WASC has
released a web security 'Threat Classifications' document that attempts
to help clarify some of the terms used in web security (such as xss,
session fixation, insufficient authorization, etc…). Additional
information can be found at the link below.
Web Application Security Consortium (WASC) releases ‘Threat Classifications’ document
Favorite Links
- Security Templates (New)
- The Web Application Security Consortium
- QA Security
- The Web Security Mailing List
- Romain Gaucher’s Blog
- Jeremiah Grossman’s Blog
Popular Pages
WASC Threat Classification
- Abuse of Functionality
- Application Misconfiguration
- Brute Force Attack
- Content Spoofing
- Credential/Session Prediction
- Denial of Service
- Directory Indexing
- Information Leakage
- Remote File Inclusion Attack
- Routing Detour Attack
- SOAP Array Abuse
- XML Attribute Blowup
- XML Injection
- XML External Entity Attack