[Owasp-leaders] Cheatsheets!

Jim Manico jim.manico at owasp.org
Tue Aug 25 22:30:58 UTC 2015

Thank you to everyone offering to help with the cheat sheets.

The role of a board member is filled with stressful situations and very 
difficult choices. I'm often mired in these difficult issues (often by 
my own doing, admittedly) and it's a big drain at times.

Thank you to everyone who responded offering to help with the Cheatsheet 
series. I appreciate the many positive responses and sharp folks 
offering to help. Working with you is why I joined OWASP in the first 

So thank you Bill and everyone else who offered to help with the draft 
cheat sheets.

To spare the leaders list, I'll reply to each of you off-list.


Jim Manico
Global Board Member
OWASP Foundation
Join me at AppSecUSA 2015!

On 8/25/15 9:57 AM, Bill Sempf wrote:
> Jim, I have a co-worker at a project at Alliance Data who is starting 
> up a threat modeling practice there, and he really knows his stuff. 
> I'm having him sign up, and use the talk page to collaborate with 
> anyone else who wants to help. After we get him hooked, maybe we can 
> suck him into a couple of other pages.
> I recommend others do this too - find people on your projects who you 
> can drag kicking and screaming <ctrl-BS> <ctrl-BS> <ctrl-BS> <ctrl-BS> 
> gently bring into the OWASP fold with a nice straightforward Cheat 
> Sheet project.
> S
> On Mon, Aug 24, 2015 at 10:18 PM, Jim Manico <jim.manico at owasp.org 
> <mailto:jim.manico at owasp.org>> wrote:
>     Hello Leaders,
>     The following OWASP cheat sheet are still in draft form and need
>     final editing. I'd love to get these done and drop the "Draft"
>     section from the project by the end of this year.
>     Is anyone interested in "own" a topic and drive it to completion?
>     I'll help.
>     *Draft Cheat Sheets*
>       * Access Control Cheat Sheet
>         <https://www.owasp.org/index.php/Access_Control_Cheat_Sheet>
>       * Application Security Architecture Cheat Sheet
>         <https://www.owasp.org/index.php/Application_Security_Architecture_Cheat_Sheet>
>       * Business Logic Security Cheat Sheet
>         <https://www.owasp.org/index.php/Business_Logic_Security_Cheat_Sheet>
>       * PHP Security Cheat Sheet
>         <https://www.owasp.org/index.php/PHP_Security_Cheat_Sheet>
>       * Secure Coding Cheat Sheet
>         <https://www.owasp.org/index.php/Secure_Coding_Cheat_Sheet>
>       * Secure SDLC Cheat Sheet
>         <https://www.owasp.org/index.php/Secure_SDLC_Cheat_Sheet>
>       * Threat Modeling Cheat Sheet
>         <https://www.owasp.org/index.php/Threat_Modeling_Cheat_Sheet>
>       * Web Application Security Testing Cheat Sheet
>         <https://www.owasp.org/index.php/Web_Application_Security_Testing_Cheat_Sheet>
>       * Grails Secure Code Review Cheat Sheet
>         <https://www.owasp.org/index.php/Grails_Secure_Code_Review_Cheat_Sheet>
>       * IOS Application Security Testing Cheat Sheet
>         <https://www.owasp.org/index.php/IOS_Application_Security_Testing_Cheat_Sheet>
>       * Key Management Cheat Sheet
>         <https://www.owasp.org/index.php/Key_Management_Cheat_Sheet>
>       * Insecure Direct Object Reference Prevention Cheat Sheet
>         <https://www.owasp.org/index.php/Insecure_Direct_Object_Reference_Prevention_Cheat_Sheet>
>       * Content Security Policy Cheat Sheet
>         <https://www.owasp.org/index.php/Content_Security_Policy_Cheat_Sheet>
>     Aloha,
>     -- 
>     Jim Manico
>     Global Board Member
>     OWASP Foundation
>     https://www.owasp.org
>     Join me at AppSecUSA 2015!
>     _______________________________________________
>     OWASP-Leaders mailing list
>     OWASP-Leaders at lists.owasp.org <mailto:OWASP-Leaders at lists.owasp.org>
>     https://lists.owasp.org/mailman/listinfo/owasp-leaders

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/owasp-leaders/attachments/20150825/e5e4acd7/attachment.html>

More information about the OWASP-Leaders mailing list