Periodic Table of Elements
summary
Claims that the OWASP Periodic Table of Vulnerabilities recombines OWASP Top 10 WASC TCv2 and CWE-25 into a practical fix plan it maps ~50 elements across browser, perimeter, framework and custom-code layers and highlights implement security controls as far from custom code as possible and OWASP Periodic Table of Vulnerabilities The project ships an interactive GitHub-backed table plus poster and release formats, calls out 12 browser/standards fixes and suggests focusing on roughly nine developer-only issues while using CSP XFO iframe sandbox HTTP2 and WAF/FRAME evals.
AI-written summary · about
chapters (12)
- 0:00Start
- 0:50Project Goal
- 2:55Failed Approaches
- 5:26Solutions?
- 7:47Divide and Conquer
- 13:27Economies of Scale
- 15:14Scope
- 18:25Metaphor
- 22:19Selected Examples
- 27:56Case Study - XSS
- 33:00Developer Training
- 33:31Drawbacks and Benefits
related talks
50mThe How and Why of the OWASP Top Ten 2021
47mOWASP Top 10
26mFlagship Projects: Top 10 "The making of the OWASP Top 10 and beyond"
38mFree security resources that your competitors use!
01h 00mWeb Application Security Risks: A Look at OWASP Top Ten 2017
32mUsing the OWASP Top 10 As The Foundation for Security and Privacy Programs Across Your Organization
30mTop 10 Introduction
58m: The OWASP Top Ten Proactive Controls 2018