From the OWASP Top Ten to the OWASP ASVS

Explore a comprehensive overview of application security standards in this 21-minute conference talk. Delve into the limitations of relying solely on the OWASP Top Ten for web application security and discover the more robust OWASP Application Security Verification Standard (ASVS) v4.0. Learn how the ASVS's 180+ requirements provide a solid foundation for defining secure software, testing technical security controls, and guiding developers in secure development practices. Gain insights into the OWASP Top Ten 2017, OWASP Top Ten Proactive Controls 2018, and their comparison to the ASVS. Understand why basing an Application Security program on the OWASP ASVS is more effective than relying on top ten lists alone.

Intro
ASVS
Requirements
Whats Gone
Basic Data Handling
Business Logic
Common Problems
Configuration
Recommendations
Questions