This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "OWASP Stinger Version 3"

From OWASP
Jump to: navigation, search
(Overview)
(Overview)
 
(9 intermediate revisions by 2 users not shown)
Line 1: Line 1:
 
==Overview==
 
==Overview==
  
 +
'''Development work on version 3 never got much past the concept stage as there was significant work to do to stabilize the previous versions and correct some problems. '''
 
The J2EE platform does not include any validation features. This leaves many organizations to craft their own validation mechanisms, often incomplete, flawed, and inefficient.
 
The J2EE platform does not include any validation features. This leaves many organizations to craft their own validation mechanisms, often incomplete, flawed, and inefficient.
  
The 3.x series will mark the evolution of the Stinger project from a J2EE validation engine to a full commercial quality web application firewall. OWASP Stinger 3.x will have some of the following notable features:
+
The 3.x series will mark the inclusion of web application firewall specific features. OWASP Stinger 3.x will have some of the following notable features:
  
 
:* Validation of the entire HTTP request: including URI, headers, cookies, and parameters
 
:* Validation of the entire HTTP request: including URI, headers, cookies, and parameters
Line 13: Line 14:
 
==Project Lead==
 
==Project Lead==
  
The OWASP Stinger Project is lead by [mailto:eric.sheridan@owasp.org Eric Sheridan]
+
The OWASP Stinger Project leader is [mailto:Wesley.M.West@ge.com Wesley West].
  
 
==License==
 
==License==
Line 21: Line 22:
 
==Downloads==
 
==Downloads==
  
:*[http://www.owasp.org Click here] to view the OWASP Stinger 3.0 ideas page!
+
:*[http://www.owasp.org/index.php/OWASP_Stinger_3_Ideas Click here] to view the OWASP Stinger 3.x ideas page!
 +
:* Due to the development status of Stinger 3.0, no downloads currently exist.
  
 
==Feedback and Participation ==
 
==Feedback and Participation ==
Line 28: Line 30:
  
 
To join the OWASP Stinger mailing list or view the archives, please visit the [http://lists.owasp.org/mailman/listinfo/owasp-stinger subscription page].
 
To join the OWASP Stinger mailing list or view the archives, please visit the [http://lists.owasp.org/mailman/listinfo/owasp-stinger subscription page].
 +
 +
==Donations==
 +
 +
The Open Web Application Security Project is purely an open-source community driven effort. As such, all projects and research efforts are contributed and maintained with an individual's ''spare time.'' If you have found this or any other project useful, please support OWASP with a [https://www.owasp.org/index.php/Contributions donation].
  
 
==Project Sponsors==  
 
==Project Sponsors==  
Line 33: Line 39:
 
The OWASP Stinger project is sponsored by [http://www.aspectsecurity.com https://www.owasp.org/images/d/d1/Aspect_logo.gif].
 
The OWASP Stinger project is sponsored by [http://www.aspectsecurity.com https://www.owasp.org/images/d/d1/Aspect_logo.gif].
  
[[Category:OWASP Validation Project]]
+
[[Category:OWASP Stinger Project]]

Latest revision as of 17:15, 25 March 2009

Overview

Development work on version 3 never got much past the concept stage as there was significant work to do to stabilize the previous versions and correct some problems. The J2EE platform does not include any validation features. This leaves many organizations to craft their own validation mechanisms, often incomplete, flawed, and inefficient.

The 3.x series will mark the inclusion of web application firewall specific features. OWASP Stinger 3.x will have some of the following notable features:

  • Validation of the entire HTTP request: including URI, headers, cookies, and parameters
  • A robust "learning" mode to make rule generation simplistic and efficient.
  • A full web application dedicated to editing the OWASP Stinger configuration files

Check out the full list of new features being implemented at the OWASP Stinger 3.x ideas page.

Project Lead

The OWASP Stinger Project leader is Wesley West.

License

Stinger is offered under the LGPL. For further information on OWASP licenses, please consult the OWASP Licenses page.

Downloads

  • Click here to view the OWASP Stinger 3.x ideas page!
  • Due to the development status of Stinger 3.0, no downloads currently exist.

Feedback and Participation

We hope you find Stinger useful. Please contribute back to the project by sending your comments, questions, and suggestions to the Stinger mailing list. Thanks!

To join the OWASP Stinger mailing list or view the archives, please visit the subscription page.

Donations

The Open Web Application Security Project is purely an open-source community driven effort. As such, all projects and research efforts are contributed and maintained with an individual's spare time. If you have found this or any other project useful, please support OWASP with a donation.

Project Sponsors

The OWASP Stinger project is sponsored by Aspect_logo.gif.