Understanding common application security vulnerabilities
It seems like every day there is news about a company that lost millions of records in an attack by hackers. If you read the details of the attacks, they often stem from a small set of common vulnerabilities, many of which you have probably already heard of, such as SQL injection and Cross-Site Scripting (XSS).
One organization that strives to educate developers, testers, and security professionals (to help them produce more secure applications) is the Open Web Application Security Project (OWASP). This is a non-profit foundation that has produced a number of tools and projects over the years to this end, probably the most well known of these is the OWASP Top 10 list.
The Top 10 list is a list compiled approximately every three years that enumerates the top 10 most prevalent application security vulnerabilities. The current list is located at https://owasp.org/www-project-top-ten/2017/Top_10.html. We will talk about a...
