We are back again with yet another OWASP Spotlight series and this time we have a project which needs no introduction and I got the chance to interact with Andrew van der Stock who is OWASP Foundation Executive Director and Project Leader that is OWASP TOP10 with us who is one of the leaders.
The OWASP Top 10 is a book/referential document outlining the 10 most critical risks security concerns for web application security. The report is put together by a team of security experts from all over the world and the data comes from n number of organisations and then analysed.
OWASP refers to the Top 10 as an ‘awareness document’ and recommend that all organisations incorporate the report into their processes in order to mitigate security risks. One thing to remember, it is not a standard. Organisations can define the matrix based on their own environment. This means that it’s not OWASP who defines Top10 but takes data from so many people, organisations and open it up for us for feedbacks. Analysis is very interesting and actually got Top 10 a total of forty-three CWA to tell to test the test where every single item is a separate weakness that can be tested.
Check out the discussion on the OWASP Spotlight series - https://youtu.be/RMkoIrpz8ug
#owasptop10 #OWASP #security #appsecurity
