WebApp Sec mailing list archives

RE: WASC Announcement: WASC Threat Classification v2.0 Published


From: "Vincent Chao" <zwell.nosec () gmail com>
Date: Mon, 4 Jan 2010 09:39:40 +0800

Thanks very much for WASC's work, it really help me ;)

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of announcements () webappsec org
Sent: Sunday, January 03, 2010 7:16 PM
To: webappsec () securityfocus com; bugtraq () securityfocus com;
pen-test () securityfocus com
Subject: WASC Announcement: WASC Threat Classification v2.0 Published

The Web Application Security Consortium (WASC) is pleased to announce the
long awaited release of the WASC 
Threat Classification v2.0. The Threat Classification is an effort to
classify the weaknesses, and attacks 
that can lead to the compromise of a website, its data, or its users. This
document's primarily purpose is 
to serve as a reference guide for common attacks and weaknesses.

Main goals
- Refine document scope, terminology, and purpose
- Update existing sections when applicable
- Add missing attacks and weaknesses
- Creation of a firm, scalable base foundation allowing for the introduction
of data views allowing for various 
  forms of data representation
- Addition of attack and weakness reference identifiers (WASC-<xx>)
- Publication of two data views


WASC Threat Classification v2.0 Online
http://projects.webappsec.org/Threat-Classification

Using the Threat Classification
http://projects.webappsec.org/Using-the-Threat-Classification

Threat Classification Authors and Contributors
http://projects.webappsec.org/Threat-Classification-Authors

WASC Threat Classification FAQ
http://projects.webappsec.org/Threat-Classification-FAQ

WASC Reference Identifier Grid
http://projects.webappsec.org/Threat-Classification-Reference-Grid

Threat Classification Data Views
http://projects.webappsec.org/Threat-Classification-Views


We have already started scoping the next minor release of the Threat
Classification, and are seeking contributors. 
If you are interested in participating in the next release of the WASC
Threat Classification please contact us at
contact_at_ () webappsec org with the subject 'WASC Threat Classification
Contribution Inquiry'.

Questions can be directed to Robert Auger (contact_at_webappsec.org) with
the subject 'WASC TC Inquiry'.


----------------------------------------------------------------------------
Join us on IRC: irc.freenode.net #webappsec

Have a question? Search The Web Security Mailing List Archives
http://www.webappsec.org/lists/websecurity/archive/




This list is sponsored by Cenzic
--------------------------------------
Let Us Hack You. Before Hackers Do!
It's Finally Here - The Cenzic Website HealthCheck. FREE.
Request Yours Now! 
http://www.cenzic.com/2009HClaunch_Securityfocus
--------------------------------------




This list is sponsored by Cenzic
--------------------------------------
Let Us Hack You. Before Hackers Do!
It's Finally Here - The Cenzic Website HealthCheck. FREE.
Request Yours Now! 
http://www.cenzic.com/2009HClaunch_Securityfocus
--------------------------------------


Current thread: