This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Category:OWASP Education Project New"
(→Education Material Categorized) |
(moved the categorization up and added the Top Ten category) |
||
Line 12: | Line 12: | ||
The first list of modules can be found [[OWASP Education Project Modules|here]]. | The first list of modules can be found [[OWASP Education Project Modules|here]]. | ||
− | == | + | == Education Material Categorized == |
− | + | The education materialis categorized in two manors, by the CLASP roles and a more global way of general concern. | |
− | + | ==== OWASP Top Ten ==== | |
− | + | An [[:Category:OWASP_Project |'''OWASP Project''']] is a collection of related tasks that have a defined roadmap and team members. OWASP project leaders are responsible for defining the vision, roadmap, and tasks for the project. The project leader also promotes the project and builds the team. Tools and documents are organized into the following categories: | |
− | + | PROTECT - These are tools and documents that can be used to guard against security-related design and implementation flaws. | |
− | + | DETECT - These are tools and documents that can be used to find security-related design and implementation flaws. | |
− | + | LIFE CYCLE - These are tools and documents that can be used to add security-related activities into the Software Development Life Cycle (SDLC). | |
− | |||
− | |||
− | + | <hr><br>''' Protect:''' | |
− | |||
− | + | {| style="width:100%" border="0" align="center" | |
+ | ! colspan="4" align="center" style="background:#FFFFFF; color:white"|<font color="white"> | ||
+ | '''[[:Category:OWASP_AntiSamy_Project|OWASP AntiSamy Java Project]] ''' | ||
+ | |- | ||
+ | | style="width:25%; background:#7B8ABD" align="left"| '''Beginner''' | ||
+ | | colspan="3" style="width:75%; background:#cccccc" align="left"| | ||
+ | * training material | ||
+ | |- | ||
+ | | style="width:25%; background:#7B8ABD" align="left"| '''Experienced''' | ||
+ | | colspan="3" style="width:75%; background:#cccccc" align="left"| | ||
+ | * training material | ||
+ | |- | ||
+ | | style="width:25%; background:#7B8ABD" align="left"| '''Expert''' | ||
+ | | colspan="3" style="width:75%; background:#cccccc" align="left"| | ||
+ | * training material | ||
+ | |- | ||
+ | | style="width:25%; background:#7B8ABD" align="left"| '''Video's ''' | ||
+ | | colspan="3" style="width:75%; background:#cccccc" align="left"| | ||
+ | * training video | ||
+ | |} | ||
+ | {| style="width:100%" border="0" align="center" | ||
+ | ! colspan="4" align="center" style="background:#FFFFFF; color:white"|<font color="white"> | ||
+ | '''[[:Category:OWASP_Enterprise_Security_API|OWASP Enterprise Security API (ESAPI) Project]] ''' | ||
+ | |- | ||
+ | | style="width:25%; background:#7B8ABD" align="left"| '''Beginner''' | ||
+ | | colspan="3" style="width:75%; background:#cccccc" align="left"| | ||
+ | * training material | ||
+ | |- | ||
+ | | style="width:25%; background:#7B8ABD" align="left"| '''Experienced''' | ||
+ | | colspan="3" style="width:75%; background:#cccccc" align="left"| | ||
+ | * training material | ||
+ | |- | ||
+ | | style="width:25%; background:#7B8ABD" align="left"| '''Expert''' | ||
+ | | colspan="3" style="width:75%; background:#cccccc" align="left"| | ||
+ | * training material | ||
+ | |} | ||
− | + | <br>''' Detect:''' | |
− | + | {| style="width:100%" border="0" align="center" | |
− | + | ! colspan="4" align="center" style="background:#FFFFFF color:white"|<font color="white"> | |
+ | '''[[:Category:OWASP_Live_CD_Project|OWASP Live CD Project]]''' | ||
+ | |- | ||
+ | | style="width:25%; background:#7B8ABD" align="left"| '''Beginner''' | ||
+ | | colspan="3" style="width:75%; background:#cccccc" align="left"| | ||
+ | * training material | ||
+ | |- | ||
+ | | style="width:25%; background:#7B8ABD" align="left"| '''Experienced''' | ||
+ | | colspan="3" style="width:75%; background:#cccccc" align="left"| | ||
+ | * training material | ||
+ | |- | ||
+ | | style="width:25%; background:#7B8ABD" align="left"| '''Expert''' | ||
+ | | colspan="3" style="width:75%; background:#cccccc" align="left"| | ||
+ | * training material | ||
+ | |} | ||
+ | {| style="width:100%" border="0" align="center" | ||
+ | ! colspan="4" align="center" style="background:#FFFFFF color:white"|<font color="white"> | ||
+ | '''[[:Category:OWASP_WebScarab_Project|OWASP WebScarab Project]]''' | ||
+ | |- | ||
+ | | style="width:25%; background:#7B8ABD" align="left"| '''Beginner''' | ||
+ | | colspan="3" style="width:75%; background:#cccccc" align="left"| | ||
+ | * training material | ||
+ | |- | ||
+ | | style="width:25%; background:#7B8ABD" align="left"| '''Experienced''' | ||
+ | | colspan="3" style="width:75%; background:#cccccc" align="left"| | ||
+ | * training material | ||
+ | |- | ||
+ | | style="width:25%; background:#7B8ABD" align="left"| '''Expert''' | ||
+ | | colspan="3" style="width:75%; background:#cccccc" align="left"| | ||
+ | * training material | ||
+ | |} | ||
− | + | <br>''' Life Cycle:''' | |
− | + | {| style="width:100%" border="0" align="center" | |
− | + | ! colspan="4" align="center" style="background:#FFFFFF color:white"|<font color="white"> | |
− | + | '''[[:Category:OWASP_WebGoat_Project|OWASP WebGoat Project]]''' | |
− | + | |- | |
− | + | | style="width:25%; background:#7B8ABD" align="left"| '''Beginner''' | |
− | + | | colspan="3" style="width:75%; background:#cccccc" align="left"| | |
− | + | * training material | |
− | + | |} | |
− | == | + | <br> |
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | + | ==== OWASP Tooling ==== | |
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | ==== OWASP | ||
An [[:Category:OWASP_Project |'''OWASP Project''']] is a collection of related tasks that have a defined roadmap and team members. OWASP project leaders are responsible for defining the vision, roadmap, and tasks for the project. The project leader also promotes the project and builds the team. Tools and documents are organized into the following categories: | An [[:Category:OWASP_Project |'''OWASP Project''']] is a collection of related tasks that have a defined roadmap and team members. OWASP project leaders are responsible for defining the vision, roadmap, and tasks for the project. The project leader also promotes the project and builds the team. Tools and documents are organized into the following categories: | ||
PROTECT - These are tools and documents that can be used to guard against security-related design and implementation flaws. | PROTECT - These are tools and documents that can be used to guard against security-related design and implementation flaws. | ||
Line 168: | Line 206: | ||
|} | |} | ||
<br> | <br> | ||
− | ==== OWASP Documentation | + | ==== OWASP Documentation ==== |
An [[:Category:OWASP_Project |'''OWASP Project''']] is a collection of related tasks that have a defined roadmap and team members. OWASP project leaders are responsible for defining the vision, roadmap, and tasks for the project. The project leader also promotes the project and builds the team. Tools and documents are organized into the following categories: | An [[:Category:OWASP_Project |'''OWASP Project''']] is a collection of related tasks that have a defined roadmap and team members. OWASP project leaders are responsible for defining the vision, roadmap, and tasks for the project. The project leader also promotes the project and builds the team. Tools and documents are organized into the following categories: | ||
PROTECT - These are tools and documents that can be used to guard against security-related design and implementation flaws. | PROTECT - These are tools and documents that can be used to guard against security-related design and implementation flaws. | ||
Line 536: | Line 574: | ||
* training material | * training material | ||
|} | |} | ||
+ | |||
+ | |||
+ | == Goals & Roadmap == | ||
+ | |||
+ | Currently the project goals are to create Educational Tracks: | ||
+ | * A [[Education Track: Web Application Security Primer|Web Application Security Primer]] Track for beginners (4 hours) | ||
+ | * [[Education Track: What Developers Should Know on Web Application Security|What Developers Should Know on Web Application Security]] Track for developers (4 hours) | ||
+ | * Create a [[OWASP Education Presentation|consolidation page of OWASP presentations]] performed in the past with the possibility to add comments | ||
+ | * [[Education Track: OWASP Boot Camp |OWASP Boot Camp]] OWASP Training events, get ready for secure application development | ||
+ | * [[Education Track: OWASP Capture the flag application | Capture the flag application ]] | ||
+ | * ... | ||
+ | Further breakdown of tasks and future developments are listed in the [[OWASP Education Project Roadmap|road map]].<br> | ||
+ | |||
+ | == Spoc007 Progress == | ||
+ | The Education project was selected for [http://www.owasp.org/index.php/SpoC_007_-_OWASP_Education_Project Spoc007 participation] (see page for progress). | ||
+ | |||
+ | The SpoC007 goal is to finish Sub Goals 1, 2, 3 and perform Sub Goal 4 during the coming months ([[OWASP Education Project Roadmap|road map]]). | ||
+ | |||
+ | == Project Guiding Principles == | ||
+ | |||
+ | This project aims to provide in building blocks of web application security knowledge that can easily be integrated in awareness sessions or presentations on this topic. The building blocks provided by this project can then be bundled together in eduction tracks.<br> | ||
+ | An important guideline is therefore that the material produced is modular.<br> | ||
+ | |||
+ | == Resources and links == | ||
+ | |||
+ | This project is not standalone. There is an awfull lot of information that can be found throughout this site and from other resources on the Internet. <br> | ||
+ | This project will draw pieces of information from: | ||
+ | * The [http://www.owasp.org/index.php/Category:OWASP_Video Video's] | ||
+ | * The presentations, currently being inventorized in the [[OWASP Education Presentation Rating|consolidation page of OWASP presentations]]¨ | ||
+ | * [http://www.owasp.org/index.php/Category:OWASP_WebGoat_Project WebGoat] | ||
+ | * ... | ||
+ | One of the modules to create will be a Resources module, not limited to OWASP. | ||
+ | |||
+ | == Feedback and Participation: == | ||
+ | |||
+ | We hope you find the OWASP Education Project useful. Please contribute to the Project by volunteering for one of the Tasks, sending your comments, questions, and suggestions to the [http://lists.owasp.org/mailman/listinfo/owasp-education mailing list]. | ||
+ | |||
+ | If you used material from our project, please use the available [[:Image:Education_Track_Evaluation_Template.doc|evaluation forms]] and let uw know how we can improve our modules and tracks. | ||
+ | |||
+ | == Project Contributors == | ||
+ | |||
+ | If you contribute to this Project, please add your name here.<br> | ||
+ | Project Lead: | ||
+ | * [[User:Sdeleersnyder|Sebastien Deleersnyder]] | ||
+ | |||
+ | Contributors: | ||
+ | |||
+ | * [[User:medelibero|Mike de Libero]] | ||
+ | * [[User:Bunyamin|Bunyamin Demir]] | ||
+ | * [[User:xxradar|Philippe Bogaerts]] | ||
+ | * [[User:Brennan|Tom Brennan]] | ||
+ | * [[User:knoblochmartin| Martin Knobloch]] | ||
+ | * [[User:Mccorga| Grady McCorkle]] | ||
+ | * you? ... | ||
__NOTOC__ | __NOTOC__ |
Revision as of 21:44, 24 June 2009
PROJECT IDENTIFICATION | |||||||
---|---|---|---|---|---|---|---|
Project Name | OWASP Education Project Project | ||||||
Short Project Description | The project will continuously deliver education material about OWASP tooling and documentation. This aims to create an easy entrance towards understanding application security and usage of the OWASP tooling. By creating education documentation papers, screen scrape video courses and setting up an OWASP Boot camp, a controlled education process of a standardized quality can be created continuously. With the setup of a OWASP Boot camp, the OWASP word can be spread in a controlled manner and deliver high quality training., both inside and outside of the OWASP community. The OWASP Education Project will setup and standardize OWASP trainings manuals and materials to ensure a certain level of quality of the trainings. Trainings about the OWASP tooling and projects will have to be reviewed by the Projects. | ||||||
Key Project Information | Project Leader Martin Knobloch |
Project Contributors See here |
Mailing List Subscribe here Use here |
License Creative Commons Attribution Share Alike 3.0 |
Project Type Documentation |
Sponsors OWASP SoC 08 |
Welcome to the OWASP Education Project
Web Application Security Education and Awareness is needed throughout the entire organization, each area and level of organizations have specific needs and requirements regarding education. A manager needs other information than a security professional or developer. Novices to the profession require other training than people with several years of experience.
This Education project aims to provide in building blocks of web application security information. These modules can be combined together in education tracks targeting different audiences.
The first list of modules can be found here.
Education Material Categorized
The education materialis categorized in two manors, by the CLASP roles and a more global way of general concern.
OWASP Top Ten
An OWASP Project is a collection of related tasks that have a defined roadmap and team members. OWASP project leaders are responsible for defining the vision, roadmap, and tasks for the project. The project leader also promotes the project and builds the team. Tools and documents are organized into the following categories: PROTECT - These are tools and documents that can be used to guard against security-related design and implementation flaws. DETECT - These are tools and documents that can be used to find security-related design and implementation flaws. LIFE CYCLE - These are tools and documents that can be used to add security-related activities into the Software Development Life Cycle (SDLC).
Protect:
Beginner |
| ||
Experienced |
| ||
Expert |
| ||
Video's |
|
Beginner |
| ||
Experienced |
| ||
Expert |
|
Detect:
Beginner |
| ||
Experienced |
| ||
Expert |
|
Beginner |
| ||
Experienced |
| ||
Expert |
|
Life Cycle:
Beginner |
|
OWASP Tooling
An OWASP Project is a collection of related tasks that have a defined roadmap and team members. OWASP project leaders are responsible for defining the vision, roadmap, and tasks for the project. The project leader also promotes the project and builds the team. Tools and documents are organized into the following categories: PROTECT - These are tools and documents that can be used to guard against security-related design and implementation flaws. DETECT - These are tools and documents that can be used to find security-related design and implementation flaws. LIFE CYCLE - These are tools and documents that can be used to add security-related activities into the Software Development Life Cycle (SDLC).
Protect:
Beginner |
| ||
Experienced |
| ||
Expert |
| ||
Video's |
|
Beginner |
| ||
Experienced |
| ||
Expert |
|
Detect:
Beginner |
| ||
Experienced |
| ||
Expert |
|
Beginner |
| ||
Experienced |
| ||
Expert |
|
Life Cycle:
Beginner |
| ||
Experienced |
| ||
Expert |
|
OWASP Documentation
An OWASP Project is a collection of related tasks that have a defined roadmap and team members. OWASP project leaders are responsible for defining the vision, roadmap, and tasks for the project. The project leader also promotes the project and builds the team. Tools and documents are organized into the following categories: PROTECT - These are tools and documents that can be used to guard against security-related design and implementation flaws. DETECT - These are tools and documents that can be used to find security-related design and implementation flaws. LIFE CYCLE - These are tools and documents that can be used to add security-related activities into the Software Development Life Cycle (SDLC).
Protect:
Beginner |
| ||
Experienced |
| ||
Expert |
|
Beginner |
| ||
Experienced |
| ||
Expert |
|
Detect:
Beginner |
| ||
Experienced |
| ||
Expert |
|
Beginner |
| ||
Experienced |
| ||
Expert |
|
Beginner |
| ||
Experienced |
| ||
Expert |
|
Life Cycle:
Beginner |
| ||
Experienced |
| ||
Expert |
|
Beginner |
| ||
Experienced |
| ||
Expert |
|
Beginner |
| ||
Experienced |
| ||
Expert |
|
Profession / Interest
Below you find the education material categorized by profession and interest.
Management | |||
---|---|---|---|
Beginner |
| ||
Experienced |
| ||
Expert |
|
Student | |||
---|---|---|---|
Beginner |
| ||
Experienced |
| ||
Expert |
|
Technical | |||
---|---|---|---|
Beginner |
| ||
Experienced |
| ||
Expert |
|
CLASP roles
CLASP (Comprehensive, Lightweight Application Security Process) provides a well-organized and structured approach for moving security concerns into the early stages of the software development lifecycle, whenever possible.
Architect | |||
---|---|---|---|
Beginner |
| ||
Experienced |
| ||
Expert |
|
Designer | |||
---|---|---|---|
Beginner |
| ||
Experienced |
| ||
Expert |
|
Implementer | |||
---|---|---|---|
Beginner |
| ||
Experienced |
| ||
Expert |
|
Project Manager | |||
---|---|---|---|
Beginner |
| ||
Experienced |
| ||
Expert |
|
Requirements Specifier | |||
---|---|---|---|
Beginner |
| ||
Experienced |
| ||
Expert |
|
Security Auditor | |||
---|---|---|---|
Beginner |
| ||
Experienced |
| ||
Expert |
|
Test Analyst | |||
---|---|---|---|
Beginner |
| ||
Experienced |
| ||
Expert |
|
SAMM Disciplines & Functions
Alignment & Governance | |||
---|---|---|---|
Education & Guidance |
| ||
Standards & Compliance |
| ||
Strategic Planning |
|
Requirements & Design | |||
---|---|---|---|
Threat Modeling |
| ||
Security Requirements |
| ||
Defensive Design |
|
Verification & Assessment | |||
---|---|---|---|
Architectuur Review |
| ||
Code Review |
| ||
Security Testing |
|
Deployment & Operations | |||
---|---|---|---|
Vulnerability Mangement |
| ||
Infrastrucxture Hardening |
| ||
Operational Enablement
|
|
Goals & Roadmap
Currently the project goals are to create Educational Tracks:
- A Web Application Security Primer Track for beginners (4 hours)
- What Developers Should Know on Web Application Security Track for developers (4 hours)
- Create a consolidation page of OWASP presentations performed in the past with the possibility to add comments
- OWASP Boot Camp OWASP Training events, get ready for secure application development
- Capture the flag application
- ...
Further breakdown of tasks and future developments are listed in the road map.
Spoc007 Progress
The Education project was selected for Spoc007 participation (see page for progress).
The SpoC007 goal is to finish Sub Goals 1, 2, 3 and perform Sub Goal 4 during the coming months (road map).
Project Guiding Principles
This project aims to provide in building blocks of web application security knowledge that can easily be integrated in awareness sessions or presentations on this topic. The building blocks provided by this project can then be bundled together in eduction tracks.
An important guideline is therefore that the material produced is modular.
Resources and links
This project is not standalone. There is an awfull lot of information that can be found throughout this site and from other resources on the Internet.
This project will draw pieces of information from:
- The Video's
- The presentations, currently being inventorized in the consolidation page of OWASP presentations¨
- WebGoat
- ...
One of the modules to create will be a Resources module, not limited to OWASP.
Feedback and Participation:
We hope you find the OWASP Education Project useful. Please contribute to the Project by volunteering for one of the Tasks, sending your comments, questions, and suggestions to the mailing list.
If you used material from our project, please use the available evaluation forms and let uw know how we can improve our modules and tracks.
Project Contributors
If you contribute to this Project, please add your name here.
Project Lead:
Contributors:
How to add a new OWASP Education Project New article
You can follow the instructions to make a new OWASP Education Project New article. Please use the appropriate structure and follow the Tutorial. Be sure to paste the following at the end of your article to make it show up in the OWASP Education Project New category:
[[Category:OWASP Education Project New]]
Pages in category "OWASP Education Project New"
The following 2 pages are in this category, out of 2 total.