From the course: CompTIA Advanced Security Practitioner (CASP+) (CAS-004) Cert Prep

Unlock this course with a free trial

Join today to access over 24,200 courses taught by industry experts.

Best practices

Best practices

From the course: CompTIA Advanced Security Practitioner (CASP+) (CAS-004) Cert Prep

Start my 1-month free trial Buy for my team

Best practices

“

- In this lesson, we're going to discuss some best practices in terms of software applications and our enterprise architectures. Now, there are numerous industry-accepted approaches to software assurance and software development. The WASC, or Web Application Security Consortium, provides best practices for web-based applications. OWASP, or the Open Web Application Security Project, is a group that maintains a list of the top 10 web attacks on a continual basis. They also provide guidance on how to conduct secure web programming. The OWASP Top 10 includes things like injections, broken authentication, sensitive data exposure, XML external entities, broken access control, security misconfigurations, cross-site scripting, insecure deserialization, using components with known vulnerabilities and insufficient logging and monitoring. The Build Security In, or BSI, program is located under the Department of Homeland Security, and it provides additional security recommendations and…

Contents