OWASP Open Application Security Curriculum
summary
Claims an OWASP-led open curriculum is needed because 75% of breaches at the application layer and 92% of reported vulnerabilities in applications, argues fixing bugs during development saves thousands versus after release, and proposes mapping OWASP projects to learning objectives. Concrete tools cited include Juice Shop Security Shepherd WebGoat ZAP and standards like ASVS. The deliverable is an open curriculum mapping projects to learning objectives, plus databases of trainers and academics, currently a funded proposal seeking adoption and pilot work.
AI-written summary · about
chapters (18)
- 0:00Start
- 0:28Bio-Adrian Winckles
- 1:29So where are the problems....
- 3:32How many vulnerabilities are application related?
- 3:56Applications are the big issue....
- 5:12Why Application Vulnerabilities Occur
- 6:00How do we do fix the problem? • Security Analyst Understand the data and information held in the
- 7:06Bottom Up Problems
- 8:24Top Down Problems
- 8:49Top Down Solutions
- 9:10Top Down vs Bottom Up Solutions
- 9:50Need for Education Solutions
- 14:06What next..?
- 16:52Objective 1
- 18:46Objective 3
- 20:54Anyone remember this from 2015
- 21:44Beneficiaries As well as having an indirect impact upon the global cyber security skill sets, immediate beneficiaries of this research include
- 27:06Next Steps/Ideas (Cont'd)
related talks
59mOpen Application Security Curriculum Project
45mOWASP for Developers
45mLeveraging OWASP in Open Source Projects
31mTopics of Interest: Scaling AppSec through Education
45mLeveraging Projects and Tools to Transform Your SDLC
27mSecurity Does Not Need to Be Fun: Ignoring OWASP to Have a Terrible Time
51mKeynote: 20:20 The History and Future of OWASP
38mFree security resources that your competitors use!