FABE

Enabling Security©2016 Asterisk Research, Inc.

Feature特徴 Advantage利点 Benefit利益 Evidence証拠

FABE （ Feature, Advantage, Benefit, Evidence ）• プレゼンテーションや製品・サービス紹介において、相手にとって有意義な情報を

わかりやすく提供するための、情報提供・プレゼンテーション フレームワーク

Lesson 2: Cyber Security Keywords

E説明対象 [OWASP Top 10] の特徴の洗い出し

• WHAT– “powerful awareness document for web

application security”– “broad consensus about most critical web

application security flaws”

• WHO– What is OWASP?

“OWASP is an open community focused on improving web application security”

• WHERE

• WHEN– OWASP Top 10 – 2010, – OWASP Top 10 – 2013, – OWASP Top 10 – 2016 （未公開）

• HOW– “variety of security experts from around the

world share expertise”

• WHY– “urge all companies to adopt within their

organization so web applications do not contain these flaws”

– “perhaps the most effective first step towards changing software development culture” = “secure code”

Enabling Security©2016 Asterisk Research, Inc.

Lesson 2: Cyber Security Keywords

TEMPLATE 分解： OWASP Top 10

Sample Script:[The OWASP Top 10] is a powerful [awareness document] for [web application security] offered by [OWASP], an [open community] focused on [improving application security].

Involving a variety of [security experts] from around the world, it offers a [broad consensus] about the [most critical web application security flaws].

[The OWASP Top 10] is perhaps the most effective first step towards changing [the software development culture].

By adopting [the OWASP Top 10], companies and other organizations can [produce secure code] by making sure their [web applications do not contain these security flaws].

Points （ FABE フレームワーク）

Enabling Security©2016 Asterisk Research, Inc.

Features [ 特徴 ]• What is the OWASP Top 10?• What is OWASP?

Advantage [ 利点 ]• What is the advantage of the OWASP Top 10?

Benefit [ 利益 ]• What is the benefit offered by the OWASP Top 10?

Evidence [ 証拠 ]• How does the OWASP Top 10 do this?