OWASP Top 10 Vulnerabilities And Their Prevention Mechanisms

In this blog, I am going to show you how the OWASP (Open Web Application Security Project) top 10 vulnerabilities are most dangerous in Web Applications and how we can maintain secure Web Applications from such security flaws.

The OWASP Top 10 is a powerful guideline for Web Application security. OWASP Top 10 represents a broad agreement about what the most critical Web Application security flaws are. We should adopt the top 10 vulnerabilities prevention mechanisms to ensure that our Web Applications do not contain these flaws. Adopting the OWASP Top 10 is perhaps the most effective first step towards changing the s/w development culture within your organization into one that produces the secure code. They are critical, because they will frequently allow the attackers to completely take over your s/w, steal the data or prevent your s/w from working at all.

Below are the list of the security flaws, which are more prevalent in a Web based Application and their prevention mechanisms.

1. Injection

The following are the ways to inject SQL injection:

• Hexadecimal
  
• Base64
  
• Dynamic SQL
  
• Query String
  
• Blocking SQL injection at IIS level

2. Broken Authentication and Session Management

3. Cross-Site Scripting (XSS)

4. Insecure Direct Object References 

5. Security Misconfiguration

6. Sensitive Data Exposure

7. Missing Function Level Access Control

8. Cross-Site Request Forgery (CSRF)

9. Using Components with Known Vulnerabilities

10. Unvalidated Redirects and Forwards