Скачать или смотреть MITRE Versus OWASP - Episode 33 - RDPS

Roniel and DaRon discuss why OWASP sucks and why you should switch over to the better documented, better maintained, more consistent MITRE tools. As will always be the case, our discussion is unscripted, organic, and completely off the cuff.

Below are some MITRE tools of note:
MITRE Top 25 Software CWEs -- https://cwe.mitre.org/top25/archive/2...
MITRE Top 25 Hardware CWEs -- https://cwe.mitre.org/scoring/lists/2...
MITRE CAPEC Mechanisms of Attack -- https://capec.mitre.org/data/definiti...
MITRE CVE -- https://cve.mitre.org/

Other tools of note:
CVSS Calculator -- https://www.first.org/cvss/calculator...
SEI CERT Coding Standards -- https://wiki.sei.cmu.edu/confluence/d...

Visit us on Twitter @TheRDPS (  / therdps  )

❚❚███═Main Video Content═███❚❚
00:00:00 - Introduction
00:00:09 - DaRon Is Uncultured
00:10:09 - OWASP Top 10 Sucks
00:12:53 - White Hat Tried to Defend OWASP Top 10 (and fails)
00:15:13 - MITRE CWE Top 25 and Why It Is Better Than The OWASP Top 10
00:17:22 - MITRE Projects Are Unified, OWASP Projects Are Disjoint and Often in Disrepair
00:18:30 - OWASP Tends to Be Wrong and Poorly Written, MITRE Tends to Be Well-Written and More Complete
00:28:51 - Conclusion
00:32:32 - Outtakes