Short for Open Web Application Security Project, an open source community project set up to develop software tools and knowledge-based documentation for Web application security. Some of the project s work includes:
- A guide to define security requirements to build secure Web applications.
- Developing an industry standard testing framework for Web application security.
- VulnXML – A standard data exhange format to allow commercial, open source and research tools to communicate and interoperate.
- Web Scarab – An open source enterprise-level Web application scanner.
- Developing a component-based approach to filtering malicious input and output to a Web application.
- Web Maven – An intentionally insecure Internet bank users can download and learn from.
All of the project s software and documentation is released under the GNU GPL, and the project is staffed entirely of volunteers.
