I am doing a whitepaper on simplifying OWASP 10 vulnerabilities based on an article our teachers suggested. Can you guys help or provide more resources here? What are your views? Will like to interview some of you for the study too.
closed as off-topic by Anders, S.L. Barth, wireghoul, Steffen Ullrich, schroeder♦ Jul 7 '16 at 14:58
This question appears to be off-topic. The users who voted to close gave these specific reasons:
- "This question does not appear to be about Information security within the scope defined in the help center." – wireghoul, Steffen Ullrich, schroeder
- "Questions seeking product recommendations are off-topic as they become obsolete quickly. Instead, describe your situation and the specific problem you're trying to solve." – Anders, S.L. Barth
Well It's not about OWASP Top 10 / Top 20 / Top n, those can be changed over time (xss is more present right now then it was back in 90'), what actually matters at OWASP is there update to the technology methodologies (v.1 v.2 .. v.4) that offer an exhaustive testing plan of a Web based application. If you want to simplify them ... you should take in account that the next day, week, month, year it will be another Top 10. The scope of those top's is not to be simple understandable it's serve as a snapshot in time of the most common vulnerability. And I can have an web based app that is not vulnerable to OWASP Top 10 at all but it fails dramatically on other sides.
As this feels as a school-assignment, I would recommend buying one or two of the "basic" web security books which often discusses all of the most popular vulnerabilities. This will make you understand the vulnerabilities better and therefore you can explain them in any way you feel like in the paper.
As for the interview part the google form idea presented by Bubble Hacker seems like a good start.