Linux Today: Linux News On Internet Time.

More on LinuxToday

internetnews.com: Open Source Group Issues Top Ten Web Vulnerabilities

Jan 14, 2003, 16:00 (0 Talkback[s])
(Other stories by Roy Mark)

"The 10 most critical Web application security problems for government and the private sector were unveiled Monday by the Open Web Application Security Project (OWASP), the Washington, D.C.-based open source community project. The list of vulnerabilities was created to focus government and industry on the most serious of the problems.

"According to the report, the flaws are 'surprisingly common' and can be exploited by unsophisticated attackers with easily available tools. When an organization deploys a web application, OWASP says, they invite the world to send HTTP requests. Attacks buried in these requests 'sail past firewalls, filters, platform hardening, SSL, and IDS without notice' because they are inside legal HTTP requests.

"Therefore, the report concludes, web application code is part of the security perimeter and cannot be ignored..."

Complete Story

Related Stories: