Why you shouldn’t use the OWASP Top 10 as software security requirements

blog.sdelements.com