[Owasp-hongkong] Fwd: [Owasp-leaders] Web Hacking Incidenets Database 2007 annual Report is out

[Anthony Cheuk Tung, LAI, CISSP, CISM, CISA]

Dear members,

This is a new report released from Webappsec.org.

Regards,
Anthony Lai
Chapter Leader, OWASP (HK)


---------- Forwarded message ----------
From: Ofer Shezaf <ofers at breach.com>
Date: Feb 8, 2008 1:32 PM
Subject: [Owasp-leaders] Web Hacking Incidenets Database 2007 annual
Report is out
To: OWASP Leaders <owasp-leaders at lists.owasp.org>



The Web Hacking Incidents Database (WHID) annual report for 2007 is out.

The WHID 2007 annual report builds on the new metrics we recently added to
WHID, such as attack method, attack outcome, country and industry sector of
hacked organization to analyze web hacking trends in 2007.

In the report we discuss the drivers for web hacking, the vulnerabilities
exploited and the types of organization attacked. We hope that the report
can serve to highlight the web application security issue and as a base for
risk analysis for web applications.

The report was prepared by The Web Application Security Consortium (WASC)
together with Breach Security Labs, the research arm of Breach Security,
which sponsors the project.

The report is available at:
http://www.webappsec.org/projects/whid/statistics.shtml

~ Ofer


Ofer Shezaf
Work: ofers at breach.com, +972-9-9560036 #212
Personal: ofer at shezaf.com, +972-54-4431119

VP Security Research, Breach Security
Chair, OWASP Israel
Leader, ModSecurity Core Rule Set Project
Leader, WASC Web Hacking Incidents Database Project


_______________________________________________
OWASP-Leaders mailing list
OWASP-Leaders at lists.owasp.org
https://lists.owasp.org/mailman/listinfo/owasp-leaders



-- 
Regards,
Anthony LAI, CISSP, CISA
Founder & Editor, InfoSec Hong Kong
URL: http://www.infosechk.org

---------------------------------------------------------------
最新資訊保安資訊就在InfoSec Hong Kong
http://www.infosechk.org

Latest Security News are in InfoSec Hong Kong :
http://www.infosechk.org/