Flagship Projects: Security Knowledge Framework
summary
The OWASP Security Knowledge Framework claims to turn ASVS and MASVS into actionable work by using an expert wizard that picks from 300 ASVS requirements, by shipping code snippets for ~40 languages, and by hosting 70+ labs deployable into Kubernetes clones (demo runs on a Raspberry Pi cluster). It ties into Cheat Sheets, Juice Shop and DefectDojo, exposes testing guidance and automation hooks, offers a chatbot with 30 chat adapters, and shows a browser editor for editing labs and validating fixes.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 1:47Security by Design
- 3:09Features
- 6:41Security Lifecycle
- 10:36OSS Projects
- 14:42skf
- 15:14demo
- 18:36labs
- 20:26expert wizard
- 23:43Google Summer of Code
- 25:33Where to find us
related talks
45mLeveraging Projects and Tools to Transform Your SDLC
39mOWASP-SKF Making the web secure by design
55mBuilding a sustainable security requirements process with the ASVS
39mHandling of Security Requirements in Software Development Lifecycle
38mFree security resources that your competitors use!
39mIntroducing the ASVS 4.0
55mASVS Project
45mMaturing Your Application Security Program with ASVS-Driven Development