Flagship Projects: Top 10 "Intro of Top 10"

on YouTube ↗29m

" summary

OWASP Top 10 2021 is released with analysis of 515,000 applications and concrete changes: injection drops from A1, cross-site scripting and JS injection are merged into a broader injection category, and four new entries appear including insecure design added and SSRF. Delivery is a mobile‑friendly site plus a developer poster; recommendations include threat modeling, paved roads, CI/CD checks to fail builds for vulnerable components, and software‑supply integrity controls; an SSRF section comes from Owens Desai.

AI-written summary · about

" chapters (11)

1. 0:00Start
2. 8:59Broken Access Control
3. 10:40Cryptographic Failures
4. 11:34Injection
5. 13:03Insecure Design
6. 15:58Security Misconfiguration
7. 17:38Vulnerable and outdated Components
8. 19:19identification and authentication failures
9. 22:06Software and Data Integrity Failures
10. 23:41Security Logging and Monitoring Failures
11. 25:47Server-side Request Forgery (55RF)

" related talks

• 30mTop 10 IntroductionAustin Chamberlain · OWASP New Zealand Day 2024
• 01h 00mWeb Application Security Risks: A Look at OWASP Top Ten 2017Christian Wenz · NDC Oslo 2017
• 47mOWASP Top 10Andrew van der Stock · OWASP AppSec California 2018
• 50mThe How and Why of the OWASP Top Ten 2021Brian Glas · Global AppSec US 2021 Virtual
• 51mHarmonizing the OWASP API and Application Top 10 ListsJoe Schottman · Global AppSec US 2021 Virtual
• 01h 02mUnderstanding the OWASP Top 10Gary Hockin · PHP UK Conference 2015
• 43mFrom OWASP top 10 to Secure ApplicationsRoberto Velasco · Spring I/O 2019
• 31mOWASP API Security ProjectErez Yalon, Paulo Silva · Global AppSec Lisbon 2024