OWASP: The Next 25 years

on YouTube ↗44m

" summary

OWASP reports concrete asks and results: a call for OWASP Top 10 data call closes in November, submit as CSV with three fields; ASVS sits at ASVS 4.0 (5.0 coming); projects number about 345 with flagship tools like the Testing Guide and Core Rule Set actively used; membership is 8,339 members today with a target of 16,000; practical wins include SSRF papers, reduction of XSS via frameworks, and guidance that frequent password rotation is obsolete per NIST 800-63.

AI-written summary · about

" chapters (37)

1. 0:00Introduction
2. 1:07OWASP Foundation role
3. 2:32OWASP mission and vision
4. 4:00History of OWASP Top 10
5. 5:28Password security myths
6. 9:26Evolution of OWASP Top 10
7. 12:12Future of OWASP Top 10 and AI
8. 12:34OWASP origins and challenges
9. 14:02OWASP structure and legal evolution
10. 15:48OWASP community growth
11. 17:16Starting OWASP chapters
12. 17:38OWASP projects and initiatives
13. 18:41OWASP events expansion
14. 19:43Preparing OWASP foundationally
15. 20:04Modernizing OWASP projects
16. 21:07Making OWASP tools accessible
17. 21:50Cloud, CI/CD, hardware security
18. 22:31Engaging developers
19. 23:15Academic foundations for security
20. 24:17Global curriculum and outreach
21. 25:02Security in engineering education
22. 26:28Security champions and scaling
23. 26:52Open textbooks and resources
24. 28:00Expanding chapters
25. 29:04Fundraising and events
26. 30:51Modernizing submissions
27. 32:18Engaging large organizations
28. 33:26AI impact on security
29. 34:52Community involvement
30. 35:34Sustaining OWASP
31. 36:38Membership growth
32. 37:42Training next generation
33. 38:50Career pathways and diversity
34. 40:11Retraining and certification gaps
35. 41:16Low-code and framework security
36. 42:44Funding and participation
37. 43:05Closing remarks

" related talks

• 35mNever Walk Alone: Inspirations From a Growing OWASP ProjectChristian Folini · 34th Annual FIRST Conference 2022
• 45mLeveraging OWASP in Open Source ProjectsAaron Weaver, David Ohsie, Bill Thompson · AppSecUSA 2013
• 48mAn Introduction to the Newest Addition to the OWASP Top 10Jeff Williams, Ryan Berg · AppSecUSA 2013
• 01h 34mOWASP AppSec EU 2018 Leaders MeetingDawn Aiken · OWASP AppSec Europe 2018
• 41mAppSec Guide and CISO SurveyTobias Gondrom, Marco M. Morana · AppSecUSA 2013
• 47m11,000 Voices: Experts Shed Light on 4-Year Open Source & AppSec SurveyDamon Edwards, Matt Tesauro, James Wickett, Jeff Williams, Joshua Corman, Ryan Berg, Oleg Gryb, Matt Johanssen · OWASP AppSecUSA 2014
• 19mCommunity-led Security at ASFMark Cox · ApacheCon@Home 2021
• 27mStandard Classification: Rough Consensus - An OWASP StoryJeff Williams · OWASP 20th Anniversary 2021