Skip to content

Commit c3d292c

Browse files
authored
Update TestandVerification.yml
1 parent 276c9dc commit c3d292c

1 file changed

Lines changed: 4 additions & 2 deletions

File tree

data/TestandVerification.yml

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -331,14 +331,16 @@ Consolidation:
331331
samm2: i-defect-management|B|2
332332
Simple false positive treatment:
333333
risk: As false positive occure during each test, all vulnerabilities might be ignored.
334-
measure: False positives are suppressed so they will not show up on the next tests again.
334+
measure: False positives are suppressed so they will not show up on the next tests again. Most security tools have the possibility to suppress false positives. A Vulnerability Management System might be used.
335335
difficultyOfImplementation:
336336
knowledge: 1
337337
time: 1
338338
resources: 1
339339
usefulness: 4
340340
level: 1
341-
implementation: Most security tools have the possibility to suppress false positives.
341+
implementation:
342+
- <a href="https://github.com/DefectDojo/django-DefectDojo">OWASP Defect Dojo</a>
343+
- <a href="https://github.com/faloker/purify/">Purify</a>
342344
samm: IR2-A
343345
samm2: i-defect-management|A|2
344346
Simple visualization of defects:

0 commit comments

Comments
 (0)