Software Security/Group 9/Log

Group Log

9-May-11 -- 13-Jun-11

• Manual code review is done.

30-Apr-11

• The section for project management is initialized in order to get full participation of all team member. Including personal time-writing and logs, participation commitment, team member agreement, group meeting schedule, group progress calendar and project governance.
• Wiki pages are updated to reflect the proposed changes.

22-Apr-11

• Published the report for the first task based on the draft and previous discussions.

21-Apr-11

• A draft of the report for the first task is written.
• Our run of CodeSecure over phpBB2 + report generation finally finished.

19-Apr-11

• A nightly build of CodeSecure along with a one-week license obtained. The program runs successfully, but running over phpBB2 seems to take a long time.

12-Apr-11

• Fortify memory issue resolved.

11-Apr-11

• Tried Fortify, got results with several low memory warnings.

07-Apr-11

• Found a Pixy mirror; tried to contact the authors, no replies received yet; successfully tried RATS.

26-Mar-11

• Fortify license received
• Successfully tried SWAAT, Yasca, CodeScan, also tried RATS but failed.

25-Mar-11

• Asked for Fortify license from Fabian

21-Mar-11 Meeting #0

• V2 is chosen as the group topic and the professor is notified about this via email immediately.
• Found out that it is likely that not everyone will be able to physically attend every meeting. Decision: summary of each meeting, containing all decisions made, will be sent to every member of the group after the meeting. The decisions will be effective immediately, without having to wait for the views of those who were not present. Members who are not present at the meeting can still raise their opinions later, via email or any other means. Decisions can be changed if necessary.

19-Mar-11

• Group formed, listed as group 9 in the wiki.
• Topic selection started. (Preferences: Roberto V2/V4/V6, Ping V6/V2, Zhuo V2/V6, Yuanhao and Zong V2/V4.)

Personal Log

In order to ensure that everyone contributes to the project, we require all group members to keep personal logs. These logs are accessible from our Personal Logs page.