Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 4 additions & 8 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,12 +1,8 @@
The home of the OWASP Secure Logging Benchmark project which can be found
at: [www-project-secure-logging-benchmark](https://owasp.org/www-project-secure-logging-benchmark/).

Logging and monitoring is often an afterthought, or something that is built by developer for developers. This project
moved the mindset of the Developer from measuring system and preformance metrics or debugging towards logging
holistically. This project is a movement more than it is a standard. Logs give insights into code quality and bad logs
can be a symptom of bad code. This project contains training material and approached to move your logs to build in
security and forensics capabillities within the development cycle. This project will cover a varienty of things to
consider within designing the logging that is best for your application. It includes a Benchmarking tool which is still
in development to rate your logs in terms of maturity in terms of system monitoring, performance metrics, forensic
Logging and monitoring is often an afterthought, or something that is built by developers for developers. This project
moved the mindset of the developer from measuring system and performance metrics or debugging towards holistic logging. This project is a movement more than it is a standard. Logs give insights into code quality, and bad logs can be a symptom of bad code. This project contains training material and approaches to move your logs to build in
security and forensics capabilities within the development cycle. This project will cover a variety of considerations in designing the logging that is best for your application. It includes a benchmarking tool, which is still in development, to rate the maturity of your logs, in terms of system monitoring, performance metrics, forensic
information and even deductables for sensitive data disclosure. The aim is to empower developers to better develop logs
with future breaches in mind. This is not a silver bullet, but a tool to guiding how you think and approach logs.
with future breaches in mind. This is not a silver bullet, but a tool to guide how you think and approach logs.