OWASP top 10 Protection - Protection

Hi Aaron,

 

 

How can one ensure protection against OWASP top 10.

 

 

Do know about protecting against Brute force , Cross site scripting , CSRF. But what do we configure to ensure protection against the other top 10 vulnerabilities.

 

 

1) Broken Authentication and session management

 

2) Insecure direct object refernece

 

3) Security Misconfiguration

 

4) Failure to restrict URL access

 

5) Insufficient transport layer protection

 

6) Unvalidated redirects and fowards

 

7) SQL injection (this is believe is protected through attack signatures , in policy->blocking )

 

 

 

Would appreciate if the specific entity to block is clearly indicated e.g. Policy--->entity--->blocking

 

 

 

 

Regards

 

Nik