OWASP (Open Web Application Security Project) Top 10 adalah daftar standar industri berisi risiko keamanan aplikasi web yang paling kritis. Daftar ini diperbarui secara berkala dan menjadi acuan dasar untuk pengujian serta pengembangan keamanan web.

OWASP Top 10 (2021 edition):

A01: Broken Access Control — users can act outside their intended permissions
A02: Cryptographic Failures — sensitive data exposed due to weak/missing encryption
A03: Injection — SQL, NoSQL, OS, LDAP injection attacks
A04: Insecure Design — fundamental design flaws
A05: Security Misconfiguration — default/incomplete configurations
A06: Vulnerable Components — using libraries with known vulnerabilities
A07: Authentication Failures — broken auth, session management
A08: Software Integrity Failures — unsigned updates, compromised CI/CD
A09: Logging Failures — insufficient monitoring and alerting
A10: SSRF — Server-Side Request Forgery

OWASP Top 10 (2021 edition):

A01: Broken Access Control — users can act outside their intended permissions
A02: Cryptographic Failures — sensitive data exposed due to weak/missing encryption
A03: Injection — SQL, NoSQL, OS, LDAP injection attacks
A04: Insecure Design — fundamental design flaws
A05: Security Misconfiguration — default/incomplete configurations
A06: Vulnerable Components — using libraries with known vulnerabilities
A07: Authentication Failures — broken auth, session management
A08: Software Integrity Failures — unsigned updates, compromised CI/CD
A09: Logging Failures — insufficient monitoring and alerting
A10: SSRF — Server-Side Request Forgery

Tentang modul ini

Tingkat kesulitan

Estimasi waktu

Langkah

Prasyarat

Tentang Pengantar Keamanan Web

Yang akan Anda pelajari dari Pengantar Keamanan Web

Untuk siapa ini?

Kenapa mempelajari ini?

Jelajahi Lebih Banyak di Akousa

Modul Terkait

Network Fundamentals

Keamanan Kata Sandi

Dasar-Dasar Enkripsi

The OWASP Top 10

Petunjuk

Uji Pemahaman Anda