2 replaced http://security.stackexchange.com/ with https://security.stackexchange.com/
source | link

I'm reading up on the OWASP Top 10 for helping me defend my web app against common "app sec"-type attacks (SQL Injection, CSRF, etc.). And in a recent questionrecent question I was prompted to not only use OWASP Top 10 for appsec vulns, but to also list all of the applications and tools I am using as part of my architecture and cross-check them against the CVE Database, which I will do.

But then there's other types of attacks: attacks that are not appsec related (not on OWASP Top 10) nor vendor-specific (and thus in the CVE DB). Attacks like DoS/DDoS. Where would these fit in?

I'm looking to find a list of these "other" types of attacks; attacks my software/servers/networks might be vulnerable to but aren't listed by OWASP or CVE. I'm sure there's too many to enumerate, but somewhere, someone has to have them aggregated into a list...thanks in advance.

I'm reading up on the OWASP Top 10 for helping me defend my web app against common "app sec"-type attacks (SQL Injection, CSRF, etc.). And in a recent question I was prompted to not only use OWASP Top 10 for appsec vulns, but to also list all of the applications and tools I am using as part of my architecture and cross-check them against the CVE Database, which I will do.

But then there's other types of attacks: attacks that are not appsec related (not on OWASP Top 10) nor vendor-specific (and thus in the CVE DB). Attacks like DoS/DDoS. Where would these fit in?

I'm looking to find a list of these "other" types of attacks; attacks my software/servers/networks might be vulnerable to but aren't listed by OWASP or CVE. I'm sure there's too many to enumerate, but somewhere, someone has to have them aggregated into a list...thanks in advance.

I'm reading up on the OWASP Top 10 for helping me defend my web app against common "app sec"-type attacks (SQL Injection, CSRF, etc.). And in a recent question I was prompted to not only use OWASP Top 10 for appsec vulns, but to also list all of the applications and tools I am using as part of my architecture and cross-check them against the CVE Database, which I will do.

But then there's other types of attacks: attacks that are not appsec related (not on OWASP Top 10) nor vendor-specific (and thus in the CVE DB). Attacks like DoS/DDoS. Where would these fit in?

I'm looking to find a list of these "other" types of attacks; attacks my software/servers/networks might be vulnerable to but aren't listed by OWASP or CVE. I'm sure there's too many to enumerate, but somewhere, someone has to have them aggregated into a list...thanks in advance.

    Tweeted twitter.com/#!/StackSecurity/status/220103442553782273
1
source | link

Types of attacks outside of AppSec and Vendor-Specific Systems?

I'm reading up on the OWASP Top 10 for helping me defend my web app against common "app sec"-type attacks (SQL Injection, CSRF, etc.). And in a recent question I was prompted to not only use OWASP Top 10 for appsec vulns, but to also list all of the applications and tools I am using as part of my architecture and cross-check them against the CVE Database, which I will do.

But then there's other types of attacks: attacks that are not appsec related (not on OWASP Top 10) nor vendor-specific (and thus in the CVE DB). Attacks like DoS/DDoS. Where would these fit in?

I'm looking to find a list of these "other" types of attacks; attacks my software/servers/networks might be vulnerable to but aren't listed by OWASP or CVE. I'm sure there's too many to enumerate, but somewhere, someone has to have them aggregated into a list...thanks in advance.