OWASP - Application Security Awareness Campaigns
I’ve just launched the first OWASP Application Security Awareness Campaign with 11 Posters of the OWASP Top Ten 2021 project.
Working with OWASP, I have just launched the first of many Application Security Awareness campaigns. The new incubator project where you can download the campaigns is:
OWASP Application Security Awareness Campaigns
The idea of the project is to help Application Security people build security awareness in the engineering teams. The project will offer campaigns made up of posters that can be printed and put up around the office, as well as smaller images for use in emails you can put your own branding on to reinforce the message by sending the material directly to the mailboxes of your engineers.
In this first release there are 11 posters and email templates:
- Top Ten Overview
- A01:2021 - Broken Access Control
- A02:2021 - Cryptographic Failures
- A03:2021 - Injection
- A04:2021 - Insecure Design
- A05:2021 - Security Misconfiguration
- A06:2021 - Vulnerable and Outdated Components
- A07:2021 - Identification and Authentication Failures
- A08:2021 - Software and Data Integrity Failures
- A09:2021 - Security Logging and Monitoring Failures
- A10:2021 - Server-Side Request Forgery (SSRF)
 |
 |
|
 |
 |
|
 |
 |
|
 |
 |
|
 |
 |
|
There will be a “What is AppSec?” poster coming soon.