Threats and Vulnerabilities in Web Applications and How to Avoid Them
摘要
This paper presents the 10 most common web threats and vulnerabilities, determined by OWASP Foundation. Daily, individuals make use of web applications and websites to read, gather, and exchange a massive amount of information. That is the reason why web developers and users of web applications must increase awareness of potential threats and expand their knowledge of web security. The introduction part brings information about OWASP Foundation and deals with terms of web application security. The main reasons for security problems in the development and usage of web applications are given. Key concepts of web application security are described. In the chapter, the Top 10 web application security risks are presented. Based on several examples, possible security flaws are shown and explained. For each threat, several potential scenarios are listed, highlighting areas to be mindful of and providing guidance on safeguarding against them.