diff --git a/2025/docs/en/0x02_2025-What_are_Application_Security_Risks.md b/2025/docs/en/0x02_2025-What_are_Application_Security_Risks.md index df1e9d066..dec3ea7e6 100644 --- a/2025/docs/en/0x02_2025-What_are_Application_Security_Risks.md +++ b/2025/docs/en/0x02_2025-What_are_Application_Security_Risks.md @@ -3,52 +3,39 @@ Attackers can potentially use many different paths through your application to d ![Calculation diagram](../assets/2025-algorithm-diagram.png) - +
Threat Agents - Attack \ -Vectors + Attack Vectors Exploitability - Likelihood of Missing Security -

- - Controls + Likelihood of Missing Security Controls

- Technical -

- - Impacts + Technical Impacts

- Business -

- - Impacts + Business Impacts

- By environment, \ -dynamic by situation picture + By environment, dynamic by situation picture - By Application exposure (by environment + By Application exposure (by environment) Avg Weighted Exploit - Missing Controls \ -by average Incidence rate \ -Weighed by coverage + Missing Controls by average Incidence rate Weighted by coverage Avg Weighted Impact diff --git a/2025/docs/en/A01_2025-Broken_Access_Control.md b/2025/docs/en/A01_2025-Broken_Access_Control.md index 575192150..c5c7ecf90 100644 --- a/2025/docs/en/A01_2025-Broken_Access_Control.md +++ b/2025/docs/en/A01_2025-Broken_Access_Control.md @@ -10,7 +10,7 @@ Maintaining its position at #1 in the Top Ten, 100% of the applications tested w ## Score table. - +
diff --git a/2025/docs/en/A02_2025-Security_Misconfiguration.md b/2025/docs/en/A02_2025-Security_Misconfiguration.md index 9dfcf4d17..2a0d27452 100644 --- a/2025/docs/en/A02_2025-Security_Misconfiguration.md +++ b/2025/docs/en/A02_2025-Security_Misconfiguration.md @@ -9,7 +9,7 @@ Moving up from #5 in the previous edition, 100% of the applications tested were ## Score table. -
CWEs Mapped
+
diff --git a/2025/docs/en/A03_2025-Software_Supply_Chain_Failures.md b/2025/docs/en/A03_2025-Software_Supply_Chain_Failures.md index 25e70baac..6e0994ddc 100644 --- a/2025/docs/en/A03_2025-Software_Supply_Chain_Failures.md +++ b/2025/docs/en/A03_2025-Software_Supply_Chain_Failures.md @@ -9,7 +9,7 @@ This was top-ranked in the Top 10 community survey with exactly 50% respondents ## Score table. -
CWEs Mapped
+
diff --git a/2025/docs/en/A04_2025-Cryptographic_Failures.md b/2025/docs/en/A04_2025-Cryptographic_Failures.md index d81a20b8f..d0d610234 100644 --- a/2025/docs/en/A04_2025-Cryptographic_Failures.md +++ b/2025/docs/en/A04_2025-Cryptographic_Failures.md @@ -11,7 +11,7 @@ Moving down two positions to #4, this weakness focuses on failures related to th ## Score table. -
CWEs Mapped
+
diff --git a/2025/docs/en/A05_2025-Injection.md b/2025/docs/en/A05_2025-Injection.md index d72e4a3b4..7d815a164 100644 --- a/2025/docs/en/A05_2025-Injection.md +++ b/2025/docs/en/A05_2025-Injection.md @@ -8,7 +8,7 @@ Injection falls two spots from #3 to #5 in the ranking, maintaining its position ## Score table. -
CWEs Mapped
+
diff --git a/2025/docs/en/A06_2025-Insecure_Design.md b/2025/docs/en/A06_2025-Insecure_Design.md index aaf212113..a39750380 100644 --- a/2025/docs/en/A06_2025-Insecure_Design.md +++ b/2025/docs/en/A06_2025-Insecure_Design.md @@ -9,7 +9,7 @@ Insecure Design slides two spots from #4 to #6 in the ranking as **[A02:2025-Sec ## Score table. -
CWEs Mapped
+
diff --git a/2025/docs/en/A07_2025-Authentication_Failures.md b/2025/docs/en/A07_2025-Authentication_Failures.md index 2d3077107..caec3d243 100644 --- a/2025/docs/en/A07_2025-Authentication_Failures.md +++ b/2025/docs/en/A07_2025-Authentication_Failures.md @@ -9,7 +9,7 @@ Authentication Failures maintains its position at #7 with a slight name change t ## Score table. -
CWEs Mapped
+
diff --git a/2025/docs/en/A08_2025-Software_or_Data_Integrity_Failures.md b/2025/docs/en/A08_2025-Software_or_Data_Integrity_Failures.md index 6c465c9b0..10d430fc9 100644 --- a/2025/docs/en/A08_2025-Software_or_Data_Integrity_Failures.md +++ b/2025/docs/en/A08_2025-Software_or_Data_Integrity_Failures.md @@ -8,7 +8,7 @@ Software or Data Integrity Failures continues at #8, with a slight, clarifying n ## Score table. -
CWEs Mapped
+
diff --git a/2025/docs/en/A09_2025-Security_Logging_and_Alerting_Failures.md b/2025/docs/en/A09_2025-Security_Logging_and_Alerting_Failures.md index 630f0fb74..b8eb68c7e 100644 --- a/2025/docs/en/A09_2025-Security_Logging_and_Alerting_Failures.md +++ b/2025/docs/en/A09_2025-Security_Logging_and_Alerting_Failures.md @@ -9,7 +9,7 @@ Security Logging & Alerting Failures retains its position at #9. This category h ## Score table. -
CWEs Mapped
+
diff --git a/2025/docs/en/A10_2025-Mishandling_of_Exceptional_Conditions.md b/2025/docs/en/A10_2025-Mishandling_of_Exceptional_Conditions.md index 6fdb956e4..3dfa3f541 100644 --- a/2025/docs/en/A10_2025-Mishandling_of_Exceptional_Conditions.md +++ b/2025/docs/en/A10_2025-Mishandling_of_Exceptional_Conditions.md @@ -11,7 +11,7 @@ Notable CWEs included in this category: *CWE-209 Generation of Error Message Con ## Score table. -
CWEs Mapped
+
diff --git a/2025/docs/en/X01_2025-Next_Steps.md b/2025/docs/en/X01_2025-Next_Steps.md index 49d350e68..1cec05a84 100644 --- a/2025/docs/en/X01_2025-Next_Steps.md +++ b/2025/docs/en/X01_2025-Next_Steps.md @@ -15,7 +15,7 @@ This is a renaming of 2021’s Denial of Service. That was renamed as it describ ### Score table. -
CWEs Mapped
+
diff --git a/2025/docs/stylesheets/extra.css b/2025/docs/stylesheets/extra.css new file mode 100644 index 000000000..4a63086ec --- /dev/null +++ b/2025/docs/stylesheets/extra.css @@ -0,0 +1,33 @@ +.table-base { + text-align: center; + display: inline-block; + font-size: .64rem; + max-width: 100%; + overflow: auto; + touch-action: auto; + border-radius: .1rem; + border: .05rem solid var(--md-typeset-table-color); + border-collapse: collapse; +} + +.table-base td, +.table-base th { + padding: 12px; + border: .05rem solid var(--md-typeset-table-color); +} + +.table-base tbody tr { + transition: background-color 125ms; +} + +.table-base tbody tr:hover { + background-color: var(--md-typeset-table-color--light); + box-shadow: 0 .05rem 0 var(--md-default-bg-color) inset; +} + +@media (max-width: 800px) { + .table-risk td, + .table-risk th { + min-width: 150px; + } +} diff --git a/2025/mkdocs.yml b/2025/mkdocs.yml index 35bee0cc0..5938966ca 100644 --- a/2025/mkdocs.yml +++ b/2025/mkdocs.yml @@ -74,6 +74,10 @@ plugins: include_dir: '../osib/include' verbose: false # debug on_error_fail: true + +extra_css: + - stylesheets/extra.css + extra: alternate: # see https://squidfunk.github.io/mkdocs-material/setup/changing-the-language/#site-language-selector - name: en - English
CWEs Mapped