From OWASP top 10 to Secure Applications
summary
Covers OWASP Top 10 2017 and the OWASP ASVS to give a broader view of application security requirements beyond the Top 10. Shows concrete ways to address risks in Spring applications using manual and programmatic techniques plus security products: Application Security Testing (AST), Web Application Firewalls (WAF) and Runtime Application Self Protection (RASP).
AI-written summary · about
chapters (22)
- 0:00Intro
- 0:53About OWASP
- 4:03OWASP Top 10 2017 - OWASP A1 - Injection
- 4:33OWASP Top 10 2017 - A1 - SQL Injection
- 6:24OWASP Top 10 2017 - A5 - Broken Access Control
- 8:16OWASP Top 10 2017 - Broken Access Control
- 10:19OWASP Top 10 - Summary
- 11:43OWASP Proactive Controls
- 12:29Proactive Controls - C7 - Enforce Access Control
- 12:47Proactive Controls - Summary
- 13:14OWASP Application Security Verification Standard
- 14:26OWASP ASVS - Verification Levels
- 17:24ASVS-V5 - Validation, Sanitization, Encoding
- 18:28ASVS - V4.2 - Operation Access Control
- 19:16OWASP ASVS - Summary
- 20:55OWASP Benchmark
- 24:33ASVS - Security Tools references
- 26:04Software Security Issues
- 27:43Software Security Definition
- 30:41Detection Tools
- 36:22Protection Tools - Example: Integrity Checks
- 38:29Protection Tools - Spring Integration
related talks
52mAppSec: From the OWASP Top Ten(s) to the OWASP ASVS
23mWeb Application Security - owasp top 10 vulnerabilities
48mWeb Application Security
01h 00mWeb Application Security Risks: A Look at OWASP Top Ten 2017
51mHarmonizing the OWASP API and Application Top 10 Lists
01h 02mFrom the OWASP Top Ten(s) to the OWASP ASVS
47mOWASP Top 10
41mFrom the OWASP Top Ten(s) to the OWASP ASVS