OWASP Top 10

Recent changes in application architecture and technology have sparked new opportunities and ways of working. But with these new advancements come new risks. The Open Web Application Security Project (OWASP) Top 10 list describes the ten biggest vulnerabilities that today's software developers and organizations face. In this course, Caroline Wong takes a deep dive into the seventh and eighth categories of security vulnerabilities in the OWASP Top 10—cross-site scripting (XSS) and insecure deserialization. Caroline covers how XSS and insecure deserialization work, providing real-world examples that demonstrate how they affect companies and consumers alike. She also shares techniques that can help you prevent these types of attacks.

Contents:

• Introduction
• 1. Cross-Site Scripting: How Does It Work?
• 2. Impact of Cross-Site Scripting
• 3. Preventing Cross-Site Scripting
• 4. Insecure Deserialization: How Does It Work?
• 5. Impact of Insecure Deserialization
• 6. Preventing Insecure Deserialization
• Conclusion