#owasp

How apps actually get broken

A working threat model for web apps: who attacks them, what they're after, and the shape every lesson in this security series follows.