizon main page is available here: Category:OWASP_Orizon_Project


Source code is hosted at Sourceforge.net site: http://orizon.sourceforge.net

Spring Of Code 2007

The Code review guide is proudly sponsored by the OWASP Spring of Code (SpOC) 2007. For more information please see http://www.owasp.org/index.php/OWASP_Spring_Of_Code_2007

Project Contributors

The OWASP Code Review project was conceived by Eoin Keary the OWASP Ireland Founder and Chapter Lead. We are actively seeking techies to add new sections as new web technologies emerge. If you are interested in volunteering for the project, or have a comment, question, or suggestion, please drop me a line mailto:[email protected]

Volunteers Needed

Yes please, drop me a line. Need help on this one, don't be shy, all help appreciated

Subscribe to the list

Go here to subscribe to the maillist.

http://lists.owasp.org/mailman/listinfo/owasp-codereview


Roadmap

View the OWASP Code Review Project Roadmap

Pages in category "OWASP Code Review Project"

The following 69 pages are in this category, out of 69 total.