正在阅读:

OWASP发布2013年十大WEB应用安全风险

6,093

日前,开放Web应用安全项目(OWASP)公布了2013年十大最关键的Web应用安全风险,该列表从2010年开始更新,今年“Broken Authentication and Session Management”排到了第二的位置,同时“Injection”仍然保留在首位。

OWASP TOP 10 2013

1、Injection (1)

2、Broken Authentication and Session Management (3)

3、Cross-Site Scripting (XSS) (2)

4、Insecure Direct Object References (4)

5、Security Misconfiguration (6)

6、Sensitive Data Exposure (7/9)

7、Missing Function Level Access Control (8)

8、Cross-Site Request Forgery (CSRF) (5)

9、Using Known Vulnerable Components (-)

10、Unvalidated Redirects and Forwards (10)

OWASP TOP 10 2010

Injection

Cross-Site Scripting (XSS)

Broken Authentication and Session Management

Insecure Direct Object References

Cross-Site Request Forgery (CSRF)

Security Misconfiguration

Insecure Cryptographic Storage

Failure to Restrict URL Access

Insufficient Transport Layer Protection

Unvalidated Redirects and Forwards

owasp2013

OWASP TOP 10 2013文档下载

点我下载

原文地址:http://www.freebuf.com/news/10460.html

目前有:0条访客评论

    留下脚印,证明你来过。

    *

    *

    流汗坏笑撇嘴大兵流泪发呆抠鼻吓到偷笑得意呲牙亲亲疑问调皮可爱白眼难过愤怒惊讶鼓掌