Software Security 101: OWASP

Where does one even begin with Security for Software applications?

Answer is OWASP!

OWASP is an international non-profit organisation dedicated to software security. Their goal is simple, for anyone to improve their software security with widely available resources.

But OWASP itself is a very vast resource and community. So where does one even begin from in OWASP?

This is where OWASP Top 10 comes in!

OWASP Top 10 is a report on security concerns for Software security, focusing on the 10 most critical risks based on consensus for categories of Software.

These reports are regularly updated (generally every 3 years) which covers majority of the top vulnerabilities and exploits with up-to date industry trends, thus taking care of all the basics!

There are 3 lists for OWASP Top 10 categorised into different domains:

• OWASP Top 10 (majorly for web)

• OWASP API Top 10

• OWASP Mobile Application Top 10

Which one of these OWASP Top 10 security guidelines has been the most challenging for you?