The How and Why of the OWASP Top Ten 2021

Explore the latest OWASP Top Ten 2021 in this comprehensive 50-minute conference talk by Brian Glas, Assistant Professor of Computer Science at Union University. Gain insights into the critical application security risks facing organizations and understand the changes in the new Top Ten list. Learn about the extensive data collection and analysis process involving over half-a-million applications, and discover how this information shapes industry standards. Delve into each category's significance, explore common pitfalls in vulnerability data structuring, and uncover valuable tips for effective analysis. Examine the implications of the collected data and identify areas that require further investigation. This talk provides a thorough overview of the OWASP Top Ten project, its impact on various standards and organizations, and its role in establishing a baseline for application security.

Introduction
Icons
Process
Core Principles
Venn Diagram
Software Assurance Maturity Model SAM
Thank you
Incidence vs Frequency
CWE Analysis
Community Survey
Dynamic Analysis
Impact
Exploit and Impact
CVS Scoring
CVS Impact Scoring
Exploit Scoring
CWEs
Data
Formula
Whats Next