Security

All developers in the company must be aware of certain security risks because insecure software coding and web applications can leave systems vulnerable to exploitation.

• Secure coding practices checklist
• OWASP TOP 10

Secure coding practices checklist

• Input Validation
• Output Encoding
• Authentication and Password Management (includes secure handling of credentials by external services/scripts)
• Session Management
• Access Control
• Cryptographic Practices
• Error Handling and Logging
• Data Protection
• Communication Security
• System Configuration
• Database Security
• File Management
• Memory Management
• General Coding Practices

Check OWASP Secure Coding Practices (opens new window) guide for more details regarding the checklist.

OWASP TOP 10

Developers must be aware of OWASP top 10 security risks (opens new window). This is the list of most common risks:

1. Injection (opens new window)
2. Broken Authentication (opens new window)
3. Sensitive Data Exposure (opens new window)
4. XML External Entities (XXE) (opens new window)
5. Broken Access Control (opens new window)
6. Security Misconfiguration (opens new window)
7. Cross-Site Scripting XSS (opens new window)
8. Insecure Deserialization (opens new window)
9. Using Components with Known Vulnerabilities (opens new window)
10. Insufficient Logging & Monitoring (opens new window)