This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Cornucopia - Ecommerce Website Edition - Wiki Deck"

From OWASP
Jump to: navigation, search
m (User link)
Line 1: Line 1:
 
__NOTOC__
 
__NOTOC__
Wiki card deck conceived and created by [https://www.owasp.org/index.php/User:Dariodf Darío De Filippis].
+
Wiki card deck conceived and created by Darío De Filippis.
  
 
= Versioning =
 
= Versioning =
Line 10: Line 10:
 
* OWASP SCP [[OWASP_Secure_Coding_Practices_Checklist]] v2
 
* OWASP SCP [[OWASP_Secure_Coding_Practices_Checklist]] v2
 
* OWASP ASVS [[OWASP_Application_Security_Verification_Standard]] v2 (2014)
 
* OWASP ASVS [[OWASP_Application_Security_Verification_Standard]] v2 (2014)
* OWASP AppSensor [[AppSensor_DetectionPoints]]
+
* OWASP AppSensor [[OWASP_AppSensor_DetectionPoints]]
 
* CAPEC [https://capec.mitre.org Mitre Common Attack Pattern Enumeration and Classification] v1.7.1
 
* CAPEC [https://capec.mitre.org Mitre Common Attack Pattern Enumeration and Classification] v1.7.1
 
* SAFECode [[SAFECode_Practical_Security_Stories|SAFECode Practical Security Stories and Security Tasks for Agile Development Environments]] July 2012
 
* SAFECode [[SAFECode_Practical_Security_Stories|SAFECode Practical Security Stories and Security Tasks for Agile Development Environments]] July 2012
Line 18: Line 18:
 
== <span style="padding:5px;background:#929292;font-weight:bold;"> [[Cornucopia_-_Ecommerce_Website_-_VE|<span style="color:white;">Data validation and encoding (VE)</span>]]</span> ==
 
== <span style="padding:5px;background:#929292;font-weight:bold;"> [[Cornucopia_-_Ecommerce_Website_-_VE|<span style="color:white;">Data validation and encoding (VE)</span>]]</span> ==
  
[[Cornucopia_-_Ecommerce_Website_-_VE_2|2]], [[Cornucopia_-_Ecommerce_Website_-_VE_3|3]], [[Cornucopia_-_Ecommerce_Website_-_VE_4|4]], [[Cornucopia_-_Ecommerce_Website_-_VE_5|5]], [[Cornucopia_-_Ecommerce_Website_-_VE_6|6]], [[Cornucopia_-_Ecommerce_Website_-_VE_7|7]], [[Cornucopia_-_Ecommerce_Website_-_VE_8|8]], [[Cornucopia_-_Ecommerce_Website_-_VE_9|9]], [[Cornucopia_-_Ecommerce_Website_-_VE_10|10]], [[Cornucopia_-_Ecommerce_Website_-_VE_J|J]], [[Cornucopia_-_Ecommerce_Website_-_VE_Q|Q]], [[Cornucopia_-_Ecommerce_Website_-_VE_K|K]], [[Cornucopia_-_Ecommerce_Website_-_VE_A|A]]
+
<span style="font-size:125%;letter-spacing: 0.15em;">[[Cornucopia_-_Ecommerce_Website_-_VE_2|2]] [[Cornucopia_-_Ecommerce_Website_-_VE_3|3]] [[Cornucopia_-_Ecommerce_Website_-_VE_4|4]] [[Cornucopia_-_Ecommerce_Website_-_VE_5|5]] [[Cornucopia_-_Ecommerce_Website_-_VE_6|6]] [[Cornucopia_-_Ecommerce_Website_-_VE_7|7]] [[Cornucopia_-_Ecommerce_Website_-_VE_8|8]] [[Cornucopia_-_Ecommerce_Website_-_VE_9|9]] <span style="letter-spacing: 0;">[[Cornucopia_-_Ecommerce_Website_-_VE_10|10]]</span> [[Cornucopia_-_Ecommerce_Website_-_VE_J|J]] [[Cornucopia_-_Ecommerce_Website_-_VE_Q|Q]] [[Cornucopia_-_Ecommerce_Website_-_VE_K|K]] [[Cornucopia_-_Ecommerce_Website_-_VE_A|A]]</span>
  
 
== <span style="padding:5px;background:#73abcc;font-weight:bold;"> [[Cornucopia_-_Ecommerce_Website_-_AT|<span style="color:white;">Authentication (AT)</span>]]</span> ==
 
== <span style="padding:5px;background:#73abcc;font-weight:bold;"> [[Cornucopia_-_Ecommerce_Website_-_AT|<span style="color:white;">Authentication (AT)</span>]]</span> ==
  
[[Cornucopia_-_Ecommerce_Website_-_AT_2|2]], [[Cornucopia_-_Ecommerce_Website_-_AT_3|3]], [[Cornucopia_-_Ecommerce_Website_-_AT_4|4]], [[Cornucopia_-_Ecommerce_Website_-_AT_5|5]], [[Cornucopia_-_Ecommerce_Website_-_AT_6|6]], [[Cornucopia_-_Ecommerce_Website_-_AT_7|7]], [[Cornucopia_-_Ecommerce_Website_-_AT_8|8]], [[Cornucopia_-_Ecommerce_Website_-_AT_9|9]], [[Cornucopia_-_Ecommerce_Website_-_AT_10|10]], [[Cornucopia_-_Ecommerce_Website_-_AT_J|J]], [[Cornucopia_-_Ecommerce_Website_-_AT_Q|Q]], [[Cornucopia_-_Ecommerce_Website_-_AT_K|K]], [[Cornucopia_-_Ecommerce_Website_-_AT_A|A]]
+
<span style="font-size:125%;letter-spacing: 0.15em;">[[Cornucopia_-_Ecommerce_Website_-_AT_2|2]] [[Cornucopia_-_Ecommerce_Website_-_AT_3|3]] [[Cornucopia_-_Ecommerce_Website_-_AT_4|4]] [[Cornucopia_-_Ecommerce_Website_-_AT_5|5]] [[Cornucopia_-_Ecommerce_Website_-_AT_6|6]] [[Cornucopia_-_Ecommerce_Website_-_AT_7|7]] [[Cornucopia_-_Ecommerce_Website_-_AT_8|8]] [[Cornucopia_-_Ecommerce_Website_-_AT_9|9]] <span style="letter-spacing: 0;">[[Cornucopia_-_Ecommerce_Website_-_AT_10|10]]</span> [[Cornucopia_-_Ecommerce_Website_-_AT_J|J]] [[Cornucopia_-_Ecommerce_Website_-_AT_Q|Q]] [[Cornucopia_-_Ecommerce_Website_-_AT_K|K]] [[Cornucopia_-_Ecommerce_Website_-_AT_A|A]]</span>
  
 
== <span style="padding:5px;background:#98c477;font-weight:bold;"> [[Cornucopia_-_Ecommerce_Website_-_SM|<span style="color:white;">Session management (SM)</span>]]</span> ==
 
== <span style="padding:5px;background:#98c477;font-weight:bold;"> [[Cornucopia_-_Ecommerce_Website_-_SM|<span style="color:white;">Session management (SM)</span>]]</span> ==
  
[[Cornucopia_-_Ecommerce_Website_-_SM_2|2]], [[Cornucopia_-_Ecommerce_Website_-_SM_3|3]], [[Cornucopia_-_Ecommerce_Website_-_SM_4|4]], [[Cornucopia_-_Ecommerce_Website_-_SM_5|5]], [[Cornucopia_-_Ecommerce_Website_-_SM_6|6]], [[Cornucopia_-_Ecommerce_Website_-_SM_7|7]], [[Cornucopia_-_Ecommerce_Website_-_SM_8|8]], [[Cornucopia_-_Ecommerce_Website_-_SM_9|9]], [[Cornucopia_-_Ecommerce_Website_-_SM_10|10]], [[Cornucopia_-_Ecommerce_Website_-_SM_J|J]], [[Cornucopia_-_Ecommerce_Website_-_SM_Q|Q]], [[Cornucopia_-_Ecommerce_Website_-_SM_K|K]], [[Cornucopia_-_Ecommerce_Website_-_SM_A|A]]
+
<span style="font-size:125%;letter-spacing: 0.15em;">[[Cornucopia_-_Ecommerce_Website_-_SM_2|2]] [[Cornucopia_-_Ecommerce_Website_-_SM_3|3]] [[Cornucopia_-_Ecommerce_Website_-_SM_4|4]] [[Cornucopia_-_Ecommerce_Website_-_SM_5|5]] [[Cornucopia_-_Ecommerce_Website_-_SM_6|6]] [[Cornucopia_-_Ecommerce_Website_-_SM_7|7]] [[Cornucopia_-_Ecommerce_Website_-_SM_8|8]] [[Cornucopia_-_Ecommerce_Website_-_SM_9|9]] <span style="letter-spacing: 0;">[[Cornucopia_-_Ecommerce_Website_-_SM_10|10]]</span> [[Cornucopia_-_Ecommerce_Website_-_SM_J|J]] [[Cornucopia_-_Ecommerce_Website_-_SM_Q|Q]] [[Cornucopia_-_Ecommerce_Website_-_SM_K|K]] [[Cornucopia_-_Ecommerce_Website_-_SM_A|A]]</span>
  
 
== <span style="padding:5px;background:#d9c049;font-weight:bold;"> [[Cornucopia_-_Ecommerce_Website_-_AZ|<span style="color:white;">Authorization (AZ)</span>]]</span> ==
 
== <span style="padding:5px;background:#d9c049;font-weight:bold;"> [[Cornucopia_-_Ecommerce_Website_-_AZ|<span style="color:white;">Authorization (AZ)</span>]]</span> ==
  
[[Cornucopia_-_Ecommerce_Website_-_AZ_2|2]], [[Cornucopia_-_Ecommerce_Website_-_AZ_3|3]], [[Cornucopia_-_Ecommerce_Website_-_AZ_4|4]], [[Cornucopia_-_Ecommerce_Website_-_AZ_5|5]], [[Cornucopia_-_Ecommerce_Website_-_AZ_6|6]], [[Cornucopia_-_Ecommerce_Website_-_AZ_7|7]], [[Cornucopia_-_Ecommerce_Website_-_AZ_8|8]], [[Cornucopia_-_Ecommerce_Website_-_AZ_9|9]], [[Cornucopia_-_Ecommerce_Website_-_AZ_10|10]], [[Cornucopia_-_Ecommerce_Website_-_AZ_J|J]], [[Cornucopia_-_Ecommerce_Website_-_AZ_Q|Q]], [[Cornucopia_-_Ecommerce_Website_-_AZ_K|K]], [[Cornucopia_-_Ecommerce_Website_-_AZ_A|A]]
+
<span style="font-size:125%;letter-spacing: 0.15em;">[[Cornucopia_-_Ecommerce_Website_-_AZ_2|2]] [[Cornucopia_-_Ecommerce_Website_-_AZ_3|3]] [[Cornucopia_-_Ecommerce_Website_-_AZ_4|4]] [[Cornucopia_-_Ecommerce_Website_-_AZ_5|5]] [[Cornucopia_-_Ecommerce_Website_-_AZ_6|6]] [[Cornucopia_-_Ecommerce_Website_-_AZ_7|7]] [[Cornucopia_-_Ecommerce_Website_-_AZ_8|8]] [[Cornucopia_-_Ecommerce_Website_-_AZ_9|9]] <span style="letter-spacing: 0;">[[Cornucopia_-_Ecommerce_Website_-_AZ_10|10]]</span> [[Cornucopia_-_Ecommerce_Website_-_AZ_J|J]] [[Cornucopia_-_Ecommerce_Website_-_AZ_Q|Q]] [[Cornucopia_-_Ecommerce_Website_-_AZ_K|K]] [[Cornucopia_-_Ecommerce_Website_-_AZ_A|A]]</span>
  
 
== <span style="padding:5px;background:#a395ca;font-weight:bold;"> [[Cornucopia_-_Ecommerce_Website_-_CR|<span style="color:white;">Cryptography (CR)</span>]]</span> ==
 
== <span style="padding:5px;background:#a395ca;font-weight:bold;"> [[Cornucopia_-_Ecommerce_Website_-_CR|<span style="color:white;">Cryptography (CR)</span>]]</span> ==
  
[[Cornucopia_-_Ecommerce_Website_-_CR_2|2]], [[Cornucopia_-_Ecommerce_Website_-_CR_3|3]], [[Cornucopia_-_Ecommerce_Website_-_CR_4|4]], [[Cornucopia_-_Ecommerce_Website_-_CR_5|5]], [[Cornucopia_-_Ecommerce_Website_-_CR_6|6]], [[Cornucopia_-_Ecommerce_Website_-_CR_7|7]], [[Cornucopia_-_Ecommerce_Website_-_CR_8|8]], [[Cornucopia_-_Ecommerce_Website_-_CR_9|9]], [[Cornucopia_-_Ecommerce_Website_-_CR_10|10]], [[Cornucopia_-_Ecommerce_Website_-_CR_J|J]], [[Cornucopia_-_Ecommerce_Website_-_CR_Q|Q]], [[Cornucopia_-_Ecommerce_Website_-_CR_K|K]], [[Cornucopia_-_Ecommerce_Website_-_CR_A|A]]
+
<span style="font-size:125%;letter-spacing: 0.15em;">[[Cornucopia_-_Ecommerce_Website_-_CR_2|2]] [[Cornucopia_-_Ecommerce_Website_-_CR_3|3]] [[Cornucopia_-_Ecommerce_Website_-_CR_4|4]] [[Cornucopia_-_Ecommerce_Website_-_CR_5|5]] [[Cornucopia_-_Ecommerce_Website_-_CR_6|6]] [[Cornucopia_-_Ecommerce_Website_-_CR_7|7]] [[Cornucopia_-_Ecommerce_Website_-_CR_8|8]] [[Cornucopia_-_Ecommerce_Website_-_CR_9|9]] <span style="letter-spacing: 0;">[[Cornucopia_-_Ecommerce_Website_-_CR_10|10]]</span> [[Cornucopia_-_Ecommerce_Website_-_CR_J|J]] [[Cornucopia_-_Ecommerce_Website_-_CR_Q|Q]] [[Cornucopia_-_Ecommerce_Website_-_CR_K|K]] [[Cornucopia_-_Ecommerce_Website_-_CR_A|A]]</span>
  
 
== <span style="padding:5px;background:#17365d;font-weight:bold;"> [[Cornucopia_-_Ecommerce_Website_-_C|<span style="color:white;">Cornucopia (C)</span>]]</span> ==
 
== <span style="padding:5px;background:#17365d;font-weight:bold;"> [[Cornucopia_-_Ecommerce_Website_-_C|<span style="color:white;">Cornucopia (C)</span>]]</span> ==
  
[[Cornucopia_-_Ecommerce_Website_-_C_2|2]], [[Cornucopia_-_Ecommerce_Website_-_C_3|3]], [[Cornucopia_-_Ecommerce_Website_-_C_4|4]], [[Cornucopia_-_Ecommerce_Website_-_C_5|5]], [[Cornucopia_-_Ecommerce_Website_-_C_6|6]], [[Cornucopia_-_Ecommerce_Website_-_C_7|7]], [[Cornucopia_-_Ecommerce_Website_-_C_8|8]], [[Cornucopia_-_Ecommerce_Website_-_C_9|9]], [[Cornucopia_-_Ecommerce_Website_-_C_10|10]], [[Cornucopia_-_Ecommerce_Website_-_C_J|J]], [[Cornucopia_-_Ecommerce_Website_-_C_Q|Q]], [[Cornucopia_-_Ecommerce_Website_-_C_K|K]], [[Cornucopia_-_Ecommerce_Website_-_C_A|A]]
+
<span style="font-size:125%;letter-spacing: 0.15em;">[[Cornucopia_-_Ecommerce_Website_-_C_2|2]] [[Cornucopia_-_Ecommerce_Website_-_C_3|3]] [[Cornucopia_-_Ecommerce_Website_-_C_4|4]] [[Cornucopia_-_Ecommerce_Website_-_C_5|5]] [[Cornucopia_-_Ecommerce_Website_-_C_6|6]] [[Cornucopia_-_Ecommerce_Website_-_C_7|7]] [[Cornucopia_-_Ecommerce_Website_-_C_8|8]] [[Cornucopia_-_Ecommerce_Website_-_C_9|9]] <span style="letter-spacing: 0;">[[Cornucopia_-_Ecommerce_Website_-_C_10|10]]</span> [[Cornucopia_-_Ecommerce_Website_-_C_J|J]] [[Cornucopia_-_Ecommerce_Website_-_C_Q|Q]] [[Cornucopia_-_Ecommerce_Website_-_C_K|K]] [[Cornucopia_-_Ecommerce_Website_-_C_A|A]]</span>
  
 
== <span style="padding:5px;background:#fbbb7b;font-weight:bold;"> [[Cornucopia_-_Ecommerce_Website_-_W|<span style="color:white;">Wild Card (W)</span>]]</span> ==
 
== <span style="padding:5px;background:#fbbb7b;font-weight:bold;"> [[Cornucopia_-_Ecommerce_Website_-_W|<span style="color:white;">Wild Card (W)</span>]]</span> ==
  
[[Cornucopia_-_Ecommerce_Website_-_W_Joker_A|Joker (A)]], [[Cornucopia_-_Ecommerce_Website_-_W_Joker_B|Joker (B)]]
+
<span style="font-size:125%;">[[Cornucopia_-_Ecommerce_Website_-_W_Joker_A|Joker (A)]]<span style="letter-spacing: 0.15em;"> </span>[[Cornucopia_-_Ecommerce_Website_-_W_Joker_B|Joker (B)]]</span>
  
 
[[Category: Attack]] [[Category: Threat_Modeling]]  [[Category:OWASP Project]]  [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]] [[Category:SAMM-SR-2]] [[Category:SAMM-TA-1]] [[Category:SAMM-EG-2]]
 
[[Category: Attack]] [[Category: Threat_Modeling]]  [[Category:OWASP Project]]  [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]] [[Category:SAMM-SR-2]] [[Category:SAMM-TA-1]] [[Category:SAMM-EG-2]]

Revision as of 17:05, 21 January 2016

Wiki card deck conceived and created by Darío De Filippis.

Versioning

This wiki deck relates to version 1.10 EN of OWASP Cornucopia Ecommerce Website Edition (currently the only edition). The cards are available in other formats (DOC, PDF, print) from the main project pages.

The cross-references relate to the following versions of other OWASP and external resources:

Deck

Data validation and encoding (VE)

2 3 4 5 6 7 8 9 10 J Q K A

Authentication (AT)

2 3 4 5 6 7 8 9 10 J Q K A

Session management (SM)

2 3 4 5 6 7 8 9 10 J Q K A

Authorization (AZ)

2 3 4 5 6 7 8 9 10 J Q K A

Cryptography (CR)

2 3 4 5 6 7 8 9 10 J Q K A

Cornucopia (C)

2 3 4 5 6 7 8 9 10 J Q K A

Wild Card (W)

Joker (A) Joker (B)