[OWASP-TESTING] Testing Guide Version 1

[Shields, Larry]

I can read through 3B when Andrew is done and provide some suggestions
as well, I've previously done Code Review for a few years.

-Larry

-----Original Message-----
From: Andrew van der Stock [mailto:vanderaj at greebo.net] 
Sent: Wednesday, June 30, 2004 6:10 PM
To: Daniel at deeper.co.za; 'owasp '
Subject: RE: [OWASP-TESTING] Testing Guide Version 1


I can do 3B. That's my day job. 

Andrew

-----Original Message-----
From: owasp-testing-admin at lists.sourceforge.net
[mailto:owasp-testing-admin at lists.sourceforge.net] On Behalf Of Daniel
Sent: Wednesday, 30 June 2004 11:54 PM
To: owasp 
Subject: Re: [OWASP-TESTING] Testing Guide Version 1

Can anyone, with the relevant experience, help with these sections?

Chapter 5, which techniques..
Since im bad at doing pie charts, could anyone rustle up one for this?

1A - SDLC Process Review

3B - Code Reviews
Armed with a good understanding of how the code is structured and why
certain things were coded the way they were, the tester can now examine
the actual code for security defects.


Thanks,






> Once again work is getting in the way and I am holding up the release 
> of this document. Do we have anyone with good English and a few hours 
> (this is really all it needs) to go through this final draft, accept 
> changes where appropriate and complete the minor sections that are not

> complete?
>
>
> I would like to release this on Friday as a draft and send it to the 
> tech editor for its "tech editing re-write at the same time".
>
> I will send anyone who can do this in the next 48 hours an OWASP Polo 
> shirt if that's make a difference ;-)
>
>




-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training. Attend
Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
owasp-testing mailing list
owasp-testing at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/owasp-testing





-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training. Attend
Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
owasp-testing mailing list
owasp-testing at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/owasp-testing