همفکران فناوری شریف
1Introduction
OWASP periodically publishes the ten top web risks based on real data, referenced by many standards.
2Discussion
In the 2021 edition Broken Access Control ranks first, followed by cryptographic failures, injection, insecure design and misconfiguration.
Basics: server-side authorisation on every request, parameterised queries, input validation, encryption in transit and at rest, updated libraries.
3Conclusion
Build security in from design: threat modelling, developer training and automated security tests in the pipeline.
Sources
همفکران فناوری شریفThis article summarises the official sources cited, prepared by the Hamfekran Fanavari Sharif team for finance leaders.
Want to see these solutions in your organisation?Book a free demo
