at about the same time that the Defense Information Systems Agency (DISA)
established the Application Security Project within the Applications Division of
its Center for Information Assurance Engineering (CIAE) (see Section 6.1.7). The
Application Security Project used the OWASP Top Ten as a baseline for defining