Overview of the OWASP Serverless Top 10 [videos]
![Overview of the OWASP Serverless Top 10 [videos]](/_next/image?url=https%3A%2F%2Fcdn.hashnode.com%2Fres%2Fhashnode%2Fimage%2Fupload%2Fv1636408504092%2FBcNttK9q2.png&w=3840&q=75)
Miguel is a Principal Engineer and the author of the “Serverless Security” book. He has worked on multiple serverless projects as a developer and security engineer, contributed to open-source serverless projects, and worked on large military systems in various engineering roles.
This YouTube video series provides quick overviews of the top 10 cybersecurity risks for serverless applications. Each video covers the risk and some recommendations on how to address it.
Why is the OWASP Serverless Top 10 important?
In this video, I discussed the reasons why the OWASP Serverless Top 10 cybersecurity risks for a serverless application are important to consider.
Injection attacks
In this video, I discussed what is the injection attack.
Broken authorization
In this video, I discussed what is broken authentication and authorization.
Sensitive data exposure
In this video, I discussed the sensitive data exposure risk.
XML external entities
In this video, I discussed the XML external entities risk.
Broken access control
In this video, I discussed the broken access control risk.
Security misconfiguration
In this video, I discussed the security misconfiguration risk.
Cross-site script attacks
In this video, I discussed the cross-site scripting (XSS).
Insecure deserialization
In this video, I discussed the insecure deserialization risk.
Vulnerable components
In this video, I discussed the risk of using components with known vulnerabilities.
Logging and monitoring
In this video, I discussed the insufficient logging and monitoring risk.
