I am very pleased to announce that the WASC Threat Classification v2 is finally out the door. This project has by far been one of the most challenging, intellectually stimulating projects I've had the chance to work on. I have included the official announcement below.

"The Web Application Security Consortium (WASC) is pleased to announce the long awaited release of the WASC Threat Classification v2.0. The Threat Classification is an effort to classify the weaknesses, and attacks that can lead to the compromise of a website, its data, or its users. This document's primarily purpose is to serve as a reference guide for common attacks and weaknesses.



Main goals

- Refine document scope, terminology, and purpose

- Update existing sections when applicable

- Add missing attacks and weaknesses

- Creation of a firm, scalable base foundation allowing for the introduction of data views allowing for various

forms of data representation

- Addition of attack and weakness reference identifiers (WASC- xx)

- Publication of two data views





WASC Threat Classification v2.0 Online

http://projects.webappsec.org/Threat-Classification



Using the Threat Classification

http://projects.webappsec.org/Using-the-Threat-Classification



Threat Classification Authors and Contributors

http://projects.webappsec.org/Threat-Classification-Authors



WASC Threat Classification FAQ

http://projects.webappsec.org/Threat-Classification-FAQ



WASC Reference Identifier Grid

http://projects.webappsec.org/Threat-Classification-Reference-Grid



Threat Classification Data Views

http://projects.webappsec.org/Threat-Classification-Views



We have already started scoping the next minor release of the Threat Classification, and are seeking contributors. If you are interested in participating in the next release of the WASC Threat Classification please contact us at contact_at_@webappsec.org with the subject 'WASC Threat Classification Contribution Inquiry'.



Questions can be directed to Robert Auger (contact_at_webappsec.org) with the subject 'WASC TC Inquiry'."

