internetnews.com: Open Source Group Issues Top Ten Web Vulnerabilities

“The 10 most critical Web application security problems for
government and the private sector were unveiled Monday by the Open
Web Application Security Project (OWASP), the Washington,
D.C.-based open source community project. The list of
vulnerabilities was created to focus government and industry on the
most serious of the problems.

“According to the report, the flaws are ‘surprisingly common’
and can be exploited by unsophisticated attackers with easily
available tools. When an organization deploys a web application,
OWASP says, they invite the world to send HTTP requests. Attacks
buried in these requests ‘sail past firewalls, filters, platform
hardening, SSL, and IDS without notice’ because they are inside
legal HTTP requests.

“Therefore, the report concludes, web application code is part
of the security perimeter and cannot be ignored…”

Complete
Story