This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "OWASP Security Tools for Developers Project"

From OWASP
Jump to: navigation, search
Line 58: Line 58:
 
We are planning to run the project like an Agile software project itself by building a backlog and running sprints. We may even try and use Google Hangouts for video stand-up meetings!  
 
We are planning to run the project like an Agile software project itself by building a backlog and running sprints. We may even try and use Google Hangouts for video stand-up meetings!  
  
*August - Planning
+
*August - Project Planning  
*September - Sprint 1
+
*September - Sprint 1  
*October - Sprint 2
+
*October - Sprint 2  
*November - Sprint 3
+
*November - Sprint 3  
 
*December - Sprint 4
 
*December - Sprint 4
  
|}
+
|}  
  
 
Project About  
 
Project About  

Revision as of 18:43, 31 July 2011

Home

This project is focused on defining, designing, developing and configuring security tools for software developmemt teams and their end-to-end software development process. While any reference material or code produced will be focused an open source stack and Agile development techniques, the concepts should be able to be easily applied to other styles of software engineering. 

Most people accept that tools can only effectively be applied to a fraction of software issues where the fraction is generally increasing but at a relatively conservative pace. Tools are however an important and widely adopted part of the process needed to produce fucntional, stable, reliable and scalable software where security is one such attribute. Most development teams invest heavily in tools to improve their process and maintain end-to-end development environments including managing requirements and user stories, IDE's, test management, source code management, version control, continuous intregration, deployment and monitoring.

Many security tools today are written by and for security people who often (understandably) have a different lens and different needs from software developers and development teams.

This project is operating under the belief that infusing security into the development teams work-flow through effective tools will have a significant impact on improving the security quality of the code they produce.

You can think of it as a project for developers by developers that just so happens to be about security. 

Asvs-ad-where-at.png

Wanna get involved?

Asvs-bulb.jpg....join the discussion

While the project is open to all we are particularly loking for developers who will actively contributing code. We are especially interested in any developers that have experience of customizing Jenkins, extending Git, unit testing frameworks or customizing mangement tools like ScrumDo. We are also interested in any developers interested in extending behaviour driven development testing frameworks like Cucumber. 

Join the mailing list, hang out and say hi or contact the project leader Mark Curphey contact us.

What exactly are you producing?

Asvs-bulb.jpg....the 50,000 ft plan

The project is still in it's infancy but the plan is to produce the following:

  • Reference Architecture
  • Reference Implementation

As part of those two key areas we expect to build or customize tools and develop configuration guides for particular technologies. While we don't yet know exactly what that will inlcude it may inlcude IDE plugins or extensions to common testing frameworks to make integrating security tests easier.  

How are you doing this?

Asvs-bulb.jpg ....by being Agile of course!

We are planning to run the project like an Agile software project itself by building a backlog and running sprints. We may even try and use Google Hangouts for video stand-up meetings!

  • August - Project Planning
  • September - Sprint 1
  • October - Sprint 2
  • November - Sprint 3
  • December - Sprint 4

Project About


PROJECT INFO
What does this OWASP project offer you?
RELEASE(S) INFO
What releases are available for this project?
what is this project?
Name: OWASP Development Guide (home page)
Purpose: The Development Guide provides practical guidance and includes J2EE, ASP.NET, and PHP code samples. The Development Guide covers an extensive array of application-level security issues, from SQL injection through modern concerns such as phishing, credit card handling, session fixation, cross-site request forgeries, compliance, and privacy issues.
License: Creative Commons Attribution ShareAlike 3.0
who is working on this project?
Project Leader(s): N/A
Project Contributor(s):
how can you learn more?
Project Pamphlet: Not Yet Created
Project Presentation:
Mailing list: Mailing List Archives
Project Roadmap: View
Main links:
Key Contacts
  • Contact the GPC to contribute to this project
  • Contact the GPC to review or sponsor this project
current release
Guide 2.0 - July 2005 - (download)
Release description: In Guide 2.0, you will find details on securing most forms of web applications and services, with practical guidance using J2EE, ASP.NET, and PHP samples.
Rating: Greenlight.pngGreenlight.pngGreenlight.png Stable Release - Assessment Details
last reviewed release
Not Yet Reviewed


other releases