SoftwareSecurity2014/Group 4/Log

• 25 March : Discussion of the case study and the verification requirements
• 6 April  : Separate work - installing Fortify and RATS on each computer
• 23 April : Meeting

 ** Selected Mibew 1.6.11 and V5
 ** Ran Fortify and analysed it using Audit Workbench
 ** Ran RATS with: rats --quiet --xml -w 3
 ** Re-ran RATS with 
 ** Read OWASP_ASVS_2009 Web App Std Release for V5 for Level 1B

• 27 April : Separate work

 ** Analyzing the RATS and Fortify Result
 ** Drafting the paper and wiki page

• 29 April : Meeting

 ** Discussion of the RATS and Fortify Result
 ** Combining each analysis of the RATS and Fortify Result
 ** Discussion of Paper and Wiki Draft

• 4 May : Separating Work

 ** Finalization of Paper and Wiki page
 ** Submitting

• 10 May : Checking Files

 ** Installing Mibew messenger on local web server
 ** Trying the PHP documenter tool to get some outline of Mibew
 ** Separating all the files in 'Operator' folder to check for V5.2 and V5.3 

• 15 May : Checking relevant functions for the requirements

 ** Checking the relevant functions with input validation more thoroghly
 ** Separating the files in the 'View' folder for further checking

• 22 May :

 ** Distributing the work for all the requirements of Level 2B for the group members

• 28 May :

 ** Discussion about some crucial functions and combination of the previous results

• 3 Jun :

 ** Analyzing the verdict of V5.4, V5.5, V5.6 and V5.7

• 4 Jun :

 ** Starting to write the wiki pages and Updating the results

• 5 Jun :

 ** Finishing the wiki pages