Web Applications Attack Surface

What is the primary goal of the OWASP Top 10?

• To provide a standard for web application security

• To list the top 10 programming languages

• To offer a guide for hardware security

• To rank the best software companies

Which two items were merged into 'Broken Access Control' in the 2017 OWASP list?

• XML External Entities and Insecure Deserialization

• Cross-Site Scripting and SQL Injection

• Insecure Direct Object Reference and Missing Function Level Access Control

• Sensitive Data Exposure and Security Misconfiguration

What type of attack occurs when user input is sent to backend databases?

• Denial of Service

• SQL Injection

• Cross-Site Scripting

• Phishing

What vulnerability arises from improper implementation of application functions?

• Insecure Deserialization

• Security Misconfiguration

• Broken Authentication

• Cross-Site Scripting

What is a potential consequence of XML External Entities attacks?

• Increased application speed

• Disclosure of sensitive information

• Improved user interface

• Enhanced data encryption

What is the main issue with using components with known vulnerabilities?

• They are difficult to find

• They are expensive to implement

• They can make the application vulnerable

• They require extensive training

What does insufficient logging and monitoring allow attackers to do?

• Improve system performance

• Gain persistent access to the system

• Reduce system costs

• Enhance user experience