OWASP Automated Threats to Web Applications - Revision history

Clerkendweller: Mailing list

2019-03-11T21:36:52Z

Mailing list

2018-02-26T19:54:18Z

‎What Isn't It?: Nots

2018-02-26T15:47:00Z

‎Roadmap: v1.2 released

2018-02-26T15:46:10Z

‎In Print: Updated Lulu link for v1.2

2018-02-26T12:06:18Z

FAQs

2018-02-26T12:02:16Z

‎Introduction: Links to OAT wiki pages

2018-02-21T18:36:48Z

‎Automated Threats

2018-02-16T15:22:19Z

‎News and Events: OAT wiki pages

2018-02-16T15:21:14Z

‎News and Events: v1.2 and wiki pages

2018-02-16T12:02:18Z

‎Introduction: Link to category

@@ Line 595: / Line 595: @@
 Can you help? The project is looking for information on the prevalence and types of automated threats seen by web application owners in the real world. This will be used to refine and organise the information gathered from research papers, whitepapers, security reports and industry news. Please use the project's mailing lists to keep up-to-date with what's going on, and to contribute your ideas, feedback, and experience:
-* [https://lists.owasp.org/mailman/listinfo/automated_threats_to_web_applications Mailing list]
+* [https://groups.google.com/a/owasp.org/forum/#!forum/automated-threats-project Mailing list]
 To share information confidentially, you can email the project leaders directly: [mailto:tin.zaw@owasp.org Tin Zaw] and [mailto:colin.watson@owasp.org Colin Watson].

@@ Line 74: / Line 74: @@
 == What Isn't It? ==
-* Another vulnerability list
+* Not another vulnerability list
-* An OWASP Top N List
+* Not an OWASP Top N List
-* Threat modelling
+* Not threat modelling
-* Attack trees
+* Not attack trees
-* Non web
+* Not non web
-* Non application
+* Not non application
 ==Project Objective==

@@ Line 650: / Line 650: @@
 === Q4 2017 ===
-* Release v1.2 (now due 15 Feb 2018)
+* <strike>Release v1.2 </strike> Done
 === Q1 2018 ===

@@ Line 127: / Line 127: @@
 [[File:AutomatedThreatHandbook_small.jpg|link=http://www.lulu.com/shop/owasp-foundation/automated-threat-handbook/paperback/product-22932107.html]]
-The [http://www.lulu.com/shop/owasp-foundation/automated-threat-handbook/paperback/product-22932107.html Automated Threat Handbook] can be purchased at cost as a print on demand book.
+The [http://www.lulu.com/shop/owasp-foundation/automated-threat-handbook/paperback/product-23540699.html Automated Threat Handbook] can be purchased at cost as a print on demand book.
 ==Classifications==

@@ Line 75: / Line 75: @@
 * Another vulnerability list
 * Threat modelling
 * Attack trees
@@ Line 542: / Line 543: @@
 ; Isn't this another bug (vulnerability) list?
 : No, none of the named automated threat events are implementation bugs - they relate to abuse of functionality using automated means.
 ; I thought "so and so" already did that?

@@ Line 24: / Line 24: @@
 == Automated Threats ==
-The list of threat events, defined in full in the [https://www.owasp.org/index.php/File:Automated-threat-handbook.pdf OWASP Automated Threat Handbook], is:
+The list of threat events, defined more fully in the [https://www.owasp.org/index.php/File:Automated-threat-handbook.pdf OWASP Automated Threat Handbook], is:
 {| cellpadding="2"

@@ Line 108: / Line 108: @@
 == News and Events ==
-* [15 Jan 2018] v1.2 Handbook published
+* [16 Feb 2018] OAT wiki pages created
 * [25 Sep 2017] Promoted to Labs status
 * [19-20 Sep 2017] Working session at the AppSecUSA 2017 Project Summit

@@ Line 108: / Line 108: @@
 == News and Events ==
 * [25 Sep 2017] Promoted to Labs status
 * [19-20 Sep 2017] Working session at the AppSecUSA 2017 Project Summit
@@ Line 117: / Line 118: @@
 * [11-12 Oct 2016] Working session at the [https://docs.google.com/presentation/d/1iMQHTc-h5qcP7gBBRcPHGmVaTWqx3dpMwNMVlA--rqs/edit#slide=id.p3 AppSecUSA 2017 Project Summit]
 * [04 Aug 2016] Project Q&A at Blackhat USA 2-5pm in the OWASP booth
 * [26 Oct 2015] [https://www.owasp.org/index.php/File:Automated-threat-handbook.pdf v1.01 handbook] published
 * [24 Sep 2015] [https://www.owasp.org/index.php/File:Colinwatson-a-new-ontology-of-unwanted-automation.pptx Presentation] at [https://2015.appsecusa.org/c/?page_id=896#a AppSec USA 2015]

@@ Line 232: / Line 232: @@
 ==Introduction==
-The list of threat events and summary descriptions, defined in full in the [https://www.owasp.org/index.php/File:Automated-threat-handbook.pdf OWASP Automated Threat Handbook], is:
+The list of [[:Category:Automated Threat|automated threat events]] and summary descriptions, defined in full in the [https://www.owasp.org/index.php/File:Automated-threat-handbook.pdf OWASP Automated Threat Handbook], is:
 {| cellpadding="2"