Aaron G

Include a stack or heap overflow example within the binary exploitation stage

IoTGoat as a container

2

Run IoTGoat within a docker container https://github.com/openwrt/docker

https://www.nist.gov/privacy-framework/privacy-framework

https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=201720180SB327

Create ISTG cover art and align on look/feel with MSTG where possible

1

MSTG is a mature flagship OWASP project with a large following and a steady flow of contributors maintaining the guide. Until ISTG has a similar maturity and following, it'll be...

ATT&CK ICS, D3FEND & ISTG

3

Folks have asked about relation to adjacent frameworks like ATT&CK ICS, D3FEND (links below) and overlap of them with ISTG. https://attack.mitre.org/techniques/ics/ https://attack.mitre.org/matrices/ics/ https://d3fend.mitre.org/ Curious if the project has a perspective...

A bootloader section would provide test case coverages at lower lever components that create chains of trust that secure devices at boot and their identity