After doing a couple of presentations on the OWASP Top 10 list a couple of years back I *tried* to put together a series of viable demos that would help to illustrate the list in a more practical fashion. Unfortunately I got as far as the first two issues and never completed the exercise.
Recently I stumbled upon a really well written blog by Troy Hunt, a Microsoft MVP, who has a clear passion for security. Troy has created a series of 10 blog posts that illustrate the OWASP top 10 from the view of the .NET stack and ultimately makes these topics more accessible to developers like us. If you have a few moments please check out his posts (and his blog in general):
- Injection
- Cross-Site Scripting (XSS)
- Broken Authentication and Session Management
- Insecure Direct Object References
- Cross-Site Request Forgery (CSRF)
- Security Misconfiguration
- Insecure Cryptographic Storage
- Failure to Restrict URL Access
- Insufficient Transport Layer Protection
- Unvalidated Redirects and Forwards
Comments are closed.