Confirmed users
529
edits
Security/Automation/Winter Of Security 2016: Difference between revisions
Jump to navigation
Jump to search
Security/Automation/Winter Of Security 2016 (view source)
Revision as of 14:51, 18 May 2016
, 18 May 2016no edit summary
(Created page with "= Winter Of Security 2016 = right|500px The Winter of Security (MWOS) is Mozilla's program to involve students with Securit...") |
No edit summary |
||
| Line 28: | Line 28: | ||
Mozilla advisors will be available weekly on video (Vidyo, Google Hangout or Skype) to discuss progress and roadblocks, and provide help. Professors can set intermediary deadlines if needed, and have complete control over the grading of their students. | Mozilla advisors will be available weekly on video (Vidyo, Google Hangout or Skype) to discuss progress and roadblocks, and provide help. Professors can set intermediary deadlines if needed, and have complete control over the grading of their students. | ||
== | == Project Ideas (non-definitive) == | ||
=== | === A Firefox addon for TLS observations === | ||
Proposed by: ulfr | |||
Monitoring TLS certificates and ciphersuites requires deploying scanners in various locations. Would it be possible to write an addon that lets users subscribe to a scanning queue and participate in the scanning effort? | |||
=== A web interface for Mozilla Investigator === | |||
Proposed by: ulfr | |||
MIG is primarily a command line tool, but a web interface would be a nice addition for people who just want to visualize results. This project would require changes to the backend API of MIG to handle various permissions levels, as well as a good knowledge of javascript to write the frontend. | |||
=== A CI platform for security testing === | |||
Proposed by: ulfr | |||
Developers write their code in GitHub and use CI tools like CircleCI, Travis-CI or Taskcluster to run test and tasks when code is submitted. The goal of this project is to write a webhook-driven CI tool that runs security tests on github projects. Tests include dependency checking (nps, pip --outdated, ...), zap baseline scanning, git commit integrity, ... | |||
=== New Idea Template === | |||
Proposed by: | |||
...description... | |||
== FAQ == | == FAQ == | ||