Application Security

OWASP Top 10 (2021)

1. Broken Access Control

Risk: Users accessing unauthorized resources.

Prevention:

• Deny by default
• Implement RBAC/ABAC
• Validate permissions server-side
• Log access failures

2. Cryptographic Failures

Risk: Sensitive data exposure.