OWASP Cloud-Native Application Security Top 10 Flagship Project

This brief introduction presents the OWASP Cloud-Native Application Security Top 10 and explains why cloud-native applications require a dedicated risk list. It reviews common weaknesses in configuration, authentication, secrets, network policies, vulnerable components, assets, resource quotas, and monitoring.

Syllabus

Intro
About Me
Why Cloud Native Appsec Requires dedicated top 10 List?
What Makes Cloud Native Appsec Md Complex
Project Leaders
Insecure Cloud, Orchestration or Contain Configuration
injection Flaws
Improper Authentication Authorization
Insecure Secrets Storage
Over-permissive/Insecure network polic
Ualng components with known vulnerab
Improper assets management
Inadequate compute' resource quota in
ineffective logging & monitoring
Quick Recap
How You Can Contribute