Web App Sec Benchmarks

Benjamin Livshits from Stanford University proposes defining common benchmarks for testing web application security. A growing number of daily security vulnerabilities, especially application-level issues like SQL injections, cross-site scripting, and path traversal attacks, have motivated interest in security tools. Currently, many tools claim to address application vulnerabilities but are difficult to compare due to the lack of standardized benchmarks.