This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit

Difference between revisions of "OWASP Stinger 3 Ideas"

Jump to: navigation, search
(Reverting to last version not containing links to
Line 1: Line 1:
[ links] [ developmental dysplasia of the hip
] [ andreas auto grand map san tag theft
] [ automotive concept design
] [ australian nanny jobs
] [ human science research council south africa
] [ missionary trips africa
] [ top rated antivirus programs
] [ align asiasat
] [ aborigine people of australia
] [ cospak australia
] [ geography of south asia
] [ etrust antivirus 7.0.139
] [ african american life during the great deppression
] [ australian daylight saving time changes
] [ alerta] [ index] [ unley council south australia] [ mdaemon antivirus keygen
] [ kaspersky antivirus review
] [ auction auto good guy las nevada vegas
] [ meilleur antivirus gratuit
] [ australia funniest home video] [ australia post
] [ telphone prank calls in australia
] [ grand chancellor hotel perth australia
] [ asia in tallest woman
] [ auto ranging multimeter
] [ employment agency western australia
] [ southern asia bible college bangalore
] [ top] [ crack for avg antivirus 7.0
] [ asian population in california
] [
] [ african american girl name
] [ african ceramics and history
] [ australia insurance landlord
] [ index] [ automotive engine oil pressure transducer operation
] [ african american proverb
] [ asian massage san francisco review
] [ africas background it poetry regard when
] [ asian ring sizes
] [ capital one autofinance
] [ african birthing
] [ australian inventory of chemical substance
] [ avg antivirus 7.302 crack
] [ norton antivirus keygen download
] [ african american coloring books
] [ santa fe auto wichita  
== Overview ==
== Overview ==

Revision as of 16:00, 27 May 2009


The OWASP Stinger 3.x series will be heavily driven by the community. Everyone is encouraged to contribute ideas and suggestions to make Stinger 3.x the most powerful and flexible web application firewall as possible. One major goal of the OWASP Stinger 3.x series is to develop a solid and flexible validation engine capable of implementing common web application security features.. With the help of the community, I believe this goal can be achieved!

Development Complete

The following is a list of ideas that have been fully implemented in the Stinger 3.x baseline:

  • Validation of the entire HTTP request: including URI, headers, cookies, and parameters
  • A robust "learning" mode to make rule generation simplistic and efficient.
  • A more flexible "Action" framework. Actions will be able to execute logic before and/or after the request is processed by the web application

Under Development

The following is a list of ideas currently under development in the Stinger 3.x baseline:

  • The ability to enforce web application firewall logic
  • Defining and enforcing URI level access control
  • Cross Site Request Forgery Guard
  • HTTP Cookie Guard
  • No-Cache Guard
  • 200 Response Codes (fooling web application scanners)
  • Request Rate Throttler
  • Enforce HTTPOnly on all cookies

Planning to Develop

The following is a list of ideas that will be integrated into the Stinger 3.x baseline:

  • A full web application dedicated to editing the OWASP Stinger configuration files

Ideas Under Consideration

The following is a list of ideas that are under consideration for the Stinger 3.x baseline:

  • The ability to validate the Java properties files used by the web application
  • The ability to to build rules for and validate rules against serialized objects

If you have an idea that you would like seen in Stinger 3.x, please email me at eric dot sheridan at