Application Security Verification Standard

Track:	OWASP Projects
When:	Wed PM-1
Where:	Sessions 1
Organizers	Jim Manico Jim Manico
Participants	Adrian Winckles Adrian Winckles , Chris Dobson Chris Dobson , Felipe Zipitria Felipe Zipitria , Florian Buetow Florian Buetow , Jean-Jacques MOIROUX Jean-Jacques MOIROUX , John DiLeo John DiLeo , John Ellingsworth John Ellingsworth , Sean Turner Sean Turner , Sebastian Arriada Sebastian Arriada

The OWASP Application Security Verification Standard (ASVS) Project provides a basis for testing web application technical security controls and a list of requirements for secure development for developers.

Why

The Application Security Verification Standard is a list of application security requirements or tests that can be used by architects, developers, testers, security professionals, and even consumers to define what a secure application is.

ASVS has two main goals:

to help organizations develop and maintain secure applications
to allow security service, security tools vendors, and consumers to align their requirements and offerings

What

Risk analysis is always subjective and this is why we expect that there will most likely never be a 100% agreement on this standard. However, keeping the standard up-to-date is certainly a step in the right direction and it will enhance the overall concepts introduced in this important industry standard.

Outcomes

This Working Session will result in a short summary which will include the list of items that need to be updated, added, or changed in order to make the standard more applicable to modern applications.

Who

The target audiences for this Working Session are:

Security champions
Security architects
DevOps Roles
CISOs

Working materials

Here are the current ‘work in progress’ materials for this session (please add as much information as possible before the sessions):

ASVS 4.1 in English (pdf) (note that the “bleeding edge” version is what is in the GitHub repository.)
ASVS GitHub

Previous Summit Working Session

https://owaspsummit.org/Working-Sessions/Owasp-Projects/Application-Security-Verification-Standard.html

Register as participant

To register as participant add Application Security Verification Standard to either:

the sessions metadata field from your participant's page (find your participant page and look for the edit link).
or the participants metadata field from this git session page

Back to list of all Working Sessions