OWASP Incident Response Project

From OWASP
Revision as of 20:56, 9 April 2014 by Brennan (Talk | contribs)

Jump to: navigation, search
[edit]

OWASP Project Header.jpg

OWASP Incident Response Project

The OWASP Incident Response Project will provide users with a current set of tools and best practices for dealing with a hacked web application.


Introduction

You just learned that your company website has been HACKED now what do you do?

Description

This project is a guide of suggested best practices for stand-alone IR of a web application on dedicated hardware that you have 100% access to as well as when the application is part of a cloud service offering. The goal is to provide a best practices checklist that can be used to ensure chain of custody and to assist with investigations of root-cause.

Licensing

The OWASP Incident Response Project is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.


What is the OWASP Incident Response Project?

The OWASP Incident Response Project provides:

  • Helpful checklist of what you
  • Basic Incident Response Training
  • Best practices to lock down the OS and application to be proactive

Presentation

Link to presentation



Project Leader

Tom Brennan

Related Projects

OWASP Top 10

OWASP Cheat Sheets

OWASP Mod_Security CRS


Quick Download

News and Events

In Print

This project WILL be available as a publication when released.

Classifications

Owasp-incubator-trans-85.png Owasp-builders-small.png
Owasp-defenders-small.png
Cc-button-y-sa-small.png
Project Type Files DOC.jpg

Q1 <insert question>
A1 <insert answer>
Q2 <insert question>
A2 <insert answer>

Volunteers

Incident Response Project is developed by a worldwide team of volunteers. The primary contributors to date have been:

Others

  • xxx
  • xxx

As of 9-April-2014, the priorities are:

  • Collect materials in the public domain and list them as reference points.
  • Review existing materials and extract the Top 10 most important things for common common enviorments
  • Draft v1.0 of the guide

Involvement in the development and promotion of OWASP Incident Response Project is actively encouraged! You do not have to be a security expert in order to contribute. Some of the ways you can help:

  • Proof Reading
  • Graphic Design
  • Conduct Industry Survey
  • <insert your idea>

PROJECT INFO
What does this OWASP project offer you?
RELEASE(S) INFO
What releases are available for this project?
what is this project?
Name: OWASP Incident Response Project (home page)
Purpose: OWASP Incident Response Project will provide users with a current set of tools and best practices for dealing with a hacked web application.
License: Creative Commons Attribution ShareAlike 3.0 License (best for documentation projects)
who is working on this project?
Project Leader(s):
  • Tom Brennan @
how can you learn more?
Project Pamphlet: Not Yet Created
Project Presentation:
Mailing list: Mailing List Archives
Project Roadmap: View
Key Contacts
  • Contact Tom Brennan @ to contribute to this project
  • Contact Tom Brennan @ to review or sponsor this project
  • Contact the GPC to report a problem or concern about this project or to update information.
current release
Not Yet Published
last reviewed release
Not Yet Reviewed


other releases