Flagship Projects: Application Security Verification Standard
summary
ASVS claims to be a testable standard with verifiable requirements used for code review, architecture and QA rather than just awareness material. Version history shows ~120 initial controls expanding into many more sections, labels track every change in the 4.0 English directory, and contributions happen via GitHub issues and PRs. Guidance encourages teams to fork and drop sections they don't use, add new requirements at the end, and prepare for 5.0 renumbering and a release targeted around early 2022.
AI-written summary · about
chapters (10)
- 0:00Intro
- 2:02Whos leading the APS
- 4:29History of APS
- 5:52Nonbreaking vs Braking
- 10:29Release Date
- 13:20Forking
- 16:04Mappings
- 18:07Leadership Meeting
- 19:22Companion Guide
- 20:06Github repo
related talks
35mOWASP Application Security Verification Standard (ASVS)
55mASVS Project
39mIntroducing the ASVS 4.0
45mWhat's New in ASVS V5
55mBuilding a sustainable security requirements process with the ASVS
38mLeveraging the ASVS in the Secure SDLC
35mGetting benefits of OWASP ASVS at initial phases
45mMaturing Your Application Security Program with ASVS-Driven Development