Flagship Projects: Cloud-Native Application Security Top 10 Flagship Project
summary
OWASP launches a community-driven cloud native application security top 10 that lists ten concrete risks, not abstractions, with each entry naming attack patterns and where they occur: insecure cloud orchestration and container misconfigs, multi-service injection flows, secrets and vulnerable base images. Project artifacts live in Slack and GitHub, reference open-source telemetry for tracing, and the deliverable is a maintained checklist and guidance set that is under active development and seeking contributors.
AI-written summary · about
chapters (16)
- 0:00Intro
- 0:52About Me
- 2:21Why Cloud Native Appsec Requires dedicated top 10 List?
- 3:41What Makes Cloud Native Appsec Md Complex
- 5:47Project Leaders
- 7:20Insecure Cloud, Orchestration or Contain Configuration
- 8:38injection Flaws
- 9:48Improper Authentication Authorization
- 11:55Insecure Secrets Storage
- 13:09Over-permissive/Insecure network polic
- 14:19Ualng components with known vulnerab
- 15:23Improper assets management
- 16:29Inadequate compute' resource quota in
- 17:27ineffective logging & monitoring
- 18:24Quick Recap
- 19:18How You Can Contribute
related talks
17mThe Future of Cloud-Native Security
22mIntroducing the OWASP Top Ten for Kubernetes
41mPanel: Securing Cloud Native Applications
52mSecurity in Cloud-Native
48mSecurity for Cloud Native Applications
56mNavigating the Cloud Native Security Landscape
36mApp Security Does Not Need To Be Fun: Ignoring OWASP To Have A Terrible Time
40mCreating Cloud Native Security