This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Category:OWASP Securing WebGoat using ModSecurity Project"
From OWASP
Line 1: | Line 1: | ||
+ | [[:Category:OWASP Project|Click here to return to OWASP Projects page.]]<br> | ||
+ | [[:Project Information:template Securing WebGoat using ModSecurity|Click here to see (& edit, if wanted) the template.]] | ||
{{:Project Information:template Securing WebGoat using ModSecurity}} | {{:Project Information:template Securing WebGoat using ModSecurity}} | ||
[[Category:OWASP Project]] | [[Category:OWASP Project]] |
Revision as of 14:56, 29 June 2008
Click here to return to OWASP Projects page.
Click here to see (& edit, if wanted) the template.
PROJECT IDENTIFICATION | |||||||
---|---|---|---|---|---|---|---|
Project Name | OWASP Securing WebGoat using ModSecurity Project | ||||||
Short Project Description | The purpose of this project is to create custom Modsecurity rulesets that, in addition to the Core Set, will protect WebGoat 5.1 from as many of its vulnerabilities as possible (the goal is 90%) without changing one line of source code. To ensure that it will be a complete 'no touch' on WebGoat and its environment, ModSecurity will be configured on Apache server as a remote proxy server. For those vulnerabilities that cannot be prevented (partially or not at all), I will document my efforts in attempting to protect them. Business logic vulnerabilities will be particularly challenging to solve. | ||||||
Project key Information | Project Leader Stephen Craig Evans |
Project Contributors (if applicable) |
Mailing List Subscribe here Use here |
License Creative Commons Attribution Share Alike 3.0 |
Project Type Documentation |
Sponsors OWASP SoC 08 |
Release Status | Main Links | Related Projects |
---|---|---|
|
This category currently contains no pages or media.