OWASP Launches Subtractive Security Top 10 to Combat Cyber Threats

OWASP has introduced the Subtractive Security Top 10 project, aimed at eliminating attack paths to reduce cyber risks. Led by Christopher Frenz, the initiative focuses on removing unnecessary capabilities and permissions that attackers could exploit. The project includes a new standard called Path Erasure Rate, which quantifies the effectiveness of these removals. This approach shifts the emphasis from detection to prevention, advocating for a proactive stance in cybersecurity. Organizations are encouraged to adopt this methodology to enhance their security posture and minimize potential vulnerabilities. The project is part of OWASP's ongoing efforts to support secure software development and architecture.

Key Points: • OWASP's Subtractive Security Top 10 focuses on removing attack paths rather than adding detection. • The initiative introduces the Path Erasure Rate standard to measure security improvements. • Organizations are encouraged to eliminate unnecessary permissions to reduce cyber risks.