New answers tagged

5

The reason for the delay is that there has been little change in the Web T10. As stated by Dave Wichers, the Web T10 project lead, on 30 June 2015: Historically, we've produced a new OWASP Top 10 every 3 years because this seems to balance the tempo of change in the AppSec market, all the work everyone does to map their tool/process/other thing to ...


2

Why no update? I'm not sure but, likely there was no need, or too much discussion in the OWASP community to be able to update the web top 10 list from 2013. Also, the mobile world is evolving rapidly last years, probably that's why different vulnerabilities and needs are required and so the (mobile) security industry had to develop faster along with the ...


2

They don’t update it every year and its done by volunteers in their spare time so updates can be slow as it's very comprehensive and takes alot of work. However, they are currently working on updating it this year and are asking for people to submit data towards it. The OWASP Top 10 project is launching its effort to update the Top 10 again. The current ...


0

As this feels as a school-assignment, I would recommend buying one or two of the "basic" web security books which often discusses all of the most popular vulnerabilities. This will make you understand the vulnerabilities better and therefore you can explain them in any way you feel like in the paper. As for the interview part the google form idea ...


1

Well It's not about OWASP Top 10 / Top 20 / Top n, those can be changed over time (xss is more present right now then it was back in 90'), what actually matters at OWASP is there update to the technology methodologies (v.1 v.2 .. v.4) that offer an exhaustive testing plan of a Web based application. If you want to simplify them ... you should take in account ...



Top 50 recent answers are included