OWASP WASC Web Hacking Incidents Database Project - Revision history

Rcbarnett at 19:30, 12 March 2015

2015-03-12T19:30:41Z

Rcbarnett: /* Quick Downloads */

2014-07-17T20:36:53Z

‎Quick Downloads

Rcbarnett at 16:46, 14 March 2014

2014-03-14T16:46:53Z

Rcbarnett: /* Quick Download */

2014-02-18T21:46:05Z

‎Quick Download

Rcbarnett: /* FAQs */

2014-02-18T21:39:41Z

‎FAQs

Rcbarnett: /* Volunteers */

2014-02-18T21:23:37Z

‎Volunteers

Rcbarnett: /* Quick Download */

2014-02-18T21:18:23Z

‎Quick Download

Rcbarnett: /* Road Map and Getting Involved */

2014-02-18T20:10:28Z

‎Road Map and Getting Involved

Rcbarnett: /* News and Events */

2014-02-18T20:05:55Z

‎News and Events

Rcbarnett: /* Road Map and Getting Involved */

2014-02-18T20:04:58Z

‎Road Map and Getting Involved

@@ Line 60: / Line 60: @@
 * [https://docs.google.com/a/owasp.org/spreadsheet/ccc?key=0AvaknFl7LiV2dHRLNEVoNks4YlJuZ1JIWHhyaG5OM2c&usp=drive_web#gid=1 Full WHID Spreadsheet on Google Docs]
-* [https://www.google.com/fusiontables/data?docid=1PqK-eOdhn14po2MY31Knz1nJ48Q--k7uVCJcIqFg#rows:id=1 Full WHID Data on Google Fusion Tables]
+* [https://www.google.com/fusiontables/DataSource?snapid=S1536501YnLo Full WHID Data on Google Fusion Tables]
 * [https://www.owasp.org/index.php/OWASP_Top_10/Mapping_to_WHID Mapping OWASP Top 10 to WHID]

@@ Line 59: / Line 59: @@
 == Quick Downloads ==
-* [http://www.google.com/fusiontables/embedviz?gco_chartArea=%7B%22top%22%3A%2230%22%7D&containerId=gviz_canvas&q=select+col3%2C+count()+from+930451++group+by++col3+skip+0+limit+40&viz=GVIZ&t=PIE&width=1200&height=900 Top Attack Methods]
+* [https://docs.google.com/a/owasp.org/spreadsheet/ccc?key=0AvaknFl7LiV2dHRLNEVoNks4YlJuZ1JIWHhyaG5OM2c&usp=drive_web#gid=1 Full WHID Spreadsheet on Google Docs]
-* [http://www.google.com/fusiontables/embedviz?gco_chartArea=%7B%22top%22%3A%2230%22%7D&containerId=gviz_canvas&q=select+col4%2C+count()+from+930451++group+by++col4+skip+0+limit+20&viz=GVIZ&t=PIE&width=1200&height=900 Top App Weaknesses]
+* [https://www.google.com/fusiontables/data?docid=1PqK-eOdhn14po2MY31Knz1nJ48Q--k7uVCJcIqFg#rows:id=1 Full WHID Data on Google Fusion Tables]
 * [https://www.owasp.org/index.php/OWASP_Top_10/Mapping_to_WHID Mapping OWASP Top 10 to WHID]

@@ Line 62: / Line 62: @@
 * [http://www.google.com/fusiontables/embedviz?gco_chartArea=%7B%22top%22%3A%2230%22%7D&containerId=gviz_canvas&q=select+col4%2C+count()+from+930451++group+by++col4+skip+0+limit+20&viz=GVIZ&t=PIE&width=1200&height=900 Top App Weaknesses]
 * [http://www.google.com/fusiontables/embedviz?gco_chartArea=%7B%22top%22%3A%2230%22%7D&containerId=gviz_canvas&q=select+col5%2C+count()+from+930451++group+by++col5+skip+0+limit+24&viz=GVIZ&t=PIE&width=1200&height=900 Top Outcomes]
-* [https://www.google.com/fusiontables/DataSource?snapid=S283929Jw2s Full WHID (Google Fusion Tables)]
+* [https://www.google.com/fusiontables/DataSource?snapid=S1257901DGNM Full WHID (Google Fusion Tables)]
 * [https://www.owasp.org/index.php/OWASP_Top_10/Mapping_to_WHID Mapping OWASP Top 10 to WHID]

@@ Line 57: / Line 57: @@
 [https://spreadsheets.google.com/spreadsheet/embeddedform?formkey=dHktV0FmWGMyTDZPbkZtOEJXNzhPbXc6MQ WHID Submittal Form]
-== Quick Download ==
+== Quick Downloads ==
 * [http://www.google.com/fusiontables/embedviz?gco_chartArea=%7B%22top%22%3A%2230%22%7D&containerId=gviz_canvas&q=select+col3%2C+count()+from+930451++group+by++col3+skip+0+limit+40&viz=GVIZ&t=PIE&width=1200&height=900 Top Attack Methods]

@@ Line 86: / Line 86: @@
 =FAQs=
-; How is WHID different than the OWASP Top 10?
+; What incidents are included in the Web Hacking Incidents Database?
-: The OWASP Top 10 Risks applies a community-based Threat Model discussion to estimate the top risks to web applications.  OWASP WHID, on the other hand, focuses mainly on '''Attack Liklihood''' rather than '''Vulnerability Prevalence'''.
+: The Web Hacking Incident Database only tracks media reported security incidents that can be associated with a web application security vulnerability. We also try to limit the database only to targeted attacks, though the distinction between targeted and non-targeted attacks is grey. The database does not include known vulnerabilities in web based applications, an area well covered by other databases such as CVE, OSVDB or the  Bugtraq vulnerabilities database. Neither does the database include incidents in which web site were breached using operating system or network layer vulnerabilities. We also consider most web site defacements as non targeted attacks and do not include them in the database. For information about web site defacements refer to zone-h.
+: As those criteria are somewhat subjective, we welcome comments on the inclusion or exclusion of publicized security breaches.
-; How do I submit a WHID Incident?
-: If you have identified a possible WHID candidate, please use of the following methods to notify the WHID project team:
+; Were there only few dozen web hacks last year?
-<ol>
+: The criteria for inclusion in WHID are very strict. The goal is to list only incidents that are related to web application layer vulnerabilities/attacks. The goal is to show that application layer security is a risk we cannot ignore anymore.
-<li>Send an email to - owaspwhid_at_owasp.org</li>
+: Keep in mind, that while there are countless website hacks and defacements most are not reported. Even for those reported most of the time it is difficult to tell how exactly they occurred.
-<li>Send a tweet to [https://twitter.com/owaspwhid @owaspwhid]</li>
+: Specifically addressing the defacement incidents reported in zone-h, bear in mind that in nearly all of these incidents there is no public information on the way in which they were carried. Additionally, many defacements are not targeted and are the result of a wide scan for vulnerable sites and therefore we do not normally include defacements in WHID.
-<li>Enter a link in the [https://spreadsheets.google.com/spreadsheet/embeddedform?formkey=dHktV0FmWGMyTDZPbkZtOEJXNzhPbXc6MQ WHID Submittal Form]</li>
-</ol>
+; Why can't I find a well known incident in the database?
 = Acknowledgements =

@@ Line 101: / Line 101: @@
 The WHID project is only as good as it's entries.  The primary contributors to date have been:
 * Jason Coleman
 * [https://twitter.com/jeremiahg Jeremiah Grossman]

← Older revision		Revision as of 21:18, 18 February 2014
Line 53:		Line 53:

	\| valign="top" style="padding-left:25px;width:200px;" \|		\| valign="top" style="padding-left:25px;width:200px;" \|
		+
		+	== Submit an Incident ==
		+	[https://spreadsheets.google.com/spreadsheet/embeddedform?formkey=dHktV0FmWGMyTDZPbkZtOEJXNzhPbXc6MQ WHID Submittal Form]

	== Quick Download ==		== Quick Download ==

@@ Line 119: / Line 119: @@
 <li>Enter a link in the [https://spreadsheets.google.com/spreadsheet/embeddedform?formkey=dHktV0FmWGMyTDZPbkZtOEJXNzhPbXc6MQ WHID Submittal Form]</li>
 </ol>
 =Project About=

@@ Line 63: / Line 63: @@
 == News and Events ==
-* [20 Nov 2013] News 2
+* [18 Feb 2014] WHID Becomes an OWASP Project
 ==Classifications==

@@ Line 109: / Line 109: @@
 = Road Map and Getting Involved =
-As of XXX, the priorities are:
+* We are always looking for new methods of identifying real-world web compromise data sources. If you have any ideas, please contact us.
-* xxx
+* We are also looking for new ways to store and analyze the data.  Currently we utilize [http://tables.googlelabs.com/ Google's FusionTables] to store our raw data.  If you have recommendations for improvements, please let us know.
-Involvement in the development and promotion of XXX is actively encouraged!
+Involvement in the development and promotion of WHID is actively encouraged!
 You do not have to be a security expert in order to contribute.
 Some of the ways you can help:
-* xxx
+* If you have identified a possible WHID candidate, please use of the following methods to notify the WHID project team:
-* xxx
+<ol>
+<li>Send an email to - owaspwhid_at_owasp.org</li>
+<li>Send a tweet to [https://twitter.com/owaspwhid @owaspwhid]</li>
 =Project About=