6.4. OWASP Top 10 Security Risks

Try these first

1. 1.

   What does OWASP stand for?

   Hint

   Think about what OWASP is focused on.

2. 2.

   Name one type of injection attack.

   Hint

   Consider languages that interact with databases.

3. 3.

   What is one of the OWASP Top 10 risks?

   • Data Encryption Failure
   • Broken Access Control
   • Access Control Flaw

   Hint

   Recall the risks we covered.

4. 4.

   True or False: Injection attacks can occur through unvalidated user input.

   • True
   • False

   Hint

   Think about how hackers exploit input fields.

5. 5.

   Propose a full strategy to secure an application against the OWASP Top 10 risks.

   Hint

   Consider what strategies can address each specific risk.

6. 6.

   Analyze a case study where a company failed to mitigate a risk from the OWASP Top 10. What could have been done differently?

   Hint

   Look at best practices in software development.