Flagship Projects: Cheat Sheet Series
summary
The OWASP Cheat Sheet Series moves off the old wiki into GitHub automation, running hundreds of contributors through scripted editing and review, and maintains per-topic pages with editorial owners. It gives concrete, contested advice: use Argon2id with ~15 MB memory and single parallelism, avoid bcrypt for new designs, and prefer framework CSRF protections plus SameSite or double-submit cookies. The project shows active PRs, measurable edits, and live, reviewed guidance rather than vague examples.
AI-written summary · about
chapters (6)
- 0:00Start
- 2:48Authentication Cheat Sheet
- 6:32Summary for Request Forgery
- 8:02Password Storage Cheat Sheet
- 8:25How To Tune Password Storage Algorithms
- 8:54Advice on How To Store a Password
related talks
40mCheatsheets Project
27mSecurity Does Not Need to Be Fun: Ignoring OWASP to Have a Terrible Time
28mSecurity Does Not Need to Be Fun: Ignoring OWASP to Have a Terrible Time
36mApp Security Does Not Need To Be Fun: Ignoring OWASP To Have A Terrible Time
45mLeveraging Projects and Tools to Transform Your SDLC
38mFree security resources that your competitors use!
14mDeveloper Guide
52mPractical Security in Web Applications