“The application should have something within it to help it detect, log, respond to, and even block security attacks that are happening.”

Transcript evidence from Chris and Robert -- Controversy within the OWASP Top 10 RC.