diff options
| -rw-r--r-- | synopsis.tex | 60 |
1 files changed, 59 insertions, 1 deletions
diff --git a/synopsis.tex b/synopsis.tex index d6b781d..a803351 100644 --- a/synopsis.tex +++ b/synopsis.tex @@ -208,7 +208,59 @@ rest. A non-profit organization called Open Web Application Security Project (or just OWASP for short), which mission is to make software more secure, publishes a compilation of these vulnerabilities every 3 years in a document titled \textit{OWASP Top 10 - The Ten Most Critical Web Application Security -Risks}. +Risks}. It is a result of the work of OWASP, over 40 security companies and over +500 individuals. It lists the most common weakness, describes each of them in +details, with examples and ways of prevention. It also contains further advices +for developers, security testers, organizations and application managers. + +The latest release of OWASP Top 10 lists these vulnerabilities as the most +critical web application security risks: + +\begin{itemize} + + \item \textbf{A1:2017 - Injection} + Allows the attacker to execute malicious code in the + application's back-end by tricking the interpreter with a + specially crafted message, e.g. SQL injection. + \item \textbf{A2:2017 - Broken Authentication} + Includes every weakness which would enable the attacker to get + into to the application without authentication, i.e. by + hijacking other user's session, guessing or brute-forcing + password, getting keys or bypassing the login completely. + \item \text |