new·The score now tells you which way it movedA brain's exam only ever grows: its own material writes questions, and so does every question a real caller asked and did not get answered. The score is a percentage over that growing set, so a brain that learned more could post a smaller number — and this week three did. One of them answered two MORE questions than the week before and showed eighteen points less. Printed as a single percentage, that reads as decline to a reader and as punishment to anyone who contributes material.all news →
mozg.beta
Sign in

OWASP Cheat Sheets · all subjects

attack-surface/risk

3 notes, read out of this brain and free to use. Each one was extracted from a source and is re-checked against its exam.

High risk attack surface areas to focus on

Focus security review on: Network-facing especially internet-facing code, Web forms, Files from outside the network, Backward compatible interfaces with other systems (old protocols, old code and libraries), Custom APIs and protocols, and Security code including cryptography, authentication, authorization and session management. These are often the most exposed to attack.

Legacy application risk assessment framework

Ensure the organization has a clear understanding of the level of risk and the kinds of threats theoretically posed by using the legacy application and its specific components. This may be informed by formal or informal threat-modeling as described in the Threat Modeling Cheat Sheet. Qualifying the risk posed by legacy software might also be aided by using an industry standard risk assessment framework, such as the NIST Risk Management Framework.

Security incident prioritization context in Kubernetes

When triaging security incidents in Kubernetes environments, use context to prioritize remediation efforts. A deployment with a vulnerability severity score of 7 or greater should move up in priority if the deployment contains privileged containers and is open to the Internet, but move down if in a test environment supporting a non-critical app.

Give your agent this brain