Application & Platform Security
Secure software, workloads, networks, infrastructure, and delivery systems.
Showing 1 resource
Labels reflect relevance within this catalog, not source reliability or freshness. Unlabeled resources are ungraded.
What do the labels mean?
- Essential —
- A starting point or working reference.
- Useful —
- Adds distinct examples or perspectives.
- Context —
- Background or supplementary coverage.
Source caveats apply at every level.
Resources
OWASP API Security Top 10 — 2023
ArticleEssential — Broadens API review beyond login into authorization and abuse; it is a risk taxonomy, not an implementation standard.
A practical risk taxonomy for API authorization, business logic, resources, inventory, and dependencies
OWASP's second API Security Top 10 is an awareness and threat-modeling taxonomy, not an implementation standard. Its ten risk families connect object, property, and function authorization with authentication, resource consumption, business-flow abuse, SSRF, configuration, inventory, and third-party API trust.