Introducing the ASVS 4.0 | Andrew Van Der Stock | nullcon Goa 2019

This talk introduces the OWASP Application Security Verification Standard 4.0, which was released at nullcon after an extensive development period. The speaker details the new controls and significant changes that necessitated a complete renumbering of the ASVS, and explains how to adapt and customize the ASVS for specific industries or organizations. Additionally, the session includes a demonstration of a lesser-known attack technique that is crucial for security professionals to understand.