Acronyms and Mapping CWE
Channel: DC864 Group
Date: 2023-01-03

Acronyms and Mapping CWE by Nick Mansfield

CVE, CWE, ATT&CK, and OWASP, so many ways to describe risk, but how do they work? This talk will help show how these tools work together at a high level and how we can use them to help track risk. Community member WinRM presents this month’s presentation.

TIMELINE
00:00:00 - Welcome and announcements
00:02:30 - Presentation start
00:04:05 - MITRE CWE, common weakness enumeration
00:07:50 - CWE Top 25
00:10:17 - OWASP example
00:11:20 - MITRE ATT&CK and CAPEC
00:12:50 - Choices...
00:13:53 - FAQ


JOIN YOUR LOCAL DEF CON GROUP
If you are local to the upstate of South Carolina follow us online.  If not, join or start your own local DEF CON Group.
Meetup: https://www.Meetup.com/defcon864/
Website: https://www.DC864.org