OWASP-SKF Making the web secure by design

on YouTube ↗39m

" summary

A free OWASP web app maps the ASVS 170+ controls into a developer-facing checklist and a knowledge base of around 200+ knowledge items with commented code examples in PHP, .NET, Python and Java. It runs as a Flask app so it runs locally via Flask and exports DOCX, ties into Travis/Coveralls/Scrutinizer for CI checks, and aims to shift teams from best-effort fixes to verifiable security during pre‑ and post‑development.

AI-written summary · about

" chapters (13)

1. 0:00Start
2. 0:22Introduction
3. 3:06Cross-Site Scripting
4. 9:25Demo of the Security Knowledge Framework
5. 10:29Knowledge Base
6. 13:01Code Examples
7. 13:39How To Properly Mitigate Cross-Site Scripting
8. 17:05Pre Development Phase and the Post Development Phase
9. 19:15Application Security Verification
10. 22:37Security Knowledge Framework
11. 24:36Dynamic Application Scanning
12. 28:12Code Quality Check
13. 34:39The Security Knowledge Framework

" related talks

• 39mIntroducing the ASVS 4.0Andrew van der Stock · nullcon Goa 2019
• 26mFlagship Projects: Security Knowledge FrameworkGlenn ten Cate · OWASP 20th Anniversary 2021
• 14mDeveloper GuideShruti Kulkarni · Global AppSec Lisbon 2024
• 52mAppSec: From the OWASP Top Ten(s) to the OWASP ASVSJim Manico · GOTO Chicago 2019
• 35mOWASP Application Security Verification Standard (ASVS)Ryan Armstrong, Shanni Prutchi · OWASP Global AppSec San Francisco 2024
• 23mWeb Application Security - owasp top 10 vulnerabilitiesShan Jun Ng · FOSSASIA Summit 2017
• 45mOWASP for DevelopersMatteo Meucci · Codemotion Rome 2016
• 35mGetting benefits of OWASP ASVS at initial phasesOleksandr Kazymyrov · NDC Oslo 2018