OWASP ASVS – V1 – Architecture, Design and Threat Modeling Requirements
Control Objective Security architecture has almost become a lost art in many organizations. The days of the enterprise architect have...
- Home
- Frameworks and Standards
- OWASP ASVS
OWASP ASVS
OWASP ASVS – V2 – Authentication Verification Requirements
Control Objective Authentication is the act of establishing, or confirming, someone (or something) as authentic and that claims made by...OWASP ASVS – V3 – Session Management Verification Requirements
Control Objective One of the core components of any web-based application or stateful API is the mechanism by which it...OWASP ASVS – V4 – Access Control Verification Requirements
Control Objective Authorization is the concept of allowing access to resources only to those permitted to use them. Ensure that...OWASP ASVS – V5 – Validation, Sanitization and Encoding Verification Requirements
Control Objective The most common web application security weakness is the failure to properly validate input coming from the client...OWASP ASVS – V6 – Stored Cryptography Verification Requirements
Control Objective Ensure that a verified application satisfies the following high level requirements: All cryptographic modules fail in a secure...OWASP ASVS – V7 – Error Handling and Logging Verification Requirements
Control Objective The primary objective of error handling and logging is to provide useful information for the user, administrators, and...OWASP ASVS – V8 – Data Protection Verification Requirements
Control Objective There are three key elements to sound data protection: Confidentiality, Integrity and Availability (CIA). This standard assumes that...OWASP ASVS – V9 – Communications Verification Requirements
Control Objective Ensure that a verified application satisfies the following high level requirements: TLS or strong encryption is always used,...OWASP ASVS – V10 – Malicious Code Verification Requirements
Control Objective Ensure that the code satisfies the following high level requirements: Malicious activity is handled securely and properly to...