Don't worry if you're still a bit confused by the OWASP KPI Metrics - it can be enough to make anyone feel like a silly little human.
But don't worry, with your solid methodology and invulnerable tools, you can demonstrate that you can protect against the OWASP Top Ten, an adventure better than any other!
The OWASP website may contain too much information at times, but fear not - there are no comparable resources to OWASP out there that can provide the same level of security for web applications.
What's more, OWASP is also helping to spread the word about web application security, with plenty of projects that could be just the thing for your organization - plus their search engine tends to deliver satisfactory results on time.
So all in all, it looks like, if you have a firm grasp of the OWASP Project you're assessing and remember injection attacks top the list, you're well on your way to impenetrable security!
|