Difference between revisions of "Category:OWASP Code Review Project"

From OWASP
Jump to: navigation, search
(Join the Code Review Team)
(OWASP Code Review Guide V2.0)
(27 intermediate revisions by 6 users not shown)
Line 1: Line 1:
{{OWASP Book|1415989}}
+
{{OWASP Book|5678680}}
 +
==== Main  ====
  
'''Download here:'''<br>
+
=== OWASP Code Review Guide V2.0  ===
http://www.lulu.com/items/volume_63/1415000/1415989/4/print/OWASP_Code_Review_2007__RC2_-_Version_for_print.pdf <br>
+
[[:Projects/OWASP Code Review Project/Releases/Code Review Guide V2.0|Planned to be launched mid January 2014]].<br>
<br>
+
[[:Category:OWASP Project|Click here to return to OWASP Projects page.]]<br>
+
[[:Project Information:template Code Review Project|Click here to see (& edit, if wanted) the template.]]
+
{{:Project Information:template Code Review Project}}
+
  
 +
We are writing a new version of the OWASP code review guide.
  
 +
[[OWASP  Code review V2 Table of Contents]]
  
 
==Contents==
 
==Contents==
 
[[OWASP Code Review Guide Table of Contents]]
 
[[OWASP Code Review Guide Table of Contents]]
  
==Code review guide to be part of Summer of Code 2008==
+
==Summer of Code 2008==
 
The Code review guide is proudly sponsored by the OWASP Summer of Code (SoC) 2008. For more information please see [[OWASP_Summer_of_Code_2008| OWASP Summer of Code 2008]].
 
The Code review guide is proudly sponsored by the OWASP Summer of Code (SoC) 2008. For more information please see [[OWASP_Summer_of_Code_2008| OWASP Summer of Code 2008]].
  
== Code Review Guide (RC2) Completed ==
+
== Code Review Guide V1.1 Completed ==
The code review guide has been completed and is available here:
+
The code review guide has been completed and is available here http://www.lulu.com/content/5678680 as a bound book.
http://www.lulu.com/content/1415989
+
Either as a free PDF or a bound book.
+
  
 
==Code review tool==
 
==Code review tool==
The following link is for the new version of Code Crawler,code review tool which examines code for keywords discussed in the section "[[First sweep of the code base]]"<br>It has a new look and feel and also uses MS SQL Server express.  
+
The following link is for the new version of Code Crawler, code review tool which examines code for keywords discussed in the section "[[Crawling Code]]". It support Java and .NET code:
  
you can find it here: <br>
+
http://codecrawler.codeplex.com/Release/ProjectReleases.aspx
 
+
http://www.cyphersec.com/software_archive/CodeCrawler.rar It's a lightweight tool and undergoing constant development.<br>
+
 
+
Source code can be found here:
+
http://www.cyphersec.com/software_archive/CodeCrawler_source.rar
+
  
 
== Owasp Orizon Code review engine ==
 
== Owasp Orizon Code review engine ==
Line 36: Line 28:
  
 
The Owasp Orizon will evolve accordingly in order to implement security checks described in the Code Review Guide.
 
The Owasp Orizon will evolve accordingly in order to implement security checks described in the Code Review Guide.
With the framework a UI is also provided in order to give people a standalone tool to realize code review for the security flaws listed in the "[[The Owasp Code Review Top 10 flaw categories]]"
+
With the framework a UI is also provided in order to give people a standalone tool to realize code review for the security flaws listed in the "[[The Owasp Code Review Top 9]]"
  
  
Line 50: Line 42:
 
== Project Contributors ==
 
== Project Contributors ==
  
The OWASP Code Review project was conceived by Eoin Keary the OWASP Ireland Founder and Chapter Lead. We are actively seeking individuals to add new sections as new web technologies emerge. If you are interested in volunteering for the project, or have a comment, question, or suggestion, please drop me a line  mailto:eoin.keary@owasp.org
+
The OWASP Code Review project was conceived by Eoin Keary, the OWASP Ireland Founder and Chapter Lead. We are actively seeking individuals to add new sections as new web technologies emerge. If you are interested in volunteering for the project, or have a comment, question, or suggestion, please drop me a line  mailto:eoin.keary@owasp.org
  
 
==Join the Code Review Team==
 
==Join the Code Review Team==
Line 64: Line 56:
 
View the [[OWASP Code Review Project Roadmap]]
 
View the [[OWASP Code Review Project Roadmap]]
  
[[Category:OWASP Project]]
+
==== Project About ====
 +
{{:Projects/OWASP Code Review Project| Project About}}
 +
 
 +
__NOTOC__ <headertabs />
 +
 
 +
<!--- {{:Project Information:template Code Review Project}} --->
 +
[[Category:OWASP Project|Code Review Project]]
 +
[[Category:OWASP Document]]
 +
[[Category:OWASP Download]]
 +
[[Category:OWASP Release Quality Document]]

Revision as of 10:08, 26 April 2013

OWASP Books logo.png This project has produced a book that can be downloaded or purchased.
Feel free to browse the full catalog of available OWASP books.

Main

OWASP Code Review Guide V2.0

Planned to be launched mid January 2014.

We are writing a new version of the OWASP code review guide.

OWASP Code review V2 Table of Contents

Contents

OWASP Code Review Guide Table of Contents

Summer of Code 2008

The Code review guide is proudly sponsored by the OWASP Summer of Code (SoC) 2008. For more information please see OWASP Summer of Code 2008.

Code Review Guide V1.1 Completed

The code review guide has been completed and is available here http://www.lulu.com/content/5678680 as a bound book.

Code review tool

The following link is for the new version of Code Crawler, code review tool which examines code for keywords discussed in the section "Crawling Code". It support Java and .NET code:

http://codecrawler.codeplex.com/Release/ProjectReleases.aspx

Owasp Orizon Code review engine

The Owasp Orizon Project is born in 2006 to provide a set of APIs to provide an opensource engine to provide static analysis services to developers that wants to build a code review tool.

The Owasp Orizon will evolve accordingly in order to implement security checks described in the Code Review Guide. With the framework a UI is also provided in order to give people a standalone tool to realize code review for the security flaws listed in the "The Owasp Code Review Top 9"


The Owasp Orizon main page is available here: Category:OWASP_Orizon_Project


Source code is hosted at Sourceforge.net site: http://orizon.sourceforge.net

Spring Of Code 2007

The Code review guide is proudly sponsored by the OWASP Spring of Code (SpOC) 2007. For more information please see Spring of Code 2007

Project Contributors

The OWASP Code Review project was conceived by Eoin Keary, the OWASP Ireland Founder and Chapter Lead. We are actively seeking individuals to add new sections as new web technologies emerge. If you are interested in volunteering for the project, or have a comment, question, or suggestion, please drop me a line mailto:eoin.keary@owasp.org

Join the Code Review Team

All of the OWASP Guides are living documents that will continue to change as the threat and security landscape changes.

We welcome everyone to join the Code Review Guide Project and help us make this document great. The best way to get started is to subscribe to the mailing list by following the link below. Please introduce yourself and ask to see if there is anything you can help with. We are always looking for new contributions. If there is a topic that you’d like to research and contribute, please let us know!

http://lists.owasp.org/mailman/listinfo/owasp-codereview

Roadmap

View the OWASP Code Review Project Roadmap

Project About

PROJECT INFO
What does this OWASP project offer you?
RELEASE(S) INFO
What releases are available for this project?
what is this project?
Name: OWASP Code Review Project (home page)
Purpose: The code review guide is currently at release version 1.1 and the second best selling OWASP book in 2008. Many positive comments have been feedback regarding this initial version and believe it’s a key enabler for the OWASP fight against software insecurity. It has even inspired individuals to build tools based on its information. The combination of a book on secure code review and tools to support such an activity is very powerful as it gives the developer community a place to start regarding secure application development.

Going forward I hope to further integrate with the ASVS and other guides such as the testing and ASDR guides shall be perfromed for version 2.0.

License: Creative Commons Attribution Share Alike 3.0
who is working on this project?
Project Leader(s):
how can you learn more?
Project Pamphlet: Not Yet Created
Project Presentation: View
Mailing list: Mailing List Archives
Project Roadmap: View
Main links:
Key Contacts
  • Contact the GPC to report a problem or concern about this project or to update information.
current release
Code Review Guide V2.0 - January 2011 - (no download available)
Release description: A release with major enhancements and other ideas is being developed. For further info please consult the release's roadmap.
Rating: Yellow button.JPG Not Reviewed - Assessment Details
last reviewed release
Code Review Guide V1.1 - 4 January 2009 - (download)
Release description:

This release is an expanded and improved version of the former OWASP Code Review Guide’s RC 2.0 version which contains the following additional and expanded chapters: Transactional Analysis, Threat Modelling and Analysis, Example reports and how to write one, Automated code review, Rich Internet Applications, The OWASP ESAPI, Code review Metrics, Integrating Code review with an existing SDLC.

Rating: Greenlight.pngGreenlight.pngGreenlight.png Stable Release - Assessment Details


other releases

Pages in category "OWASP Code Review Project"

The following 71 pages are in this category, out of 71 total.

A

B

C

D

E

H

I

J

L

O

P

R

R cont.

S

T

X