OWASP Top 10
A regularly updated list of the 10 most critical security risks to web applications, published by OWASP as a standard awareness document for developers.
التعريف
The OWASP Top 10 categorizes the most common and dangerous vulnerabilities in web applications. The 2021 version includes: Broken Access Control, Cryptographic Failures, Injection, Insecure Design, Security Misconfiguration, Vulnerable Components, Authentication Failures, Data Integrity Failures, Logging Failures, and SSRF. Each category includes descriptions, examples, and remediation guidance.
لماذا هو مهم
The OWASP Top 10 is the starting point for security-aware development. It's referenced by security standards, required by auditors, and used by security tools to prioritize findings. Addressing the Top 10 prevents approximately 90% of common web application attacks.
مثال
A security scanner flags a vulnerability as "A03:2021 Injection" — referencing the OWASP Top 10 category for injection attacks including SQL injection and command injection.