This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Category:OWASP Project Assessment"

From OWASP
Jump to: navigation, search
 
(126 intermediate revisions by 6 users not shown)
Line 1: Line 1:
= '''Work in progress''' =
+
== Overview ==
  
[http://www.owasp.org/index.php/Category:OWASP_Project From OWASP Project]
+
OWASP has created a system to review projects and the project's releases to determine the quality level achieved.  The initial creation of an assessment criteria was created for the OWASP Summer of Code 2008. Though created to benchmark the quality of SoC 2008 projects, it was also applied to new projects created outside the SoC 2008 process. As work began to create the Season of Code 2009 (SoC 2009), the lessons learned by using the first Assessment Criteria were used as input to a new version.  The original Assessment Criteria - now called version 1 - was the basis for this new methodology.  As a result of reviewing the use of the Assessment Criteria v1 (AC v1), a new assessment criteria was developed that split the review process into projects and releases.  Starting with the SoC 2009, AC v2 will be the assessment criteria used to judge the quality of all SoC and new projects.
  
 +
== Versions of the Assessment Criteria ==
  
This '''assessment area''' focuses on assessing the quality of OWASP Tools and Documentation (Projects). The resulting ratings are used within the project to aid in recognizing excellent contributions and identifying topics in need of further work.
+
The current assessment criteria is the [[Assessment Criteria v2.0]]
  
 +
Previous versions:
 +
* [[Assessment Criteria v1.0]]
  
== FAQ ==
+
[[Category:Global_Projects_Committee]]
 
 
; 1. What is the purpose of the article ratings? : The rating system allows OWASP to monitor the quality of Projects in our subject areas, and to prioritize work on these articles.  It is also utilized to prepare for static releases of Wikipedia content. 
 
; 2. How do I add an article to the WikiProject? : Just add {{tl|WPMILHIST}} to the talk page; there's no need to do anything else.
 
; 3. Who can assess articles? : Any member of the Military history WikiProject is free to add—or change—the rating of an article.  Editors who are not participants in this project are also welcome to assess articles, but should defer to consensus within the project in case of procedural disputes.
 
; 4. How do I rate an article? : Check the [[#Quality scale|quality scale]] and select the level that best matches the state of the article; then, follow the [[#Assessment instructions|instructions]] below to add the rating to the project banner on the article's talk page.  Please note that some of the available levels have an associated formal review process; this is documented in the [[#Quality scale|assessment scale]].
 
; 5. Can I request that someone else rate an article? : Of course; to do so, please list it in the [[#Requests for assessment|section for assessment requests]] below.
 
; 6. Why didn't the reviewer leave any comments? : Unfortunately, due to the volume of articles that need to be assessed, we are unable to leave detailed comments in most cases.  If you have particular questions, you might ask the person who assessed the article; they will usually be happy to provide you with their reasoning.
 
; 7. Where can I get more comments about an article? : The [[WP:MHR|review department]] can conduct more thorough examination of articles; please submit it for [[Wikipedia:WikiProject Military history/Review#Peer review|peer review]] there.
 
; 8. What if I don't agree with a rating? : You can list it in the [[#Requests for assessment|section for assessment requests]] below, and someone will take a look at it.  Alternately, you can ask any member of the project to rate the article again.  Please note that some of the available levels have an associated formal review process; this is documented in the [[#Quality scale|assessment scale]].
 
; 9. Aren't the ratings subjective? : Yes, they are somewhat subjective, but it's the best system we've been able to devise.  If you have a better idea, please don't hesitate to let us know!
 
; 10. What about lists? : Lists are assessed using the same scale as other articles; however, they progress towards featured list rather than featured article status.
 
; 11. What if I have a question not listed here? : If your question concerns the article assessment process specifically, please refer to the discussion page for this department; for any other issues, you can go to the [[WT:MILHIST|main project discussion page]], or contact the [[Wikipedia:WikiProject Military history#Coordinators|project coordinators]] directly.
 
 
 
 
 
=== Quality Scale for Tools Projects===
 
{| class="wikitable" style="align: left; margin-right: 1em; "
 
|-
 
! Class
 
! Criteria
 
! Formal process
 
! Example
 
|-
 
 
 
|Quality Release 
 
|'''To be reasonably useful:'''
 
* Be reasonably easy to use
 
* Have an easy to use installer
 
* Have its code in Googlecode, or Sourceforge
 
* Include user documentation
 
* Include documentation on how to build it from code
 
* Add a common About Box or help menu (regardless of language which lists name of tool, author, e-mail address of author, current version number and/or release date)
 
 
 
'''Recommendations:'''
 
* Include online documention built into tool (based on required user documentation)
 
* Java projects (if appropriate) should be run through Fortify Software engine.
 
[WebGoat would not be appropriate for example since it would light up like a Christmas tree :-)]  
 
 
 
'''Additional suggestions / contributions'''
 
* Include UAT pass on functionality requirements of the tool
 
* Ask the developers to document any limitations
 
* Question Human Computer Interaction (HCI) and the user interface
 
* Overview of scanning the codebase findings (say findbugs) 
 
|Experience Experience Experience Experience Experience Experience
 
|Experience Experience Experience Experience Experience Experience
 
|-
 
| Beta Quality
 
|
 
|
 
|
 
|-
 
| Alpha Quality Release
 
|
 
* Agree to OWASP's open source license
 
* Create a project page at OWASP that describes:
 
- the tool, the project leader,contact info, and includes a download link for the executable version.
 
* Have its code in Googlecode, or Sourceforge
 
Mailing list for project created
 
|
 
|
 
|-
 
|}
 
 
 
== Requests for assessment ==
 
 
 
If you have made significant changes to an article and would like an outside opinion on a new rating for it, please feel free to list it below. 
 
 
 
# Here
 
# Or here
 
# ''Add new requests above this line'' <!-- PLEASE DO NOT REMOVE OR CHANGE THIS LINE -->
 

Latest revision as of 21:11, 20 June 2009

Overview

OWASP has created a system to review projects and the project's releases to determine the quality level achieved. The initial creation of an assessment criteria was created for the OWASP Summer of Code 2008. Though created to benchmark the quality of SoC 2008 projects, it was also applied to new projects created outside the SoC 2008 process. As work began to create the Season of Code 2009 (SoC 2009), the lessons learned by using the first Assessment Criteria were used as input to a new version. The original Assessment Criteria - now called version 1 - was the basis for this new methodology. As a result of reviewing the use of the Assessment Criteria v1 (AC v1), a new assessment criteria was developed that split the review process into projects and releases. Starting with the SoC 2009, AC v2 will be the assessment criteria used to judge the quality of all SoC and new projects.

Versions of the Assessment Criteria

The current assessment criteria is the Assessment Criteria v2.0

Previous versions: