OWASP explained

OWASP
Type:501(c)(3) nonprofit organization
Founded:2001[1]
Founders:Mark Curphey
Key People:Andrew van der Stock, Executive Director; Kelly Santalucia, Director of Events and Corporate Support; Harold Blankenship, Director of Technology and Projects; Jason C. McDonald, Director of Community Development; Dawn Aitken, Operations Manager; Lauren Thomas, Event Coordinator[2]
Purpose:Web security, application security, vulnerability assessment
Method:Industry standards, conferences, workshops
Revenue: $2.3 million (2017)[3]
Membership:approx. 13,000 volunteers (2017)[4]

OWASP, the Open Worldwide Application Security Project (formerly Open Web Application Security Project), is an online community that publishes open-source information and resources on IoT, system software and web application security.[5] It is led by a non-profit called The OWASP Foundation.

History

Mark Curphey started OWASP on September 9, 2001.[1] Jeff Williams served as the volunteer Chair of OWASP from late 2003 until September 2011., Matt Konda chaired the Board.[6] The OWASP Foundation, a 501(c)(3) non-profit organization in the US established in 2004, supports the OWASP infrastructure and projects. Since 2011, OWASP is also registered as a non-profit organization in Belgium under the name of OWASP Europe VZW.[7] In February 2023, it was reported by Bil Corry, a OWASP Foundation Global Board of Directors officer,[8] on Twitter that the board had voted for renaming from the Open Web Application Security Project to its current name, replacing Web with Worldwide.[9] In May 2023, the OWASP Gen AI Security Project was started to expand the scope of the OWASP Top 10 List to document the most critical risks associated with LLMs. [10]

Resources

Tools

Publications

Models and standards

Other projects

Certifications

They also have several certification schemes.[28] [29] [30]

See also

Notes and References

  1. Book: Huseby, Sverre. Innocent Code: A Security Wake-Up Call for Web Programmers. registration. 2004. Wiley. 0470857447. 203.
  2. Web site: OWASP Foundation Staff. OWASP. 12 February 2023. 3 May 2022.
  3. Web site: OWASP FOUNDATION INC. ProPublica. Nonprofit Explorer. May 9, 2013. 8 January 2020.
  4. Web site: OWASP Foundation's Form 990 for fiscal year ending Dec. 2017. 26 October 2018. ProPublica Nonprofit Explorer. 8 January 2020.
  5. Web site: OWASP Internet of Things. 2023-12-26.
  6. Web site: Board . 2015-02-27 . OWASP . https://web.archive.org/web/20170916053008/https://www.owasp.org/index.php/Board . 2017-09-16.
  7. Web site: OWASP Europe . 2024-07-07 . OWASP . https://web.archive.org/web/20160417094223/https://www.owasp.org/index.php/Europe . 2016-04-17.
  8. Web site: Global Board . live . https://web.archive.org/web/20240429110124/https://owasp.org/www-board/ . 2024-04-29 . 2024-07-07 . owasp.org . en.
  9. 1629165062207442944 . bilcorry . A change you might notice about @owasp, the Board voted to change the "W" from "Web" to "Worldwide", making it the "Open Worldwide Application Security Project" . Bil . Corry . 2023-02-25 . 2024-07-07.
  10. Web site: Introduction, Project Background - OWASP Gen AI Security Project . OWASP GenAI Security Project . 2026-01-10 . en-US . live.
  11. Web site: OWASP Top Ten . live . https://web.archive.org/web/20240706131536/https://owasp.org/www-project-top-ten/ . 2024-07-06 . 2024-07-07 . owasp.org . en.
  12. News: Seven Best Practices for Internet of Things. https://web.archive.org/web/20151128082719/https://www.highbeam.com/doc/1G1-432063283.html. dead. 28 November 2015. Trevathan. Matt. 1 October 2015. Database and Network Journal.
  13. News: Leaky Bank Websites Let Clickjacking, Other Threats Seep In. https://web.archive.org/web/20151128082719/https://www.highbeam.com/doc/1G1-375828488.html. dead. 28 November 2015. Crosman. Penny. 24 July 2015. American Banker.
  14. Web site: Infosec bods rate app languages; find Java 'king', put PHP in bin. Pauli. Darren. 4 December 2015. The Register. 4 December 2015.
  15. Web site: 20 April 2015 . OWASP top 10 vulnerabilities . 28 November 2015 . developerWorks . IBM.
  16. Web site: Payment Card Industry (PCI) Data Security Standard. November 2013. PCI Security Standards Council. 55. 3 December 2015.
  17. Web site: Open Web Application Security Project Top 10 (OWASP Top 10) . 2017 . Knowledge Database . Synopsys . Synopsys, Inc . 2017-07-20 . Many entities including the PCI Security Standards Council, National Institute of Standards and Technology (NIST), and the Federal Trade Commission (FTC) regularly reference the OWASP Top 10 as an integral guide for mitigating Web application vulnerabilities and meeting compliance initiatives..
  18. Web site: Authorization remains #1 issueOWASP 2023 Top 10 List . 2024-09-02 . Cerbos . en-GB.
  19. Web site: OWASP Incident Response ProjectOWASP . dead . https://web.archive.org/web/20190406184056/https://www.owasp.org/index.php/OWASP_Incident_Response_Project . April 6, 2019 . December 12, 2015.
  20. Web site: What is OWASP SAMM? . 2022-11-06 . OWASP SAMM.
  21. Book: Baar. Hans. Smulters. Andre. Hintzbergen. Juls. Hintzbergen. Kees. Foundations of Information Security Based on ISO27001 and ISO27002. 3. 2015. Van Haren. 9789401800129. 144.
  22. Web site: Category:OWASP XML Security Gateway Evaluation Criteria Project Latest. Owasp.org. November 3, 2014. https://web.archive.org/web/20141103212323/https://www.owasp.org/index.php/Category:OWASP_XML_Security_Gateway_Evaluation_Criteria_Project_Latest. November 3, 2014. dead.
  23. Web site: OWASP AppSec Pipeline. Open Web Application Security Project (OWASP). 26 February 2017. January 18, 2020. https://web.archive.org/web/20200118102518/https://owasp.org/www-project-appsec-pipeline. dead.
  24. Web site: July 2015 . AUTOMATED THREATS to Web applications . OWASP.
  25. Web site: OWASP Automated Threats to Web Applications . live . https://web.archive.org/web/20240629004719/https://owasp.org/www-project-automated-threats-to-web-applications/ . 2024-06-29 . 2024-07-07 . owasp.org . en.
  26. Web site: OWASP API Security ProjectOWASP Foundation. OWASP.
  27. Web site: OWASP AI Maturity Assessment ProjectOWASP Foundation. OWASP.
  28. Web site: qa.com Certified OWASP Security Fundamentals (QAOWASPF) . 2024-10-25 . www.qa.com . en.
  29. Web site: A01 Broken Access ControlOWASP Top 10:2021 . 2024-10-25 . owasp.org.
  30. Web site: A02 Cryptographic FailuresOWASP Top 10:2021 . 2024-10-25 . owasp.org.

This article is licensed under the GNU Free Documentation License. It uses material from the Wikipedia article "OWASP".

Except where otherwise indicated, Everything.Explained.Today is © Copyright 2009-2026, A B Cryer, All Rights Reserved. Cookie policy.