OWASP Top 10: #5 Broken Access Control and #6 Security Misconfiguration

Introduction

• Prevent common security vulnerabilities

1. Broken Access Control: How Does It Work?

• General concept

2. Impact of Broken Access Control

• Example scenario 1
• Example scenario 2

3. Preventing Broken Access Control

• Properly implement access controls
• Logging and alerting
• Manual testing

4. Security Misconfiguration: How Does It Work?

• General concept

5. Impact of Security Misconfiguration

• Example scenario 1
• Example scenario 2

6. Preventing Security Misconfiguration

• Harden all systems
• Patch and update software
• Test configurations

Conclusion

• Next steps