security standards and best practices—differ from OWASP’s, which WASC
considers more “goal-oriented” in its multiplicity of open-source web security
software development projects and documentation initiatives. (Interestingly,
in November 2005, WASC published its Web Security Threat Classification,