OWASP Top 10: Server Side Request Forger - Ep10

Logo
Presented by

John Wagnon, Solutions Architect, F5

About this talk

SSRF flaws occur when a web app fetches a remote resource without validating the user-supplied URL. Attackers can coerce the app to send a request to an unexpected destination—even if it’s secured by a firewall, VPN, or other network access control list (ACL). The OWASP Top 10 is a broad consensus about the most critical security risks to web applications. The update gives guidance to help secure modern web applications and architectures from exploits, abuse, and misconfiguration, as well as recommendations for mitigating new risks involving software supply chains, CI/CD pipelines, and open source software. Watch the OWASP Top 10 Lightboard Lesson series for a breakdown of the OWASP Top 10 and learn: • How OWASP creates its Top 10 list of the most critical security risks to web applications. • Key changes including recategorization of risk to align symptoms to root causes. • When each risk can manifest, why it matters, and how to improve your security posture. The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. OWASP maintains a variety of projects, including the Top 10 web application security risks standard awareness document for developers and security practitioners.
Related topics:

More from this channel

Upcoming talks (6)
On-demand talks (154)
Subscribers (26945)
F5 is a multi-cloud application services and security company committed to bringing a better digital world to life. F5 partners with the world’s largest, most advanced organizations to secure and optimize every app and API anywhere—on premises, in the cloud, or at the edge. F5 enables organizations to provide exceptional, secure digital experiences for their customers and continuously stay ahead of threats.