Category:OWASP Application Security Metrics Project

asia food industry hertz autovermietung australian dancing star vans auto part portable airconditioner australia delphi automotive systems private limited antivir antivirus software personal finance management software australia le salon de lauto 2005 asians lip syncing backstreet coral reefs in australia accommodation australia port port port stephens stephens stephens.org antivirus servers top australia in 1900s norton antivirus 2004 crack serial military discount auto parts asian boy lady mal africa cameroon picture skin cancer foundation australia east african breweries ltd african american romantic poetry antivirus scan online asian labia australian mammal society url african chimera violet symantec antivirus liveupdate error antivirus for exchange 5.5 grand theft auto vice city savegames anastasia wright motorcycle leathers brisbane australia automatic car doors australian open tv schedule in us the eastafrican standard automobile speaker sizes link venter trailer south africa link unknown facts about african americans 2006 keygen pro v2.0.205.1 winantivirus removing norton antivirus from norton system works webmap african black butter shea soap unrefined symantics norton antivirus cheap auto insurance in louisiana ratings of antivirus software asian newcomer antivirus avg7.0 automotive repair question

Welcome to the Application Security Metrics Security Project
This OWASP Project will first identify and provide the OWASP community a set of application security metrics that have been found by contributors to be effective in measuring application security. This will be followed by the development of new metrics that build on the initial metrics foundation to fulfill unmet metrics requirements. The goals of this Project are to make a baseline set of application security metrics available to the OWASP community and subsequently to provide a forum for the community to contribute metrics back into the baseline.

Project Guiding Principles:
The Application Security Metrics Security Project Projectâs Guiding Principles were created in order to express the intentions of its contributors when designing application security metrics.
 * Effective security metrics have proven to be challenging to develop. As such, provide a means for the OWASP community to initially leverage what others have developed and find useful (i.e., provide the OWASP community useful metrics in use today).
 * Where practical, attempt to âstandardizeâ nomenclature with other security metrics initiatives such as securitymetrics.org, Systems Security Engineering Capability Maturity Model (SSE-CMM), etc.


 * In selecting best practice metrics, make use of high-level filters. For example, use Dr. Dan Geerâs decision support mantra regarding security metrics: âHow would that proposed measure advance appropriate decision making?"


 * Link each metric to the business driver for the metric (e.g., Metric âXâ helps support regulatory compliance and risk management objectives.â

Comments to the editor or endorsements are welcome.

Project Scope:
In keeping with OWASPâs mission, this project will focus primarily on application security metrics. Below are some resources with information on application security metrics.


 * Metrics on reported flaws from Mitre

Feedback and Participation:
We hope you find the OWASP Application Security Metrics Project useful. Please contribute to the Project by volunteering for one of the Tasks, sending your comments, questions, and suggestions to owasp@owasp.org. To join the OWASP Application Security Metrics Project mailing list or view the archives, please visit the subscription page.

Project Contributors:
If you contribute to this Project, please add your name here Project Lead:
 * Bob Austin of KoreLogic Security. He can be reached at austinb@korelogic.com.

Contributors:


 * Cliff Barlow, KoreLogic Security
 * James McGovern, The Hartford