From the course: Static Application Security Testing
Unlock the full course today
Join today to access over 24,700 courses taught by industry experts.
The OWASP Top 10 - SonarQube Tutorial
From the course: Static Application Security Testing
The OWASP Top 10
- [Narrator] It's easy to fall into a trap of using all the resources we've covered so far to build out a testing program so comprehensive that it will quickly overwhelm both the testers and the developers. Your goal is to improve the security of your applications, right? Then don't try to do too much at once. Walk, then run. A great way to get your feet under you is by focusing on the OWASP Top 10. The OWASP Top 10 project is hands down, the most mature, most popular project in the OWASP Project library. Well, this began as a thought experiment in the early two 2000s. This list of the 10 most critical web app security risks has become the cornerstone of the application security industry. Updated every three years, the top 10 list is first released in English and then translated into multiple languages, making it accessible to developers and security professionals all around the world. Given the increasing popularity of…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.
Contents
-
-
-
-
-
-
(Locked)
The OWASP Top 103m 26s
-
(Locked)
A1: Broken access controls6m 17s
-
(Locked)
A2: Cryptographic failures7m 29s
-
(Locked)
A3: Injection8m
-
(Locked)
A4: Insecure design5m 21s
-
(Locked)
A5: Security misconfiguration7m 58s
-
(Locked)
A6: Vulnerable and outdated components7m 8s
-
(Locked)
A7: Identification and authentication failures7m 39s
-
(Locked)
A8: Software and data integrity failures5m 49s
-
(Locked)
A9: Security logging and monitoring failures6m 55s
-
(Locked)
A10: Server-Side Request Forgery4m 58s
-
(Locked)
-