The future is simple - introducing the CRE
summary
Official go live of the Common Requirement Enumeration (CRE), an interactive linking platform that maps requirements across ASVS, Testing Guide, NIST, PCI‑DSS, ISO/IEC, MITRE, CIS and others, tying specific checks (for example ASVS 6.1.1 encrypt regulated personal data at rest) to related NIST controls, CWE entries and cheat sheets. A web app at opensiri.org demonstrates machine‑readable CRE id anchors so standards embed links and the graph stays auto-maintaining, enabling traversal and gap analysis between standards in practice.
AI-written summary · about
chapters (14)
- 0:00Intro
- 0:47The problem
- 3:40Software security
- 4:48Security standards
- 6:08IOT Security Mapping
- 7:26CRE Example
- 8:04Higher Level Topics
- 9:11Example
- 11:17Why are we doing this
- 14:36What did we do
- 17:02Launch
- 22:40Future features
- 25:39Summary
- 26:19Call to action
related talks
32mOpen Common Requirement Enumeration (OpenCRE)
55mASVS Project
49mUnderstanding the Complete Chain of Application Security Using
55mBuilding a sustainable security requirements process with the ASVS
39mHandling of Security Requirements in Software Development Lifecycle
38mLeveraging the ASVS in the Secure SDLC
42mMaking EU CRA (Cyber Resilience Act) Simplified and Non-scary for OSS Contributors
48mApplying Cybersecurity Regulations and Industry Standards to Open Source Projects