OWASP’s Subtractive Security Top 10 puts erased attack paths on the scoreboard

OWASP stands for the Open Worldwide Application Security Project. It is a nonprofit community that publishes open security guidance, standards, tools, and educational resources to help organizations build and maintain secure software. It is best known for the OWASP Top 10, a regularly updated list of major web-application security risks. OWASP also supports projects covering areas such as mobile applications, APIs, software testing, cloud security, and defensive architecture. OWASP’s Subtractive Security Top 10 turns attack-path removal into a measurable security goal. Its new Path Erasure Rate standard helps teams quantify which unnecessary capabilities, permissions, and routes they have eliminated before attackers can use them. Source

Read the full article at the source.