Thanks to everybody's contributions, we have some great updates to the
Application Security Attack Component library. We've reorganized the
categories and have some new and recently revised drafts to share.

Review the ASAC Library at:
http://www.owasp.org/projects/asac/index.shtml

Our Newest Entries and Revisions Include:

Authentication & Session Management
    Brute Force (revised) -
http://www.owasp.org/projects/asac/sm-bruteforce.shtml
    Session Hijacking (rewritten) -
http://www.owasp.org/projects/asac/sm-sessionhijacking.shtml
    Session Replay (rewritten) -
http://www.owasp.org/projects/asac/sm-sessionreplay.shtml

Canonicalization
    URL Encoding (rewritten) -
http://www.owasp.org/projects/asac/iv-urlencoding.shtml

Cryptography
    Key Space (new) - http://www.owasp.org/projects/asac/c-keyspace.shtml
    Weak Algorithms (new) -
http://www.owasp.org/projects/asac/c-weakalgorithms.shtml

And there are many more on the way!

Feel like contributing your knowledge to the ASAC library? There are drafts
that have yet to be written and those which are open to revision. Please
review the Editorial Page and let me know how you would like to contribute!

ASAC Editorial Page
http://www.owasp.org/projects/asac/editor/

Thank you!

-Kevin

Open Web Application Security Project
www.owasp.org

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]