4 ms·
Is the meaning of OWASP a commonly known thing? I've never heard of it and their GitHub repository README fails to expand on its meaning.
by jbranchaud 12y ago
Is the meaning of OWASP a commonly known thing? I've never heard of it and their GitHub repository README fails to expand on its meaning.
- tptacek 12y agoIt's a community of web application security professionals of varying sorts. It's a very weird organization.
- werkshy 12y agoI don't understand why web professionals are publishing their work in .docx format, whatever the standard of the writing.
- tshadwell 12y agoThe Open Web App Security Project has a pretty good (but alas not very up-to-date) catalogue of common web application exploits.
- anonymousDan 12y agoCould you point me to alternatives that are more up-to-date?
- tshadwell 12y agoNope. There is a presentation on cookie tossing, but scant else.
- guidedlight 12y agoOWASP is fantastic organisation of Web Application Professionals. Some of their early work was the publication of the OWASP Top Ten, which went a long way to highlighting the importance web application security to organisations. But they have become less and less relevant in recent years, rather than more relevant. Their previous work on the OWASP Testing Guide, and OWASP Developer Guide are excellent, but are becoming dated now; there are several efforts to bring this up to date.