SQL Injection and XSS Top Web App Security List

SQL injection and cross-site scripting lead a list of the most worrisome Web application security risks as reported by the Open Web Application Security Project.

---

The Open Web Application Security Project (OWASP) has long studied Web application security flaws. The last OWASP Top Ten list, published in 2007, was instrumental in educating developers about oft-exploited Web vulnerabilities, from cross-site scripting to unrestricted URL access. This April, the OWASP published an all new 2010 list, focused on putting today's most common flaws into a risk management context.

The goal: To help developers learn from others' mistakes and help enterprises better manage the business risks that these applications create. Patching vulnerabilities after deployment is not only inefficient, but increasingly ineffective. Instead, the OWASP Top Ten 2010 recommends adopting a more holistic approach to developing secure code and deploying security controls that together manage business risk from the get-go.

To assist the OWASP with this endeavor, we dedicate this month's eSecurityPlanet column to publicizing the Top Ten 2010 Web app risk list 'PDF'. By helping to spread the list far and wide, we hope to help make the World Wide Web a safer place for all.

Read "OWASP Top Ten 2010 Web App Risks" at eSecurity Planet