课程: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

免费学习该课程！

今天就开通帐号，24,600 门业界名师课程任您挑！

OWASP top ten

OWASP top ten

课程: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

开始一个月试用 购买团队方案

OWASP top ten

“

- [Instructor] Web security vulnerabilities are among the trickiest problems tackled by cybersecurity professionals. The Open Worldwide Application Security Project, OWASP, maintains a list of the top 10 web security vulnerabilities that cybersecurity experts should understand and defend against to maintain secure web services. The current version of the OWASP Top 10 was developed in 2021. According to OWASP, the top 10 web security issues are broken access control, cryptographic failures, injection attacks, insecure design, security misconfigurations, vulnerable and outdated components, identification and authentication failures, software and data integrity failures, security logging and monitoring failures, and server side request forgery. Broken access control occurs when developers fail to check on the backend whether a user is authorized to access a particular function of an application. Users with knowledge of the application may send requests directly to the server, bypassing…

内容