9
Copyright © 2004 - The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License. The OWASP Foundation OWASP http://www.owasp.org OWASP Overview Jeff Williams OWASP Chair [email protected]

OWASP Overview

Embed Size (px)

DESCRIPTION

OWASP Overview. Jeff Williams OWASP Chair [email protected]. Innocent Code. OWASP’s Mission. OWASP’s is dedicated to finding and fighting the causes of insecure software. The Market for Lemons. OWASP Goals. Widespread lack of understanding - PowerPoint PPT Presentation

Citation preview

Page 1: OWASP Overview

Copyright © 2004 - The OWASP FoundationPermission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License.

The OWASP Foundation

OWASP

http://www.owasp.org

OWASP Overview

Jeff WilliamsOWASP [email protected]

Page 2: OWASP Overview

OWASP

Innocent Code

Page 3: OWASP Overview

OWASP

OWASP’s Mission

OWASP’s is dedicated to finding and fighting the causes of insecure software

Page 4: OWASP Overview

OWASP

The Market for Lemons

Page 5: OWASP Overview

OWASP

OWASP Goals

Widespread lack of understandingEstablish application security knowledgebase

Time lag for securing new technologiesConstructive security research

Assist companies to produce secure codeProcess, tools, guidance, standards

Page 6: OWASP Overview

OWASP

MediaWiki

Community platform Anyone can create an account and edit Strong review process

Page 7: OWASP Overview

OWASP

New Projects

Honeycomb project Java security project underway Ajax project – just starting with new leader Metrics project – new leader Validation project – new leader Testing guide II – alpha draft available Code review project – alpha draft available Summer of Code?

Page 8: OWASP Overview

OWASP

Project Honeycomb

Principle

ThreatVulnerability

Attack CountermeasureVulnerability

PrinciplePrinciple

CountermeasureCountermeasureCountermeasure

AttackAttackAttack

Page 9: OWASP Overview

OWASP

OWASP AppSec Conference Series

Mike Howard is going to do the keynote at OWASP AppSec Seattle 2006