Krakow, Poland, 22 - 24 June 2022
Tomasz Wrobel
Asseco PolandSenior Computing and Software Engineer (15y+) dealing with web systems and applications, and their security.
What's (not so) new in the new OWASP Top 10?
QuickieThe new OWASP Top 10 issued in 2021 is not just an updated version of the most famous security report. None of the categories from the previous edition were dropped meaning that in applications the same vulnerability issues apply, as in 2017 (I will try to establish an answer on WHY that is). In the report some categories were merged together to make space for new categories. One of the new categories is a revolution: for the first time the OWASP Top 10 report does not focus only on risks and vulnerabilities but also focuses on a proactive approach at an early stage. Including this in our development approach will help reduce or eliminate risks and vulnerabilities from our applications.