15 years of OWASP Top 10 - Has the Cloud Made a Difference?
summary
Claim: the cloud shifts OWASP Top 10 from user-facing bugs toward backend and infrastructure risks, shown by a 15-year review of 2007–2021 lists and cloud history. Evidence: emergence of Docker and Kubernetes, serverless and S3 usage, the 2009 market ~ $58B growing to >$300B, and incidents like accidental AWS S3 support-role permissions. Practical focus: misconfigurations, logging gaps, and identity policies — fixable with least-privilege, logging pipelines, and open-source permission-auditing tools; S3 bucket leaks and misconfigured IAM roles recur.
AI-written summary · about
chapters (18)
- 0:00Introduction
- 1:06OWASP Top 10 overview
- 4:22Cloud impact on security
- 8:24Cloud milestones 2007-2010
- 12:06Cloud adoption 2009-2010
- 15:08Shift to backend risks
- 19:08Cloud mainstreaming effects
- 22:46Top 10 changes summary
- 26:19Future predictions
- 28:49Cloud security improvements
- 33:06Security guidelines consolidation
- 35:39Supply chain risks inclusion
- 39:13Release cycle relevance
- 41:05Biggest cloud concern
- 44:38Lift-and-shift challenges
- 47:09App vs cloud security overlap
- 48:12Least privilege strategies
- 50:03Closing remarks & Q&A
related talks
30mTop 10 Introduction
46mStories from the cutting edge: Cloud security in 2023
47mOWASP Top 10
01h 00mWeb Application Security Risks: A Look at OWASP Top Ten 2017
28mOWASP Serverless Top 10
17mThe Future of Cloud-Native Security
48mNine Cloud Security Reasons for Resting Breach Face
22mIntroducing the OWASP Top Ten for Kubernetes