Difference between revisions of "Talk:OWASP Proactive Controls"

Latest revision as of 16:03, 16 May 2016

Differences in two versions.

I think you should mention about changes between two versions of Proactive Controls guide with reasons. OWASP does this in OWASP Top 10. I think you should do same thing in Proactive Controls.

For example I am wondering what is equivalent of C10 of 2014 version in 2016?

@@ Line 1: / Line 1: @@
-Thomas: Very interesting, move this here? https://www.owasp.org/index.php/OWASP_Validation_Regex_Repository
+== Differences in two versions. ==
-Hi Jim,
+I think you should mention about changes between two versions of Proactive Controls guide with reasons.
+OWASP does this in OWASP Top 10. I think you should do same thing in Proactive Controls.
-When looking at your your project page, maybe I have something, that you might be interested in.
+For example I am wondering what is equivalent of C10 of 2014 version in 2016?
-A while ago, Torsten figured out how to write the password policy of Windows (3 out of 4) as an regular expression:
-^(?:(?=.*\d)(?=.*[A-Z])(?=.*[a-z])|(?=.*\d)(?=.*[^A-Za-z0-9])(?=.*[a-z])|(?=.*[^A-Za-z0-9])(?=.*[A-Z])(?=.*[a-z])|(?=.*\d)(?=.*[A-Z])(?=.*[^A-Za-z0-9]))(?!.*(.)\1{2,})[A-Za-z0-9!~<>,;:_=?*+#."&§%°()\|\[\]\-\$\^\@\/]{8,32}$
-A short explanation:
-password length 8 -32
-Character set:   -Za-z0-9!/~<>,;:_=?*+-#."&§$%^°()[]|@
-at least 3 out 4 (uppercase and lowercase letters, numbers and special characters)
-no more than 2 equal characters in a row (that's not Windows)
-More on your document maybe later.
-Best Regards,
-Thomas

Difference between revisions of "Talk:OWASP Proactive Controls"

Latest revision as of 16:03, 16 May 2016

Differences in two versions.

Navigation menu

Personal tools

Namespaces

Variants

Views

More

Search

Navigation

Reference

Tools