[Owasp-testing] Relation between OWASP ASVS and testing guide

false mehdi_yami at yahoo.com
Tue May 21 07:00:40 UTC 2013


Hi,
I am studied a little about both OWASP Testing guide and OWASP ASVS. I found that Testing guide is more practical and it provides real test cases and guidelines for testing, but ASVS is more better for business purposes and describing different levels of  testing for pricing and contract description but it does not provide any details about how we must verify requirements...

Now I am confusing about this that there is a gap between these two guidelines to apply security testing for business purposes... Is there any guidelines to specify and resolve this gap?

Thx,
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/owasp-testing/attachments/20130521/e1bbd992/attachment.html>


More information about the Owasp-testing mailing list