2

I'm reading up on the OWASP Top 10 for helping me defend my web app against common "app sec"-type attacks (SQL Injection, CSRF, etc.). And in a recent question I was prompted to not only use OWASP Top 10 for appsec vulns, but to also list all of the applications and tools I am using as part of my architecture and cross-check them against the CVE Database, which I will do.

But then there's other types of attacks: attacks that are not appsec related (not on OWASP Top 10) nor vendor-specific (and thus in the CVE DB). Attacks like DoS/DDoS. Where would these fit in?

I'm looking to find a list of these "other" types of attacks; attacks my software/servers/networks might be vulnerable to but aren't listed by OWASP or CVE. I'm sure there's too many to enumerate, but somewhere, someone has to have them aggregated into a list...thanks in advance.

Improve this question
1
  • A lot of DoS attacks are in the CVE database - where there is a specific DoS vulnerability in an app/OS etc. But your point has merit - I can't think of an all-encompassing list off the top of my head.
    – Rory Alsop ♦
    Jul 2, 2012 at 14:30

1 Answer 1

Reset to default
1

See the CAPEC-1000, a very large list of attack mechanisms. Click "Expand All" to see them all.

Not all of these mechanisms are specific to the web, but they are applicable nevertheless.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .