Why is WebGoat in the name? about benchmarkjava

[davewichers]

It's the Web goat benchmark edition. Totally different code.
On Apr 15, 2015 6:58 PM, "Dinis Cruz" [email protected] wrote:

When I saw the first description of the project I though that the
benchmark was checking how many WebGoat issues where discovered

But this looks like it has a difference code base, is that correct?

—
Reply to this email directly or view it on GitHub
#1.

[DinisCruz]

which is why it is confusing to use the WebGoat name

[davewichers]

WebGoat is a family of tools (currently the Java and .NET versions) that
help people learn about application security. People use the existing
WebGoat versions for benchmarking already, which isn¹t a great choice since
they are really intended for training purposes. We are extending the
WebGoat family to include a real benchmark, which we are calling the WebGoat
Benchmark Edition (WBE).

-Dave

From: Dinis Cruz [email protected]
Reply-To: OWASP/webgoat-benchmark
<reply+004c5b058a89516e17294d29594d2ed25f4513e1c47141fb92cf00000001114eac199
[email protected]>
Date: Tuesday, April 21, 2015 at 8:23 PM
To: OWASP/webgoat-benchmark [email protected]
Cc: Dave Wichers [email protected]
Subject: Re: [webgoat-benchmark] Why is WebGoat in the name? (#1)

which is why it is confusing to use the WebGoat name

�
Reply to this email directly or view it on GitHub
#1 (comment)
.

[DinisCruz]

Still think it is confusing using that as part of the name

Anyway, closing the question

[davewichers]

We are planning on renaming the project to be the OWASP Application
Security Testing (AST) Benchmark. Does that make more sense to you? AST is
the term Gartner uses to categorize DAST, SAST, IAST, and we intend to
support all types of vulnerability detection tools and services eventually.
We are starting with SAST.

-Dave

From: Dinis Cruz [email protected]
Reply-To: OWASP/webgoat-benchmark
<reply+004c5b05259626ba1a04c7ab3a5a9f1f48ac589641b8b93e92cf00000001117ecce49
[email protected]>
Date: Thursday, May 28, 2015 at 8:32 AM
To: OWASP/webgoat-benchmark [email protected]
Cc: Dave Wichers [email protected]
Subject: Re: [webgoat-benchmark] Why is WebGoat in the name? (#1)

Closed #1 #1 .

�
Reply to this email directly or view it on GitHub
#1 (comment) .

[davewichers]

We have renamed this project to remove WebGoat from the name. Its just the OWASP Benchmark now.