2021 OWASP Top Ten: Insecure Design

Insecure design is a broad category representing different weaknesses, expressed as “missing or ineffective control design.” Insecure design is not the source for all other Top 10 risk categories. There is a difference between insecure design and insecure implementation. We differentiate between design flaws and implementation defects for a reason, they have different root causes and remediation. A secure design can still have implementation defects leading to vulnerabilities that may be exploited. An insecure design cannot be fixed by a perfect implementation as by definition, needed security controls were never created to defend against specific attacks.

#OWASPTOP10

Video 5 / 11


⬇️⬇️⬇️ JOIN THE COMMUNITY! ⬇️⬇️⬇️

DevCentral is an online community of technical peers dedicated to learning, exchanging ideas, and solving problems - together.

Find all our platform links ⬇️ and follow our Community Evangelists! 👋

➡️ DEVCENTRAL: https://community.f5.com
➡️ YOUTUBE: devcentral
➡️ LINKEDIN: LinkedIn: f5-devcentral
➡️ TWITTER: Twitter: devcentral

Your Community Evangelists:
👋 Jason Rahm: LinkedIn: jrahm | Twitter: jasonrahm
👋 Buu Lam: LinkedIn: buulam | Twitter: buulam
👋 Aubrey King: LinkedIn: aubreyking | Twitter: aubreykingf5

• #science_technology
• #f5
• #devcentral
• #owasp_top_10
• #insecure_design
• #security
• #vulnerability