Top 10 Privacy Risks in Web Applications
summary
An overview of the OWASP Top 10 Privacy Risks for web applications, explaining concrete technical privacy issues and how to mitigate them using security mechanisms and privacy-by-design practices. Covers practical, non-legal guidance aimed at security professionals for selecting appropriate countermeasures under CCPA and GDPR contexts.
AI-written summary · about
chapters (20)
- 0:00Intro
- 1:25About me
- 2:05Situation
- 4:54OWASP Top 10 Privacy Risks Project - Facts & Figures
- 6:18Project Goal
- 8:45Project Method
- 10:19Privacy in DevSecOps
- 12:17Results Overview
- 13:57Web Application Vulnerabilities
- 16:58P2: Operator-sided Data Leakage
- 17:30Insufficient Data Breach Response
- 19:25Consent on Everything *New
- 24:08Non-transparent Policies, Terms & Conditions
- 25:26Insufficient Deletion of Personal Data
- 27:24Insufficient Data Quality *New
- 29:33Missing or Insufficient Session Expiration
- 31:59Inability of users to access and modify data
- 33:22Collection of data not required for the user-consented purpose
- 34:57Apply What You Have Learned Today
- 36:50Further information
related talks
23mStandard Classification: Top 10 Privacy Risks 2021
48mWeb Application Security
32mUsing the OWASP Top 10 As The Foundation for Security and Privacy Programs Across Your Organization
01h 00mWeb Application Security Risks: A Look at OWASP Top Ten 2017
45mTop 10 That Actually Matter: Web, API, Mobile and LLM
23mWeb Application Security - owasp top 10 vulnerabilities
30mTop 10 Introduction
54m10 commandments of secure coding