SQL Injection and XSS Top Web App Security List

SQL injection and cross-site scripting lead a list of the most worrisome Web application security risks as reported by the Open Web Application Security Project.

By  Lisa Phifer | Jun 14, 2010
Print ArticleEmail Article
  • Share on Facebook
  • Share on Twitter
  • Share on LinkedIn

SQL injection and cross-site scripting lead a list of the most worrisome Web application security risks as reported by the Open Web Application Security Project.

The Open Web Application Security Project (OWASP) has long studied Web application security flaws. The last OWASP Top Ten list, published in 2007, was instrumental in educating developers about oft-exploited Web vulnerabilities, from cross-site scripting to unrestricted URL access. This April, the OWASP published an all new 2010 list, focused on putting today's most common flaws into a risk management context.

The goal: To help developers learn from others' mistakes and help enterprises better manage the business risks that these applications create. Patching vulnerabilities after deployment is not only inefficient, but increasingly ineffective. Instead, the OWASP Top Ten 2010 recommends adopting a more holistic approach to developing secure code and deploying security controls that together manage business risk from the get-go.

To assist the OWASP with this endeavor, we dedicate this month's eSecurityPlanet column to publicizing the Top Ten 2010 Web app risk list 'PDF'. By helping to spread the list far and wide, we hope to help make the World Wide Web a safer place for all.

Read "OWASP Top Ten 2010 Web App Risks" at eSecurity Planet

lisa@corecom.com

Comment and Contribute
(Maximum characters: 1200). You have
characters left.
Get the Latest Scoop with Enterprise Networking Planet Newsletter
Helpful Links

  • Yankee Group Mobile WAN Optimization Report

    Mobile work continues to evolve. Your organization must keep up with the demands of its mobile workforce. This report introduces the concept of mobile WAN optimization and provides three case studies including RCM, PRTM and Einstein that highlight how this emerging technology can help IT departments achieve what previously appeared to be conflicting goals. Read >

  • Network Security Resources

    More threats than ever before pose a danger to today's enterprise network. Get the latest tips and intel on the newest risks in our guide to network security resources. Read >

  • Extreme Savings: Cutting Costs with WAN Optimization

    Did you know it's possible to cut IT costs without impacting day-to-day IT operations? In fact, when you download this whitepaper from Riverbed on cost-savings through WAN optimization, you'll discover how businesses of all different sizes have realized a return on investment in just a few months through significant hard cost savings in areas such as bandwidth reduction and IT consolidation. It's called Extreme Savings and its only from Riverbed. Read >