OWASP Project Reviews 2018

Revision as of 06:10, 13 June 2018 by Rick.mitchell (talk | contribs) (Minor tweak)

Jump to: navigation, search

Overview of Project Reviews:

OWASP is reviewing projects who wish to graduate from Incubator to Lab to Flagship.  The purpose of this assessment is to determine whether a project meets the minimum criteria to graduate as outlined in the Project Health Assessment Criteria Document.  The review process begins with an initial self-assessment done by the project leader and reviewed by Harold Blankenship.  Next, the assessment enters the peer review phase where we ask volunteers in our OWASP Community to participate and finalize the results. I have included a Sample of a Project Assessment for your review and consideration.

OWASP Project Reviews @ APPSEC USA 2018

  • Harold Blankenship (Director of Projects and Technology)

OWASP Volunteers:

We need volunteers for the AppSec EU 2018 Reviews. Please contact the Project Review team to volunteer

Description of Scope of Work:

Lab to Flagship Status

OWASP Juiceshop Project

OWASP DefectDojo Project

Incubator to Lab Status

OWASP Glue Tool Project

OWASP Project Health Checks:

Review Forms: Code Health Check Tool Health Check Documentation Health Check

Lab Projects:

OWASP Hackademic Challenges Project

OWASP Mantra Security Framwork

OWASP Security Ninjas AppSec Training Program

OWASP Security Knowledge Framework Project

Lab Documentation Projects:

OWASP Application Security Guide for Cisos Project

OWASP Cisco Survey

Incubator Projects

Graduation Project: OWASP Mobile Security Testing Guide Project

https://www.owasp.org/index.php/OWASP_Secure_Headers_Project - Response on needed on request to get an external host

https://www.owasp.org/index.php/OWASP_WASC_Distributed_Web_Honeypots_Project - No updates since 2015

https://www.owasp.org/index.php/OWASP_Faux_Bank_Project - No updates since 2015

https://www.owasp.org/index.php/OWASP_Droid10_Project - No updates since March 15

https://www.owasp.org/index.php/OWASP_WAP-Web_Application_Protection - no updates since 2015 and no repository still in salesforge

https://www.owasp.org/index.php/OWASP_Mutillidae_2_Project - No updates since 2015 still using salesforge

https://www.owasp.org/index.php/OWASP_WebSpa_Project - no updates since March 2015 last update in salesforge 2/21/2016

https://www.owasp.org/index.php/OWASP_Rainbow_Maker_Project - Last release 12/11/2015 and no updates since May 2015

https://www.owasp.org/index.php/Category:OWASP_.NET_Project - No updates March 23, 2016

https://www.owasp.org/index.php/OWASP_WASC_Web_Hacking_Incidents_Database_Project - no updated since March 12, 2015

https://www.owasp.org/index.php/OWASP_Application_Security_Program_Quick_Start_Guide_Project - no updates since january 2015

https://www.owasp.org/index.php/OWASP_Secure_Configuration_Guide#tab=Main - No updates since April 2016 - no updates to guide

https://www.owasp.org/index.php/OWASP_RFP-Criteria - no updates since March 2016

https://www.owasp.org/index.php/Category:OWASP_Top_10_fuer_Entwickler - no real updates on news since 2013 some updates to the wiki