Brontekst bekijken van SoftwareSecurity2014/Group 9

== Group nr. 9 ==

Group members:

* Roeland Krak
* Joep Peeters
* Kim Beunder
* Joey de Vries
* Stijn van Winsen
All from Twente University


Topic: Verification Requirements V2 and V7 phpBB

{{hilite|(Erik:Very good work!)}}

== Deliverables ==


*[[SoftwareSecurity2014/Group_9/OWASP ASVS Level1B Analysis of phpBB | OWASP Verification Report - Level1B]]
**[[SoftwareSecurity2014/Group_9/OWASP ASVS Level1B Analysis of phpBB#results | verdict ]]

*[[SoftwareSecurity2014/Group_9/OWASP ASVS Level2B Analysis of phpBB | OWASP Verification Report - Level2B]]
**[[SoftwareSecurity2014/Group_9/OWASP ASVS Level2B Analysis of phpBB#results | verdict ]]

*[[SoftwareSecurity2014/Group_9/Code_Scanning_Reflection | Reflection on code scanners ]]

:Describe your impressions about the tools, in capabilities, limitations, etc. 
:Also, did you learn anything about specific security vulnerabilities from using them?

*[[SoftwareSecurity2014/Group_9/Reflection | Reflection on the whole process ]]
: Reflect on the whole process of doing a code review, or "Application Security Verification", in the way you did.

*[[SoftwareSecurity2014/Group_9/Log |Log of what we have been doing so far]]

:The log should be a chronological list of who has been doing what, with dates.
:Also useful to document decisions on who will be doing what, and by when.