Penetration Testing mailing list archives
WASC Announcement: WASC Threat Classification v2.0 Published
From: announcements () webappsec org
Date: Sun, 3 Jan 2010 06:15:41 -0500 (EST)
The Web Application Security Consortium (WASC) is pleased to announce the long awaited release of the WASC Threat Classification v2.0. The Threat Classification is an effort to classify the weaknesses, and attacks that can lead to the compromise of a website, its data, or its users. This document's primarily purpose is to serve as a reference guide for common attacks and weaknesses. Main goals - Refine document scope, terminology, and purpose - Update existing sections when applicable - Add missing attacks and weaknesses - Creation of a firm, scalable base foundation allowing for the introduction of data views allowing for various forms of data representation - Addition of attack and weakness reference identifiers (WASC-<xx>) - Publication of two data views WASC Threat Classification v2.0 Online http://projects.webappsec.org/Threat-Classification Using the Threat Classification http://projects.webappsec.org/Using-the-Threat-Classification Threat Classification Authors and Contributors http://projects.webappsec.org/Threat-Classification-Authors WASC Threat Classification FAQ http://projects.webappsec.org/Threat-Classification-FAQ WASC Reference Identifier Grid http://projects.webappsec.org/Threat-Classification-Reference-Grid Threat Classification Data Views http://projects.webappsec.org/Threat-Classification-Views We have already started scoping the next minor release of the Threat Classification, and are seeking contributors. If you are interested in participating in the next release of the WASC Threat Classification please contact us at contact_at_ () webappsec org with the subject 'WASC Threat Classification Contribution Inquiry'. Questions can be directed to Robert Auger (contact_at_webappsec.org) with the subject 'WASC TC Inquiry'. ---------------------------------------------------------------------------- Join us on IRC: irc.freenode.net #webappsec Have a question? Search The Web Security Mailing List Archives http://www.webappsec.org/lists/websecurity/archive/ ------------------------------------------------------------------------ This list is sponsored by: Information Assurance Certification Review Board Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified. http://www.iacertification.org ------------------------------------------------------------------------
Current thread:
- WASC Announcement: WASC Threat Classification v2.0 Published announcements (Jan 04)