Difference between revisions of "Projects/OWASP LAPSE Project"

From OWASP
Jump to: navigation, search
(15 intermediate revisions by 2 users not shown)
Line 1: Line 1:
{{Template:Project About
+
{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Project About</noinclude>
 
| project_name = OWASP LAPSE Project
 
| project_name = OWASP LAPSE Project
 
| project_home_page = OWASP LAPSE Project
 
| project_home_page = OWASP LAPSE Project
  
| project_description = LAPSE stands for a <u>L</u>ightweight <u>A</u>nalysis for <u>P</u>rogram <u>S</u>ecurity in <u>E</u>clipse. LAPSE is designed to help with the task of auditing <b>Java J2EE</b> applications for common types of security vulnerabilities found in Web applications. LAPSE was developed by [http://suif.stanford.edu/~livshits/ Benjamin Livshits] as part of the [http://suif.stanford.edu/~livshits/work/griffin/ Griffin Software Security Project]. The project's second push is being led by Pablo Martín Pérez
+
| project_description = LAPSE stands for a <u>L</u>ightweight <u>A</u>nalysis for <u>P</u>rogram <u>S</u>ecurity in <u>E</u>clipse. LAPSE is designed to help with the task of auditing <b>Java EE Applications</b> for common types of security vulnerabilities found in Web Applications. LAPSE was developed by [http://suif.stanford.edu/~livshits/ Benjamin Livshits] as part of the [http://suif.stanford.edu/~livshits/work/griffin/ Griffin Software Security Project]. The project's second push is being led by Pablo Martín Pérez, [http://www.evalues.es/index.php/en.html  Evalues Lab] ICT Security Researcher, developing LAPSE+, an enhanced version of LAPSE.
  
 
| project_license =  [http://www.gnu.org/licenses/gpl-3.0-standalone.html GNU General Public License v3]
 
| project_license =  [http://www.gnu.org/licenses/gpl-3.0-standalone.html GNU General Public License v3]
Line 9: Line 9:
 
| leader_name1 = Pablo Martín Pérez
 
| leader_name1 = Pablo Martín Pérez
 
| leader_email1 = pablo.perez@owasp.org
 
| leader_email1 = pablo.perez@owasp.org
| leader_username1 =  
+
| leader_username1 = Pablo Martín Pérez
 +
 
 +
| leader_name2 = José María Sierra Cámara
 +
| leader_email2 = jose.maria.sierra@owasp.org
 +
| leader_username2 =
  
 
| contributor_name1 = Ben Livshits (former lead, non-active)
 
| contributor_name1 = Ben Livshits (former lead, non-active)
Line 25: Line 29:
 
| mailing_list_name = https://lists.owasp.org/mailman/listinfo/owasp-lapse
 
| mailing_list_name = https://lists.owasp.org/mailman/listinfo/owasp-lapse
  
| project_road_map =  
+
| project_road_map = http://www.owasp.org/index.php/OWASP_LAPSE_Project/Roadmap
  
| links_url1 = http://research.microsoft.com/en-us/um/people/livshits/
+
| links_url1 = http://www.evalues.es/index.php/en.html
| links_name1 = Former project's lead, Ben Livshits, web page
+
| links_name1 = Evalues - IT Security Evaluation
  
| links_url2 =  
+
| links_url2 = http://research.microsoft.com/en-us/um/people/livshits/
| links_name2 =
+
| links_name2 = Former project's lead, Ben Livshits, web page
  
+
| links_url3 = http://www.owasp.org/index.php/OWASP_Java_Project
 +
| links_name3 = OWASP Java Project
  
| release_1 =  
+
| release_1 = LapsePlus 2.8.1
 
| release_2 =  
 
| release_2 =  
 
| release_3 =
 
| release_3 =
 
| release_4 =
 
| release_4 =
 +
<!--- The line below is for GPC usage only. Please do not edit it --->
 +
| project_about_page = Projects/OWASP LAPSE Project
 
}}
 
}}

Revision as of 13:46, 18 April 2011

PROJECT INFO
What does this OWASP project offer you?
RELEASE(S) INFO
What releases are available for this project?
what is this project?
Name: OWASP LAPSE Project (home page)
Purpose: LAPSE stands for a Lightweight Analysis for Program Security in Eclipse. LAPSE is designed to help with the task of auditing Java EE Applications for common types of security vulnerabilities found in Web Applications. LAPSE was developed by Benjamin Livshits as part of the Griffin Software Security Project. The project's second push is being led by Pablo Martín Pérez, Evalues Lab ICT Security Researcher, developing LAPSE+, an enhanced version of LAPSE.
License: GNU General Public License v3
who is working on this project?
Project Leader(s):
Project Contributor(s):
  • Ben Livshits (former lead, non-active)
how can you learn more?
Project Pamphlet: Not Yet Created
Project Presentation:
Mailing list: Mailing List Archives
Project Roadmap: View
Main links:
Key Contacts
  • Contact the GPC to report a problem or concern about this project or to update information.
current release
LapsePlus 2.8.1 - March 2011 - (download)
Release description: LAPSE+ is a security scanner for detecting vulnerabilities of untrusted data injection in Java EE Applications. It has been developed as a plugin for Eclipse Java Development Environment, working specifically with Eclipse Helios and Java 1.6 or higher. LAPSE+ is based on the GPL software LAPSE, developed by the SUIF Compiler Group of Stanford University. This new release of the plugin developed by Evalues Lab of Universidad Carlos III de Madrid provides more features to analyze the propagation of the malicious data through the application and includes the identification of new vulnerabilities.
Rating: Yellow button.JPG Not Reviewed - Assessment Details
last reviewed release
Not Yet Reviewed


other releases