Understanding the Complete Chain of Application Security Using
summary
Claims a working, searchable index that links standards, tools and fixes across ASVS NIST CWE MITRE etc and proves it by demoing imports and live lookups; parses machine‑readable sources so links auto‑maintain via inline cre identifiers, exposes a JSON API and a Google Sheets importer so automation and CI can consume mappings, and already integrates with ZAP alerts and ASVS pages; project is live (beta at OWASP 20th) and the ingest plus backlinking approach is shown to work end‑to‑end.
AI-written summary · about
chapters (15)
- 0:00Introduction
- 1:12What is OpenCRE
- 3:21Security Wayfinder tool
- 4:49Fragmented security standards
- 6:58Reference lists problems
- 10:28OpenCRE solves linking
- 13:21Mapping and maintenance hurdles
- 22:51OpenCRE with OWASP ZAP
- 29:10Importing security standards
- 32:23OpenCRE benefits recap
- 33:50Call to action
- 38:23Q&A adoption challenges
- 42:36Q&A standards roadmap
- 45:06Q&A differing opinions
- 47:33Q&A ASVS integration
related talks
45mLeveraging Projects and Tools to Transform Your SDLC
38mFree security resources that your competitors use!
52mAppSec: From the OWASP Top Ten(s) to the OWASP ASVS
55mBuilding a sustainable security requirements process with the ASVS
35mGetting benefits of OWASP ASVS at initial phases
45mOWASP for Developers
39mIntroducing the ASVS 4.0
38mLeveraging the ASVS in the Secure SDLC