In addition to the Top Ten, OWASP maintains a number of other projects that can help you improve the security of an application. In this video, learn about other popular OWASP projects.
- [Narrator] While OWASP is best known … for their top 10 list, … that particular project is just the tip of the iceberg. … OWASP has a lot more to offer … web application security professionals. … Let's take a look at a few other notable OWASP projects. … The OWASP Testing Guide is a 224-page PDF … that provides extensive guidance … on security tests that you should be performing … as well as instructions on the tools and techniques … you can use to execute those tests. … The guide groups these tests into 11 separate categories … with just over 100 individual tests altogether. … When I perform web application security assessments, … I use this guide to help me build … a basic security profile of the application. … After I complete these tests, … I've got a great idea of where I need to focus … my penetration testing activities. … This guide is without a doubt … one of the most important tools … you can add to your testing toolkit. … When you ask your developers … to perform a code security review, …
- Security frameworks
- OWASP Top Ten
- Building Security In Maturity Model (BSIMM)
- Planning your testing projects
- Creating security policies
- Source code reviews
- Application threat modeling
- Offline testing for OWASP Top Ten vulnerabilities
Skill Level Intermediate
DevSecOps: Automated Security Testingwith James Wickett1h 35m Intermediate
Security Testing Essential Trainingwith Jerod Brennen2h 48m Beginner
Security Testing: Nmap Security Scanningwith Mike Chapple1h 46m Intermediate
What you should know1m 17s
1. Leading Practices
2. Security Documentation
3. Source Code Security Reviews
4. Offline Testing for the OWASP Top Ten (2017)
Next steps3m 18s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.