[WEB SECURITY] Web Application Security Check List 2012 (Mainly for Auditors)

[Bunyamin Demir]

Christian,

It is not a correlation between ASVS and The OWASP Testing Guide. But, we
have a mapping with Testing Guide and ASVS Categories. Maybe we can say
that our project state is among ASVS and OWASP Testing Guide.

We have a plan to use Testing Guide Checklist, Secure Coding Quick
References etc. under our checklist rules. Because they have very detailed
rules for pentesters or developers. Our checklist will cover all positions
who work on application life cycle (mainly for auditors).

Best Regards,


2012/3/2 Christian Heinrich <christian.heinrich at cmlh.id.au>

> Bunyamin,
>
> 2012/3/2 Bunyamin Demir <bunyamindemir at gmail.com>:
> > Your comment and suggestion are wellcome!
>
> Is this the correlation between ASVS and the OWASP Testing Guide as
> part of the OWASP "Common Numbering Project"?
>
>
> --
> Regards,
> Christian Heinrich
>
> http://cmlh.id.au/contact
>



-- 
Bünyamin Demir
OWASP-Turkey Chapter Lead
http://www.webguvenligi.org
http://www.owasp.org/index.php/Turkey

Türkçe Web Uygulama Güvenliği E-Posta Listesine üye olmak için:
https://lists.owasp.org/mailman/listinfo/owasp-turkey
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webappsec.org/pipermail/websecurity_lists.webappsec.org/attachments/20120302/a1e9fb17/attachment.html>