This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Category:OWASP Project Assessment"
m (fixing the Fortify link - it went to an outdated, unmaintained version of the site) |
(→Assessment Scale for OWASP TOOLS Projects) |
||
Line 5: | Line 5: | ||
== Assessment Scale for OWASP TOOLS Projects== | == Assessment Scale for OWASP TOOLS Projects== | ||
+ | === Release Quality Tool Criteria === | ||
{| style="width:100%" border="0" align="center" | {| style="width:100%" border="0" align="center" | ||
! colspan="4" align="center" style="background:#white; color:black"| | ! colspan="4" align="center" style="background:#white; color:black"| | ||
Line 33: | Line 34: | ||
** If the project's lead can't find the Project Reviewers, the OWASP Board will identify them. The same will happen whenever the reviewers suggested do not have the required approval. | ** If the project's lead can't find the Project Reviewers, the OWASP Board will identify them. The same will happen whenever the reviewers suggested do not have the required approval. | ||
| style="width:10%; background:#e6e6e6" align="center"|[[OWASP WebGoat Project|OWASP WebGoat Project]] | | style="width:10%; background:#e6e6e6" align="center"|[[OWASP WebGoat Project|OWASP WebGoat Project]] | ||
+ | |- | ||
+ | |} | ||
+ | |||
+ | === Beta Quality Tool Criteria === | ||
+ | {| style="width:100%" border="0" align="center" | ||
+ | ! colspan="4" align="center" style="background:#white; color:black"| | ||
+ | |- | ||
+ | | style="width:10%; background:#C2C2C2" align="center"| '''Class''' | ||
+ | | style="width:60%; background:#C2C2C2" align="center"| '''Criteria''' | ||
+ | | style="width:20%; background:#C2C2C2" align="center"| '''Review Process''' | ||
+ | | style="width:10%; background:#C2C2C2" align="center"| '''Example''' | ||
|- | |- | ||
| style="width:10%; background:#ffcc66" align="center"|'''[[:Category:OWASP Project#Beta_Status_Projects|Beta Quality OWASP Tools]]''' | | style="width:10%; background:#ffcc66" align="center"|'''[[:Category:OWASP Project#Beta_Status_Projects|Beta Quality OWASP Tools]]''' | ||
Line 49: | Line 61: | ||
** If the project's lead can't find the Project Reviewers, the OWASP Board will identify them. The same will happen whenever the reviewers suggested do not have the required approval. | ** If the project's lead can't find the Project Reviewers, the OWASP Board will identify them. The same will happen whenever the reviewers suggested do not have the required approval. | ||
| style="width:10%; background:#e6e6e6" align="center"|[[:Category:OWASP AntiSamy Project|OWASP AntiSamy Project]] | | style="width:10%; background:#e6e6e6" align="center"|[[:Category:OWASP AntiSamy Project|OWASP AntiSamy Project]] | ||
+ | |} | ||
+ | |||
+ | === Alpha Quality Tool Criteria === | ||
+ | {| style="width:100%" border="0" align="center" | ||
+ | ! colspan="4" align="center" style="background:#white; color:black"| | ||
+ | |- | ||
+ | | style="width:10%; background:#C2C2C2" align="center"| '''Class''' | ||
+ | | style="width:60%; background:#C2C2C2" align="center"| '''Criteria''' | ||
+ | | style="width:20%; background:#C2C2C2" align="center"| '''Review Process''' | ||
+ | | style="width:10%; background:#C2C2C2" align="center"| '''Example''' | ||
|- | |- | ||
| style="width:10%; background:#ffff66" align="center"|'''[[:Category:OWASP Project#Alpha_Status_Projects|Alpha Quality OWASP Tools]]''' | | style="width:10%; background:#ffff66" align="center"|'''[[:Category:OWASP Project#Alpha_Status_Projects|Alpha Quality OWASP Tools]]''' | ||
Line 66: | Line 88: | ||
** If the project's lead can't find a Project Reviewer, the OWASP Board will identify one. The same will happen whenever the reviewer suggested does not have the required approval. | ** If the project's lead can't find a Project Reviewer, the OWASP Board will identify one. The same will happen whenever the reviewer suggested does not have the required approval. | ||
| style="width:10%; background:#e6e6e6" align="center"|[[:Category:OWASP CSRFTester Project|OWASP CSRFTester Project]] | | style="width:10%; background:#e6e6e6" align="center"|[[:Category:OWASP CSRFTester Project|OWASP CSRFTester Project]] | ||
+ | |} | ||
+ | |||
+ | === Inactive Tool Criteria === | ||
+ | {| style="width:100%" border="0" align="center" | ||
+ | ! colspan="4" align="center" style="background:#white; color:black"| | ||
+ | |- | ||
+ | | style="width:10%; background:#C2C2C2" align="center"| '''Class''' | ||
+ | | style="width:60%; background:#C2C2C2" align="center"| '''Criteria''' | ||
+ | | style="width:20%; background:#C2C2C2" align="center"| '''Review Process''' | ||
+ | | style="width:10%; background:#C2C2C2" align="center"| '''Example''' | ||
|- | |- | ||
| style="width:10%; background:#ffffcc" align="center"|'''[[:Category:OWASP Project#Inactive_Projects|Inactive Projects]]''' | | style="width:10%; background:#ffffcc" align="center"|'''[[:Category:OWASP Project#Inactive_Projects|Inactive Projects]]''' |
Revision as of 16:32, 18 December 2008
The following defines the quality levels for OWASP TOOLS and DOCUMENTATION (Projects). Rating projects against these criteria aid in recognizing excellent contributions and identifying projects in need of further work. All existing OWASP projects and their current ratings are here.
The Tool ratings are reasonably complete. The documentation rates still need to be developed.
Assessment Scale for OWASP TOOLS Projects
Release Quality Tool Criteria
Class | Criteria | Review Process | Example |
Release Quality OWASP Tools |
All Beta Quality Requirements plus:
Recommendations:
|
|
OWASP WebGoat Project |
Beta Quality Tool Criteria
Class | Criteria | Review Process | Example |
Beta Quality OWASP Tools |
All Alpha Quality Requirements plus:
|
|
OWASP AntiSamy Project |
Alpha Quality Tool Criteria
Class | Criteria | Review Process | Example |
Alpha Quality OWASP Tools |
|
|
OWASP CSRFTester Project |
Inactive Tool Criteria
Class | Criteria | Review Process | Example |
Inactive Projects | The criteria is being built |
|
OWASP CAL9000 Project |
Assessment Scale for OWASP DOCUMENTATION Projects
Class | Criteria | Review Process | Example |
Release Quality OWASP Documentation |
All Beta Quality Requirements plus:
|
|
OWASP AppSec FAQ Project |
Beta Quality OWASP Documentation |
All Alpha Quality Requirements plus:
|
|
OWASP CLASP Project |
Alpha Quality OWASP Documentation |
|
|
OWASP AJAX Security Project |
Inactive Projects | The criteria is being built |
|
FAQ
- 1. What is the purpose of the project ratings?
- The rating system allows OWASP to monitor the quality of Projects in our subject areas, and to prioritize work on these projects. It is also utilized to prepare for static releases of Wikipedia content.
- 2. How do I add a project (tool or documentation) to the OWASP Projects?
- To propose a new project, please send an email to OWASP.
- 3. How does the assessment scale work?
- Each category has a set of requirements/criteria to be met. Beta Quality implies that all of its requirements, as well as the Alpha Quality requirement have been met. Release Quality implies that all of the requirements, including Alpha and Beta, have been met.
- 4. Who can assess projects?
- The OWASP Project Manager can assign you a reviewer.
- 5. Why didn't the reviewer leave any comments?
- Unfortunately, due to the volume of projects that need to be assessed, we are unable to leave detailed comments in most cases. If you have particular questions, you might ask the person who assessed the project; they will be happy to provide you with their rationale.
- 6. What if I don't agree with a rating?
- You can list it in the section for assessment requests below, and someone will take a look at it. Alternatively, you can ask any member of the project to rate the project again.
- 7. Aren't the ratings subjective?
- Yes, they are somewhat subjective, but it's the best system we've been able to devise. If you have a better idea, please don't hesitate to let us know!
- 8. What if I have a question not listed here?
- If your question concerns the project assessment process specifically, please contact OWASP or its Project Manager directly.
Requests for assessment
If you have made significant changes to a project and would like an outside opinion on a new rating for it, please feel free to list it below and e-mail OWASP Project Manager.
- Here
- Or here
- Add new requests above this line
Pages in category "OWASP Project Assessment"
The following 14 pages are in this category, out of 14 total.