The OWASP Top 10 Threats

Dynamic webpages and web applications are commonplace. And so are the risks and threats to these web applications. The Open Web Application Security Project (OWASP) is an organization that researches and publishes known security threats to web applications and web services. Periodically, OWASP publishes the Top 10 list (https://owasp.org/www-project-top-ten/) of the most critical web security vulnerabilities. Security-minded web administrators should be well aware of the OWASP Top 10 list. Chapter 2 provided a brief explanation of each of the top 10 website threats. In the sections that follow, we look at some of the basic mitigation strategies used to resolve each of the threats.

The OWASP Top 10 list, each of which ...

Get Internet and Web Application Security, 3rd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.