The focus is on the Top 10 Web Vulnerabilities identified by the Open Web Application Security Project (OWASP)
#1: Injection flaws (SQL injection, Command injection, LDAP injection)
#2: Broken Authentication
#3: Cross Site Scripting (XSS)
#4: Insecure Direct Object References
#5: Security misconfiguration
#6: Sensitive data exposure (Sensitive data should be encrypted in transit and at rest)
#7: Missing function level access control
#8: Cross Site Request Forgery (CSRF)
#9: Using components with known vulnerabilities
#10: Unvalidated redirects and forwards
No comments:
Post a Comment