Introduction – OWASP Top 10 for EPiServer Developers

Posted on May 6, 2011 by Frederik Vig in ASP.NET, EPiServer

The Open Web Application Security Project (OWASP), is an open community that focuses on improving web application security. OWASP Top 10 is a list of the most critical web application security risks. Here is the 2010 list:

  1. Injection
  2. Cross-Site Scripting (XSS)
  3. Broken Authentication and Session Management
  4. Insecure Direct Object References
  5. Cross-Site Request Forgery (CSRF)
  6. Security Misconfiguration
  7. Insecure Cryptographic Storage
  8. Failure to Restrict URL Access
  9. Insufficient Transport Layer Protection
  10. Unvalidated Redirects and Forwards

In this series I’m going to explain the 10 security risks and how we as EPiServer developers (or ASP.NET) can protect us against exposing them in our web applications, we’ll also look at tools for analyzing web applications to find security flaws and how we as developers should think about security when developing.

Hope you’ll enjoy this series. Feedback is as always welcome.

Related Posts: