This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Project Information:template Source Code Review OWASP Projects"
From OWASP
| Line 1: | Line 1: | ||
| + | {| style="width:100%" border="0" align="center" | ||
| + | ! colspan="7" align="center" style="background:#4058A0; color:white"|<font color="white">'''PROJECT IDENTIFICATION''' | ||
| + | |- | ||
| + | | style="width:15%; background:#7B8ABD" align="center"|'''Project Name''' | ||
| + | | colspan="6" style="width:85%; background:#cccccc" align="left"|<font color="black">'''OWASP Source Code Review OWASP-Projects Project''' | ||
| + | |- | ||
| + | | style="width:15%; background:#7B8ABD" align="center"| '''Short Project Description''' | ||
| + | | colspan="6" style="width:85%; background:#cccccc" align="left"|The objectives of this project are: 1. Develop and document a workflow for FLOSS projects to incorporate static analysis into the Software Development Life Cycle (SDLC); 2. Apply the above workflow as a required step for OWASP projects; 3. Aid in auditing select FLOSS projects to create a baseline for comparing security amongst FLOSS projects. | ||
| + | |- | ||
| + | | style="width:15%; background:#7B8ABD" align="center"|'''Email Contacts''' | ||
| + | | style="width:14%; background:#cccccc" align="center"|Project Leader<br>[mailto:[email protected] '''Dan Cornell''']<br>SoC's Project Leader<br>[mailto:[email protected] '''James Walden'''] | ||
| + | | style="width:14%; background:#cccccc" align="center"|Project Contributors<br>[mailto:[email protected] '''Justin Derry''']<br> | ||
| + | [mailto:[email protected] '''Maureen Doyle''']<br> | ||
| + | [mailto:[email protected] '''Michael Whelan'''] | ||
| + | | style="width:14%; background:#cccccc" align="center"|[https://lists.owasp.org/mailman/listinfo/owasp-scode-review-owasp-projects '''Mailing List/Subscribe''']<br>[mailto:OWASP-SCode-Review-OWASP-Projects(at)lists.owasp.org '''Mailing List/Use'''] | ||
| + | | style="width:14%; background:#cccccc" align="center"|First Reviewer<br>[mailto:afry(at)strongcrypto.biz '''Alex Fry''']<br>[http://www.linkedin.com/in/alexanderfry Profile] | ||
| + | | style="width:14%; background:#cccccc" align="center"|Second Reviewer<br>[mailto:marco.m.morana(at)gmail.com '''Marco M. Morana''']<br>[[OWASP Summer of Code 2008 Projects Authors Status Target and Reviewers Marco M Morana Curriculum|Curriculum]] | ||
| + | | style="width:15%; background:#cccccc" align="center"|OWASP Board Member<br>[[User:Sdeleersnyder|'''Sebastien Deleersnyder''']] | ||
| + | |} | ||
| + | {| style="width:100%" border="0" align="center" | ||
| + | ! colspan="6" align="center" style="background:#4058A0; color:white"|<font color="white">'''PROJECT MAIN LINKS''' | ||
| + | |- | ||
| + | | style="width:100%; background:#cccccc" align="center"| | ||
| + | * [https://www.owasp.org/images/c/c9/OWASPEU_SourceReview.ppt PowerPoint Presentation] | ||
| + | * Updated workflow [[Image:Workflow_July_11a.zip]] | ||
| + | * [[Image:Workflow_Draft1.pdf]] | ||
| + | * [[Image:CreateProjectExample.pdf]] | ||
| + | * [https://owasp.fortify.com/teamserver/welcome.fhtml Fortify OWASP Open Review Project] | ||
| + | |} | ||
| + | {| style="width:100%" border="0" align="center" | ||
| + | ! colspan="6" align="center" style="background:#4058A0; color:white"|<font color="white">'''RELATED PROJECTS''' | ||
| + | |- | ||
| + | | style="width:100%; background:#cccccc" align="center"| | ||
| + | * [[:Category:OWASP Open Review Project|'''OWASP Open Review Project (ORPRO)''']] | ||
| + | |||
| + | |} | ||
| + | {| style="width:100%" border="0" align="center" | ||
| + | ! colspan="6" align="center" style="background:#4058A0; color:white"|<font color="white">'''SPONSORS & GUIDELINES''' | ||
| + | |- | ||
| + | | style="width:50%; background:#cccccc" align="center"|[[OWASP Summer of Code 2008|Sponsor - '''OWASP Summer of Code 2008''']] | ||
| + | | style="width:50%; background:#cccccc" align="center"|[[OWASP Summer of Code 2008 Applications - Need Futher Clarifications#Source Code Review OWASP Projects|'''Sponsored Project/Guidelines/Roadmap''']] | ||
| + | |} | ||
| + | {| style="width:100%" border="0" align="center" | ||
| + | ! colspan="5" align="center" style="background:#4058A0; color:white"|ASSESSMENT AND REVIEW PROCESS | ||
| + | |- | ||
| + | | style="width:15%; background:#6C82B5" align="center"|'''Review/Reviewer''' | ||
| + | | style="width:21%; background:#b3b3b3" align="center"|'''Author's Self Evaluation'''<br>(applicable for Alpha Quality & further) | ||
| + | | style="width:21%; background:#b3b3b3" align="center"|'''First Reviewer'''<br>(applicable for Alpha Quality & further) | ||
| + | | style="width:21%; background:#b3b3b3" align="center"|'''Second Reviewer'''<br>(applicable for Beta Quality & further) | ||
| + | | style="width:22%; background:#b3b3b3" align="center"|'''OWASP Board Member'''<br>(applicable just for Release Quality) | ||
| + | |- | ||
| + | | style="width:15%; background:#7B8ABD" align="center"|'''50% Review''' | ||
| + | | style="width:21%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes'''<br>---------<br>[[Project Information:template Source Code Review OWASP Projects - 50 Review - Self Evaluation - A|See&Edit:50% Review/Self-Evaluation (A)]] | ||
| + | | style="width:21%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes'''<br>---------<br>[[Project Information:template Source Code Review OWASP Projects - 50 Review - First Reviewer - C|See&Edit: 50% Review/1st Reviewer (C)]] | ||
| + | | style="width:21%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes'''<br>---------<br>[[Project Information:template Source Code Review OWASP Projects 50 Review Second Review E|See&Edit: 50%Review/2nd Reviewer (E)]] | ||
| + | | style="width:22%; background:#C2C2C2" align="center"|X | ||
| + | |- | ||
| + | | style="width:15%; background:#7B8ABD" align="center"|'''Final Review''' | ||
| + | | style="width:21%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes'''<br>---------<br>Which status has been reached?<br>'''Release Quality'''<br>---------<br>[[Project Information:template Source Code Review OWASP Projects - Final Review - Self Evaluation - B|See&Edit: Final Review/SelfEvaluation (B)]] | ||
| + | | style="width:21%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes''' <br>---------<br>Which status has been reached?<br>'''Release Quality'''<br>---------<br>[[Project Information:template Source Code Review OWASP Projects - Final Review - First Reviewer - D|See&Edit: Final Review/1st Reviewer (D)]] | ||
| + | | style="width:21%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes'''<br>---------<br>Which status has been reached?<br>'''Release Quality'''<br>---------<br>[[Project Information:template Source Code Review OWASP Projects - Final Review - Second Reviewer - F|See&Edit: Final Review/2nd Reviewer (F)]] | ||
| + | | style="width:22%; background:#C2C2C2" align="center"|Objectives & Deliveries reached?<br>'''Yes'''<br>---------<br>Which status has been reached?<br>'''Release Quality'''<br>---------<br>[[Project Information:template Source Code Review OWASP Projects - Final Review - OWASP Board Member - G|See/Edit: Final Review/Board Member (G)]] | ||
| + | |- | ||
| + | |} | ||
| + | |||
| + | |||
| + | |||
| + | |||
| + | |||
| + | |||
{| style="width:100%" border="0" align="center" | {| style="width:100%" border="0" align="center" | ||
! colspan="7" align="center" style="background:#4058A0; color:white"|<font color="white">'''PROJECT IDENTIFICATION''' | ! colspan="7" align="center" style="background:#4058A0; color:white"|<font color="white">'''PROJECT IDENTIFICATION''' | ||
Revision as of 15:11, 8 January 2009
| PROJECT IDENTIFICATION | ||||||
|---|---|---|---|---|---|---|
| Project Name | OWASP Source Code Review OWASP-Projects Project | |||||
| Short Project Description | The objectives of this project are: 1. Develop and document a workflow for FLOSS projects to incorporate static analysis into the Software Development Life Cycle (SDLC); 2. Apply the above workflow as a required step for OWASP projects; 3. Aid in auditing select FLOSS projects to create a baseline for comparing security amongst FLOSS projects. | |||||
| Email Contacts | Project Leader Dan Cornell SoC's Project Leader James Walden |
Project Contributors Justin Derry |
Mailing List/Subscribe Mailing List/Use |
First Reviewer Alex Fry Profile |
Second Reviewer Marco M. Morana Curriculum |
OWASP Board Member Sebastien Deleersnyder |
| PROJECT MAIN LINKS | |||||
|---|---|---|---|---|---|
| RELATED PROJECTS | |||||
|---|---|---|---|---|---|
| SPONSORS & GUIDELINES | |||||
|---|---|---|---|---|---|
| Sponsor - OWASP Summer of Code 2008 | Sponsored Project/Guidelines/Roadmap | ||||
| ASSESSMENT AND REVIEW PROCESS | ||||
|---|---|---|---|---|
| Review/Reviewer | Author's Self Evaluation (applicable for Alpha Quality & further) |
First Reviewer (applicable for Alpha Quality & further) |
Second Reviewer (applicable for Beta Quality & further) |
OWASP Board Member (applicable just for Release Quality) |
| 50% Review | Objectives & Deliveries reached? Yes --------- See&Edit:50% Review/Self-Evaluation (A) |
Objectives & Deliveries reached? Yes --------- See&Edit: 50% Review/1st Reviewer (C) |
Objectives & Deliveries reached? Yes --------- See&Edit: 50%Review/2nd Reviewer (E) |
X |
| Final Review | Objectives & Deliveries reached? Yes --------- Which status has been reached? Release Quality --------- See&Edit: Final Review/SelfEvaluation (B) |
Objectives & Deliveries reached? Yes --------- Which status has been reached? Release Quality --------- See&Edit: Final Review/1st Reviewer (D) |
Objectives & Deliveries reached? Yes --------- Which status has been reached? Release Quality --------- See&Edit: Final Review/2nd Reviewer (F) |
Objectives & Deliveries reached? Yes --------- Which status has been reached? Release Quality --------- See/Edit: Final Review/Board Member (G) |
| PROJECT IDENTIFICATION | ||||||
|---|---|---|---|---|---|---|
| Project Name | OWASP Source Code Review OWASP-Projects Project | |||||
| Short Project Description | The objectives of this project are: 1. Develop and document a workflow for FLOSS projects to incorporate static analysis into the Software Development Life Cycle (SDLC); 2. Apply the above workflow as a required step for OWASP projects; 3. Aid in auditing select FLOSS projects to create a baseline for comparing security amongst FLOSS projects. | |||||
| Email Contacts | Project Leader Dan Cornell SoC's Project Leader James Walden |
Project Contributors Justin Derry |
Mailing List/Subscribe Mailing List/Use |
First Reviewer Alex Fry Profile |
Second Reviewer Marco M. Morana Curriculum |
OWASP Board Member Sebastien Deleersnyder |
| PROJECT MAIN LINKS | |||||
|---|---|---|---|---|---|
| RELATED PROJECTS | |||||
|---|---|---|---|---|---|
| SPONSORS & GUIDELINES | |||||
|---|---|---|---|---|---|
| Sponsor - OWASP Summer of Code 2008 | Sponsored Project/Guidelines/Roadmap | ||||
| ASSESSMENT AND REVIEW PROCESS | ||||
|---|---|---|---|---|
| Review/Reviewer | Author's Self Evaluation (applicable for Alpha Quality & further) |
First Reviewer (applicable for Alpha Quality & further) |
Second Reviewer (applicable for Beta Quality & further) |
OWASP Board Member (applicable just for Release Quality) |
| 50% Review | Objectives & Deliveries reached? Yes --------- See&Edit:50% Review/Self-Evaluation (A) |
Objectives & Deliveries reached? Yes --------- See&Edit: 50% Review/1st Reviewer (C) |
Objectives & Deliveries reached? Yes --------- See&Edit: 50%Review/2nd Reviewer (E) |
X |
| Final Review | Objectives & Deliveries reached? Yes --------- Which status has been reached? Release Quality --------- See&Edit: Final Review/SelfEvaluation (B) |
Objectives & Deliveries reached? Yes --------- Which status has been reached? Release Quality --------- See&Edit: Final Review/1st Reviewer (D) |
Objectives & Deliveries reached? Yes --------- Which status has been reached? Release Quality --------- See&Edit: Final Review/2nd Reviewer (F) |
Objectives & Deliveries reached? Yes --------- Which status has been reached? Release Quality --------- See/Edit: Final Review/Board Member (G) |
