Retail, food, Many of the attackers in this segment utilize All network Suitable for business Payment and Point hospitality opportunistic "smash and grab" tactics. accessible applications, product of Sale systems However, there is also a regular threat of applications. catalogue (POS) that contain specific attacks on applications known to information, internal large amounts of contain payment information, perform corporate transaction data that financial transactions, or store personally information, and could be used to identifiable information. Although less likely applications with commit fraud. This than the threats mentioned above, there is limited user includes any also the possibility of more advanced threats information (e.g. administrative attacking this industry segment to steal contact interfaces for these intellectual property, gain competitive information). applications. intelligence, or gain an advantage with the Applications with Applications with a target organization or a business partner in small or moderate large volume of negotiations. amounts of payment sensitive information data or checkout like full credit card functionality. numbers, mother's maiden name, social security numbers etc.
Retail, food, hospitality Many of the attackers in this segment utilize opportunistic "smash and grab" tactics. However, there is also a regular threat of specific attacks on applications known to contain payment information, perform financial transactions, or store personally identifiable information. Although less likely than the threats mentioned above, there is also the possibility of more advanced threats attacking this industry segment to steal intellectual property, gain competitive intelligence, or gain an advantage with the target organization or a business partner in negotiations. All network accessible applications. Suitable for business applications, product catalogue information, internal corporate information, and applications with limited user information (e.g. contact information). Applications with small or moderate amounts of payment data or checkout functionality. Payment and Point of Sale systems (POS) that contain large amounts of transaction data that could be used to commit fraud. This includes any administrative interfaces for these applications. Applications with a large volume of sensitive information like full credit card numbers, mother's maiden name, social security numbers etc.
OWASP_Application_Security_Verification_Standard_3.0.1.docx