课程: Secure Coding in Go

今天就学习课程吧!

今天就开通帐号,24,700 门业界名师课程任您挑!

OWASP Top 10

OWASP Top 10

- [Instructor] OWASP Top 10, list the most critical security risks in web applications. This site is a great start in your journey towards security. For me, this list is sad. All of these security risks are known for years. For example, the first role talks about injection. SQL injection is very old and even has its own iconic XKCD comic. I like to break this list into four sections. In the input section, we have SQL injection and server-side request forgery. In the output section, we have cryptographic failures and security misconfiguration. In authentication and authorization section, we have broken access control, identification and authorization, and again, security misconfiguration. And in the infrastructure section, we have insecure design, vulnerable and outdated components, software and data integrity failures and security logging and monitoring failure. We'll talk about these sections in other videos and see…

内容