SoftwareSecurity2014/Group 9

Group nr. 9

Group members:

• Roeland Krak
• Joep Peeters
• Kim Beunder
• Joey de Vries
• Stijn van Winsen

All from Twente University

Topic: Verification Requirements V2 and V7 phpBB

(Erik:Very good work!)

Deliverables

• OWASP Verification Report - Level1B
  • verdict

• OWASP Verification Report - Level2B
  • verdict

• Reflection on code scanners

Describe your impressions about the tools, in capabilities, limitations, etc.

Also, did you learn anything about specific security vulnerabilities from using them?

• Reflection on the whole process

Reflect on the whole process of doing a code review, or "Application Security Verification", in the way you did.

• Log of what we have been doing so far

The log should be a chronological list of who has been doing what, with dates.

Also useful to document decisions on who will be doing what, and by when.