Key points are not available for this paper at this time.
In a cut-throat world where time-to-market can be the difference between success and failure, it can be tempting for startups to think “let's get it to work first, and then we'll worry about security later.” However, major security flaws have killed more than one startup. This paper studies a small sample of 5 IT startups that offer services via the web, to determine to what extent they are aware of and can handle the OWASP top 10 threats.
Søhoel et al. (Fri,) studied this question.