Difference between revisions of "GPC Project Details/OWASP Enterprise Security API"

From OWASP
Jump to: navigation, search
m
m (Undo revision 90432 by Jmanico (Talk))
Line 9: Line 9:
 
* '''There are optionally your own implementations for each security control.''' There may be application logic contained in these classes which may be developed by or for your organization. An example: enterprise authentication.
 
* '''There are optionally your own implementations for each security control.''' There may be application logic contained in these classes which may be developed by or for your organization. An example: enterprise authentication.
 
| project_license = [http://en.wikipedia.org/wiki/BSD_license BSD license]
 
| project_license = [http://en.wikipedia.org/wiki/BSD_license BSD license]
 +
| leader_name = Jeff Williams
 +
| leader_email = jeff.williams@owasp.org
 +
| leader_username = Jeff_Williams
 +
| past_leaders_special_contributions =
 +
| maintainer_name = Jim Manico
 +
| maintainer_email = jim@manico.net
 +
| maintainer_username =jmanico
 +
| contributor_name1 = Chris Schmidt
 +
| contributor_email1 =
 +
| contributor_username1 =
 +
| contributor_name2 = Kevin Wall
 +
| contributor_email2 =
 +
| contributor_username2 =
 +
| contributor_name3 =
 +
| contributor_email3 =
 +
| contributor_username3 =
 +
| contributor_name4 =
 +
| contributor_email4 =
 +
| contributor_username4 =
 +
| contributor_name5 =
 +
| contributor_email5 =
 +
| contributor_username5 =
 +
| contributor_name6 =
 +
| contributor_email6 =
 +
| contributor_username6 =
 +
| contributor_name7 =
 +
| contributor_email7 =
 +
| contributor_username7 =
 +
| contributor_name8 =
 +
| contributor_email8 =
 +
| contributor_username8 =
 +
| contributor_name9 =
 +
| contributor_email9 =
 +
| contributor_username9 =
 +
| contributor_name10 =
 +
| contributor_email10 =
 +
| contributor_username10 = 
 
| pamphlet_link = http://www.owasp.org/images/8/81/Esapi-datasheet.pdf
 
| pamphlet_link = http://www.owasp.org/images/8/81/Esapi-datasheet.pdf
 
| presentation_link = http://owasp-esapi-java.googlecode.com/files/OWASP%20ESAPI.ppt
 
| presentation_link = http://owasp-esapi-java.googlecode.com/files/OWASP%20ESAPI.ppt

Revision as of 16:35, 30 September 2010

PROJECT INFO
What does this OWASP project offer you?
what is this project?
OWASP Enterprise Security API

Purpose: ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications. The ESAPI libraries are designed to make it easier for programmers to retrofit security into existing applications. The ESAPI libraries also serve as a solid foundation for new development. Allowing for language-specific differences, all OWASP ESAPI versions have the same basic design:

  • There is a set of security control interfaces. They define for example types of parameters that are passed to types of security controls.
  • There is a reference implementation for each security control. The logic is not organization‐specific and the logic is not application‐specific. An example: string‐based input validation.
  • There are optionally your own implementations for each security control. There may be application logic contained in these classes which may be developed by or for your organization. An example: enterprise authentication.

License: BSD license

who is working on this project?
Project Leader: Jeff Williams @

Project Maintainer: Jim Manico @

Project Contributor(s):

  • Chris Schmidt
  • Kevin Wall
how can you learn more?
Project Pamphlet: View

3x slide Project Presentation: View

Mailing list: Subscribe or read the archives

Project Roadmap: N/A

Main links:

Project Health: Yellow button.JPG Not Reviewed (Provisional)
To be reviewed under Assessment Criteria v2.0

Key Contacts
  • Contact Jeff Williams @ to contribute, review or sponsor this project
  • Contact the GPC to report a problem or concern about this project or to update information.