This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit

OWASP .Net Project Roadmap

Revision as of 18:25, 29 March 2014 by Bill Sempf (talk | contribs)

Jump to: navigation, search


The themes of the .NET Project include:

  • Deep, rich guidance for .NET developers in using the security features of .NET
  • Guidance for use of OWASP components that are designed for use with .NET
  • Information about working with and on OWASP tools built using .NET


Features are parts of the project at a very high level.


Guidance is documentation that assists .NET developers impleenting the security features of the framework. Current examples include:

Topics that require content creation include:

  • Rfc2898DeriveBytes for PBKDF2
  • WIF
  • AntiXssEncoder
  • Exception handling
  • Anti CSRF
  • Memory Management
  • ClickOnce Deployment


Components are pieces of software that assist .NET developers in building more secure code. Many updates are needed:

Projects that use .NET

These are projects that happen to be built in .NET and could use .NET development assistance


Please send your ideas to the OWASP.Net mailing list (