OWASP

OWASP projects are a set of related tasks that have a specific development plan and development team.

OWASP project leaders are responsible for defining the image, scheme and objectives of the project, they are also involved in project promotion and recruitment. Currently, there are more than 130 active OWASP projects, and the number of these projects is growing weekly. Projects are one of the most popular divisions of OWASP, as they give activists the opportunity to freely test various theories and ideas with professional support from the OWASP community.

Everything created by OWASP: tools, documentation, and code libraries is divided into the following categories.

Security is tools and documentation that can be used to defend against attacks and exploit system weaknesses.

Discovery is tools and documentation that can be used to detect attacks and system failures .

A cycle is a tool and documentation that can be used to add security related work to the software life cycle .

Some of the OWASP Projects

• OWASP Application Security Verification Standard (ASVS) - The standard for conducting security checks of applications.
• The OWASP Development Guide provides practical advice and code examples for J2EE, ASP.NET, and PHP. Seriously revised in 2014, the Development Guide covers an extensive array of security issues for the application tier, from SQL injection to advanced issues such as phishing , credit card processing, session fixing, cross-site request forgery , reconciliation and privacy.
• The OWASP Testing Guide includes a “best practice” penetration testing framework that users can use in their organizations and a “low-level” penetration testing guide that describes testing techniques for the most common security issues in web applications and web services.
• The OWASP Version 1.1 Code Review Guide is the second-largest print publication released by OWASP in 2008. At the same time, version 1.0 already gathered a lot of positive reviews and became one of the key products that allow OWASP to deal with software security problems.
• OWASP ZAP Project : Zet Attack Proxy is an easy-to-use built-in penetration testing tool for finding vulnerabilities in web applications. It is designed for use by people with various security backgrounds and is the benchmark for developers and functional testers who have no experience in penetration testing.
• OWASP Top 10 : The goal of the Top 10 project is to increase awareness of application security by identifying the most critical risks that threaten organizations. The Top 10 project is referenced by many standards , tools and organizations, including MITRE, PCI DSS , DISA, FTC, and many others.
• OWASP Software Completion Model : This project seeks to create a useful framework to help organizations formulate and implement application security strategies, taking into account the specific business risks that the organization faces.
• Webgoat is a knowingly unreliable web application created by OWASP as a guide to writing safe code. A tutorial and a set of different courses are supplied with the application, telling students how to use vulnerability information to write secure code.
• OWASP Mantra Security Framework : A collection of hacking tools, extensions, and scripts based on Mozilla Firefox .
• Many other security tools and applications are available in the OWASP project structure .

OWASP was founded on September 9, 2001 by Mark Curfy and Dennis Groves. From the end of 2003, Jeff Williams served as the volunteer chairman of OWASP until September 2011. The current chairman is Michael Coates, and vice chairman is Eoyne Kiri . The OWASP Foundation, organization 501 (c) (3) (in the United States), was established in 2004 and supports OWASP projects and infrastructure. OWASP does not serve the personal goals of its leaders, but the dissemination of knowledge.

OWASP leaders are responsible for making technical management decisions, project priorities, schedules, and product releases.

In general, OWASP leaders can be perceived as the management of the OWASP Foundation.

OWASP officially employs 8 people, as a result of which the project has extremely low costs, covered by conferences, corporate sponsors and advertising. OWASP annually awards grants to corporate and individual members for the development of promising security applications.

Since 2011, OWASP is registered as a non-profit organization in Belgium under the name OWASP Europe VZW.

• 2014 - Awards ^[10] .

• Computer security
• Kali Linux
• Security bug

• OWASP Project
• OWASP Russian Branch Page
• An article about the Top 10 project
• OWASP Application Security Verification Standard (ASVS)
• Writing Secure Code (MS Press) ISBN 0-7356-1722-8
• Threats and Countermeasures (MSDN)
• Translation of the OWASP methodology into Russian.
• Translation and adaptation of OWASP Mobile Top 10 into Russian.