Highlights, Random, Threat Management

Top Ten Web Security Risks

by  •  • Comments Off

Here is a list of the top ten Web security risks:

  1. Hidden Manipulation
  2. Cookie Poisoning
  3. Backdoor and Debug Options
  4. Buffer Overflow
  5. Stealth Commanding
  6. 3rd Party Misconfiguration
  7. Known Vulnerabilities
  8. Parameter Tampering
  9. Cross Site Scripting
  10. Forceful Browsing

Looks like a pretty timely list, doesn’t it? Actually, I pulled this list out of my archive. I got it from Sanctum when they called it “10 Types of Web Perversion” (yes, I spent a lot of time trying to convince them not to call it perverse). My list is from September, 2000.

For comparison, here is what OWASP’s Top Ten Web Security Risks for 2010 (at least the release candidate):

  1. Injection
  2. Cross-Site Scripting
  3. Broken Authentication and Session Management
  4. Insecure Direct Object References
  5. Cross Site Request Forgery
  6. Security Misconfiguration
  7. Failure to Restrict URL Access
  8. Unvalidated Redirects and Forwards
  9. Insecure Cryptographic Storage
  10. Insufficient Transport Layer Protection