2010 Top 25 - Porous Defenses

Opis

Weaknesses in this category are listed in the "Porous Defenses" section of the 2010 CWE/SANS Top 25 Programming Errors.

Wpisy w tej grupie

• CWE-285 Improper Authorization
• CWE-306 Missing Authentication for Critical Function
• CWE-311 Missing Encryption of Sensitive Data
• CWE-327 Use of a Broken or Risky Cryptographic Algorithm
• CWE-732 Incorrect Permission Assignment for Critical Resource
• CWE-798 Use of Hard-coded Credentials
• CWE-807 Reliance on Untrusted Inputs in a Security Decision

Źródła