Goals/Deliverables of the team:

• Develop Best Practices
• Create an Appendix to Critical Host Policy
• Draft Web Application Standards - Technical Document
  • Use OWASP as a starting point
• Conduct 1-2 hour Annual Training Session
• Develop Code Samples (Library of code sets by application - Java, Cold Fusion, etc.)
• Volunteer Code Review (Between schools/centers); Special Interest Group;
  • PennKey "gatekeeper" - Code Review is required if you use PennKey to Authenticate.

Methodology:

• Begin by walking through OWASP Top 10 in detail, one vulnerability at a time, to develop Penn's Best Practices/Technical Documentation.

Communication Vehicles:

• IT Roundtable
• Website

Back to SWAT Homepage

Last updated: Wednesday, January 3, 2007