OWASP / RiskAssessmentFramework

The Secure Coding Framework
MIT License
258 stars 100 forks source link

Skill level incorrectly affects likelihood #1

Open rrroar opened 5 years ago

rrroar commented 5 years ago

Hi.

Higher technical skill level required from a threat actor should lower likelihood, not the other way around (as it is now).

See https://obet.us/owasprr.html#1,9,9,9,9,9,9,9,9,9,9,9,9,9,9,9,50 vs https://obet.us/owasprr.html#9,9,9,9,9,9,9,9,9,9,9,9,9,9,9,9,50

Thanks