Difference between revisions of "Projects/OWASP Secure Coding Practices - Quick Reference Guide/Releases/SCP v2"

From OWASP
Jump to: navigation, search
 
Line 77: Line 77:
 
| links_name1 = SCP v2 > English Version > Word file
 
| links_name1 = SCP v2 > English Version > Word file
  
| links_url2 = http://www.owasp.org/images/e/e2/OWASP_SCP_Quick_Reference_PT-BR_v1.0.pdf
+
| links_url2 = https://www.owasp.org/images/b/b3/OWASP_SCP_v1.3_pt-BR.pdf
| links_name2 = SCP v2 > Portuguese Translation > Pdf file
+
| links_name2 = SCP v2 > Brazilian Portuguese Translation > Pdf file
  
| links_url3 = https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf
+
| links_url3 = https://www.owasp.org/images/6/6d/OWASP_SCP_v1.3_pt-PT.pdf
| links_name3 = SCP v2 > Korean Translation > Pdf file
+
| links_name3 = SCP v2 > Portugal Portuguese Translation > Pdf file
  
| links_url4 = http://www.owasp.org/images/c/c8/OWASP_SCP_Quick_Reference_Guide_SPA.doc
+
| links_url4 = https://www.owasp.org/images/8/8e/2011%EB%85%846%EC%9B%94_OWASP_%EC%8B%9C%ED%81%90%EC%96%B4%EC%BD%94%EB%94%A9%EA%B7%9C%EC%B9%99_v2_KOR.pdf
| links_name4 = SCP v2 > Spanish Translation > doc file
+
| links_name4 = SCP v2 > Korean Translation > Pdf file
  
| links_url5 = http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls
+
| links_url5 = http://www.owasp.org/images/c/c8/OWASP_SCP_Quick_Reference_Guide_SPA.doc
| links_name5 = Secure coding guide assessment feedback disposition
+
| links_name5 = SCP v2 > Spanish Translation > doc file
  
| links_url6 = http://www.owasp.org/index.php/GPC_Project_Assessment/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide_-_SCP_v2
+
| links_url6 = http://www.owasp.org/images/6/64/SCP-QRG_Revisions_History.xls
| links_name6 = Assessment Control/Progress and Links
+
| links_name6 = Secure coding guide assessment feedback disposition
 +
 
 +
| links_url7 = http://www.owasp.org/index.php/GPC_Project_Assessment/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide_-_SCP_v2
 +
| links_name7 = Assessment Control/Progress and Links
  
 
}}
 
}}

Latest revision as of 21:27, 27 February 2012

back to project home page

what is this release?
SCP v2 - 8 November 2010 - (download)
Release Description:
  • Sections of the guide were re-ordered, renamed and new sections were added to map more closely to the ASVS. However input and output handling was left at the beginning, as apposed to be lower in the list as it is with ASVS, since this is the source of the most common vulnerabilities and ones that effect even very simple applications.
  • Entirely new sections include:
    • Cryptographic Practices,
    • Error Handling and Logging".
  • The guide's "Data Validation" section was split to match ASVS and is now represented as two separate sections "Input Validation" and "Output Encoding",
  • The guide's "Authorization and Access Management" section was renamed to Access Control,
  • The guide's "Sensitive Information Storage or Transmission" section was split to match ASVS and is now two new sections "Data Protection" and "Communication Security",
  • Additional practices were added to most sections to account for requirements in ASVS that the guide did not specifically cover and some rewording of existing practices was also done.
  • Additional terms were added to the glossary.
  • Several improvements were made thanks to new contributors.
Release License: Creative Commons Attribution Share Alike 3.0
who worked on this release?
Release Leader(s):
Release Contributor(s):
  • Brad Causey (As GPC's Reviewer) @
  • Anurag Agarwal (As peer Reviewer) @
  • Andrew Petukhov @
  • Jason Coleman
  • Leandro Gomes (as Portuguese Translator) @
  • Sílvio Correia Filho (as Portuguese Translator) @
  • Tarcizio Vieira Neto (as Portuguese Translator) @
  • Canedo,Gerardo (as Spanish Translator)
  • Flores,Mauro (as Spanish Translator)
  • Hill,Alberto (as Spanish Translator)
how can you learn more?
Release Notes: View
Main links:
Release Rating: Greenlight.pngGreenlight.pngGreenlight.png Stable Release - Assessment Details
Key Contacts
  • Contact the GPC to report a problem or concern about this release info or to update information.