Week 2

SafeAssign Originality Report

Running Head: OWASP 1

OWASP 2

·

Course Name: 1

Instructor:

Submitted by

· 13 July 2020

The OWASP is established as a global free and open community that concentrates on applications software security improvement that was founded by Mark Curphey on September 9, 2001. The mission of OWASP is established as enhancing the visibility of application security with the main objective of assisting organizations and individuals in achieving informed decisions with regards to risks associated with application software security. Every individual has a free role in participation with subject to OWASP since the availability of their materials is availed to all with subject to an open and free software license. This particular foundation is established as a 501c3 non-profit organization that engages in charity with the fundamental objective of ensuring support and ongoing availability with regards to application software security. Currently, the insecure software problem has been identified as the most significant technical challenge. The exponential increase with regards to web applications that are developed with the view of enabling social networking, business, among others, is attributed to compounding necessities in the establishment of a robust approach with regards to writing and securing Web applications, internet, and data. The OWASP is out to make the insecurity of applications software to be anomaly instead of being normalized. OWASP has developed a testing guide that plays a significant role with regards to establishing solutions with regards to severe issues related to applications software security. The most significant thing regarding the approach employed by OWASP in application software security testing is the fact that it is based on the science and engineering principles (PageKicker Robot Phil 73, 2014). OWASP establishes various vulnerabilities with regard to application software security. XSS vulnerabilities are prevalent in large applications such as Facebook and Google. It has always been on the OWASP Top ten list. The vulnerabilities are dangerous due to the fact that an attacker can do all activities the user can do and see everything as the user can. XSS vulnerabilities are not easy to prevent because of the many directions in the application; 2 the attack can be utilized. Be utilized. However, there are several ways through which XSS can be prevented. One can avoid the vulnerabilities from attacking an application by escaping the input of the user. Surviving it is through taking the received data and making sure it is secure before sharing it with the end-user. Avoiding user input ensures that critical characters in the collected data by a page on the web is protected from interruption by attackers. Another way to prevent the vulnerabilities is by validating input. Input validation is the process in which one ensures that an application is providing the correct data and protecting the site from the damage of malicious data. Whitelisting and input validation have an association with SQL injection but are used in the prevention of XSS (Fogie, Grossman, Hansen, Rager, & Petkov, 2011).

References

3 Fogie, S., Grossman, J., Hansen, R., Rager, A., & Petkov, P. D. (2011). XSS attacks: 3 Cross-site scripting exploits and defense. Elsevier. 4 Open Web Open

Web Application Security Project, & PageKicker Robot PageKicker Robot Phil 73. (2014). 5 OWASP top 10: 4 The top 10 most critical web application security

threats: Enhanced with text analytics and content by PageKicker robot Phil 73. Create Space.

Source Matches (9)

1 Student paper 100%

Student paper

Original source

1 Student paper 100%

Student paper

Building Secure Web Applications:

Original source

Building Secure Web Applications

1 Student paper 65%

Student paper

13 July 2020

Original source

07/13/2020

2 slideshare 66%

Student paper

the attack can be utilized.

Original source

can be an attack

2/3

3 ifmo 100%

Student paper

Fogie, S., Grossman, J., Hansen, R., Rager,

A., & Petkov, P.

Original source

Fogie S., Grossman J., Hansen R., Rager

A., Petkov P

3 ifmo 100%

Student paper

Cross-site scripting exploits and defense.

Original source

Cross Site Scripting Exploits and Defense

4 Student paper 100%

Student paper

Open Web Open Web Application

Security Project, & PageKicker Robot

PageKicker Robot Phil 73.

Original source

Open Web Open Web Application

Security Project, & PageKicker Robot

PageKicker Robot Phil 73

5 wikipedia 100%

Student paper

OWASP top 10:

Original source

^ OWASP Top 10

4 Student paper 100%

Student paper

The top 10 most critical web application

security threats: Enhanced with text

analytics and content by PageKicker

robot Phil 73.

Original source

The top 10 most critical web application

security threats Enhanced with text

analytics and content by PageKicker

robot Phil 73

3/3