What is the OWASP Top 10? | AppSec 101

In Episode 11 of our AppSec 101 series, Katie Crabtree answers the question, "What is the OWASP Top 10?" Katie discusses the OWASP Top 10 vulnerabilities and what organizations can do to secure their organizations against these AppSec risks. OWASP stands for the Open Web Application Security Project and is focused on improving the security of software. Watch this episode to learn more.
Intro 00:00
What is the OWASP Top 10? 1:15
How does the OWASP Top 10 get determined? 2:00
Why is the OWASP Top 10 important? 4:00
Detecting the OWASP Top 10 vulnerabilities 5:00
What's on the current OWASP Top 10 list? 5:45
Sensitive Data Exposure 7:25
Cross-Site Scripting (XSS) 8:40
Prevention 9:26
Using Components with Known Vulnerabilities 10:55
Best Practices 12:16
LEARN MORE about the OWASP Top 10: www.microfocus.com/en-us/what...
LEARN MORE about Fortify: www.microfocus.com/en-us/solu...
LEARN MORE about how Micro Focus was named a leader in the Gartner MQ for Application Security Testing: software.microfocus.com/en-us...
LEARN MORE about how Fortify received the highest score in the Gartner Critical Capabilities for Application Security Testing report for the Enterprise use case AND the Mobile and Client use case: www.microfocus.com/en-us/asse...
SUBSCRIBE TO FORTIFY UNPLUGGED: / @fortifyunplugged
CONNECT with the Fortify Online Community: community.microfocus.com/t5/F...
- Connect with peers and share your knowledge
- Find solutions and answers to your technical questions
- Stay informed on new releases and product enhancements
- Access downloads, demos, videos and support tips

[@sodarakaing1997]

This is a good video to understand OWASP top 10. I really enjoy this video.

[@FortifyUnplugged]

Thanks for the kind words, we're glad you enjoyed it. Katie definitely did a great job with the explanation.

[@taranjitkaur933]

I find this discussion very informative, Good job guys 😊

[@FortifyUnplugged]

We appreciate the feedback and glad you found it informative!

[@olusegunjaiyeola8109]

Concise and informative , thank you

[@FortifyUnplugged]

Thanks Olusegun, glad it was helpful!

[@morganmills4116]

Very helpful. Thank you :)

[@FortifyUnplugged]

Thanks Morgan, glad it was helpful!

[@prankster08840]

thank you for this great explaination

[@FortifyUnplugged]

Glad it was helpful!

[@AdeyemiBabalola]

Informative and concise! Thanks for that!

[@FortifyUnplugged]

Thank you for the kind words!

[@Weaver1812]

What are the degree/credentials held by these presenters? I have a challenge listening to a customer support person and a marketer lecture engineers on security and would like clarity around that.

[@FortifyUnplugged]

Thank you for your comment. This video is not meant to be a lecture but a general awareness of the OWASP Top 10 and what it is.

[@Razzotube]

🖖

[@FortifyUnplugged]

Live long, and prosper.

[@sergioswedenborg8746]

HI, SORRY FOR THE CAPS LOCK BUT ONLY TO CALL YOUR ATTENTION: I AM DOING A COURSE IN CYBER SECURITY AND THEY PUT THIS VIDEO IN THE POWERPOINT AND THE COURSE IS FINANCED BY GOVERNMENTS AND EUROPE UNION. MY QUESTION IS SIMPLE: DO YOU GIVE THEM THE AUTHORIZATION TO USE YOUR VIDEO?

[@FortifyUnplugged]

That's fine. Glad they're seeing value in it!

[@sergioswedenborg8746]

@@FortifyUnplugged Thanks for answering! The issue is that the course talks about plagiarism...Courses in the UK are very expensive and most of them are just garbage. This one is supported by the UK government and Europe Union! That's why I asked you if they ask for your authorization... If they asked and you don't mind them using your materials, it's all right. But, as far as I understand, to use your material especially to make money and not ask for your authorization, is disgusting...

[@wudemaya]

I'm here because of CISSP or else I be playing video games sigh*

[@FortifyUnplugged]

Hope you enjoyed the video even if you had to be here :)

[@phealy02]

Insecure "Desterilization" 🤣😂

[@FortifyUnplugged]

Whoops