Lessons Learned from a OWASP Top 10 Datacall

Explore key insights from the OWASP Top 10 Datacall in this 54-minute conference talk. Delve into Brian Glas's perspective on public attribution, the interplay between tools and humans in cybersecurity, and the challenges posed by technological complexity. Learn about the Open Security Summit and the expansion of the Datacall, including the Industry Survey and its results. Examine the process of converting frequency to incidence rates, and understand the importance of backups and application data. Investigate vulnerability patterns, data structures, and the intricacies of finding and testing data. Gain valuable knowledge on cybersecurity metrics and the limitations of data analysis in the context of web application security.

Intro
My perspective
Public attribution
Tools vs humans
Humans vs tools
Tech complexity
Open Security Summit
Expanding the Datacall
The Industry Survey
Survey Results
Frequency to Incidence Rate
Incidence Rate
Backups
Application Data
Finding
What data cant tell us
Vulnerability patterns
Data Structures
Finding the Data
Testing
Metrics