I am trying to find the most commonly used attack vectors/techniques on computer networks in the style of the owasp top 10, for my thesis work. The reports shouldn't be older than 2-3 years. Can you provide some sources?

[Edit:] Edited the title to the suggestion of @schroeder Also, I have found a possible solution, but it isn't a precompiled list. There is a list called CWE where one can find common weakness types like this one

Since CVEs are mapped to these categories, one can use the NVD statistics engine to manually request statistics and compile this kind of ranking.

The existing CWE/SANS Top 25 mentioned in an answer below is very old

  • 1
    Suggested edit to the title: "List of most common network vulnerabilities a la OWASP Top 10" – schroeder Feb 12 '15 at 23:25

The WA in OWASP stands for Web Application, so OWASP doesn't produce one.

Other organizations may have this information. You might want to look at the SANS list at http://www.sans.org/top25-software-errors/.

  • the OP did mention "in the style of OWASP" – schroeder Feb 12 '15 at 19:04

I'm not sure that there are some sources focusing only on network security in this case, since OWASP itself focusing only on web apps security.

But mostly, people will look into CVE to find out latest or recorded vulnerabilities. You can search through CVE list to find out anything you need for your thesis.

Not the answer you're looking for? Browse other questions tagged or ask your own question.