This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Germany/Projekte/Top 10 fuer Entwickler-2013/Details zu Risiko-Faktoren"

From OWASP
Jump to: navigation, search
m
(Tabelle gemeinsam mit dem engl. Wiki erneuert (z.B. Kurzbezeichnungen für Risiken jetzt möglich))
Line 14: Line 14:
 
   background-color: {{Top 10:BackgroundColor|year=2013 }};
 
   background-color: {{Top 10:BackgroundColor|year=2013 }};
 
padding=2;">
 
padding=2;">
−
<tr style="background-color: {{Top 10:BorderColor|year=2013 }}; height: 2em; font-size: 130%; color: #FFFFFF;  text-shadow: 2px 2px 8px #444444; ">
+
<tr style="background-color: {{Top 10:BorderColor|year=2013}}; height: 2em; font-size: 130%; color: #FFFFFF;  text-shadow: 2px 2px 8px #444444; ">
 
     <th style="border: 3px solid #444444;">{{Top_10:LanguageFile|text=risk|language=de}}</th>
 
     <th style="border: 3px solid #444444;">{{Top_10:LanguageFile|text=risk|language=de}}</th>
 
     <th style="border: 3px solid #444444;">{{Top_10:LanguageFile|text=threatAgents|language=de}}</th>
 
     <th style="border: 3px solid #444444;">{{Top_10:LanguageFile|text=threatAgents|language=de}}</th>
Line 24: Line 24:
 
</tr>
 
</tr>
  
−
<tr><td style="border: 3px solid #444444;">[[Germany/Projekte/Top 10 fuer Entwickler/A1_{{Top_10_2010:ByTheNumbers|1|language=de|year=2013}}|A1 {{Top_10_2010:ByTheNumbers|1|language=de|year=2013}}]]</td><td style="border: 3px solid #444444;"><b>?</b></td>
+
<tr><td style="border: 3px solid #444444;">[[{{Top_10:LanguageFile|text=documentRootTop10DeveloperEdition|year=2013|language=de}}A1 {{Top_10_2010:ByTheNumbers|1|language=de|year=2013}}|A1 {{Top_10_2010:ByTheNumbers|1|language=de|year=2013}}]]</td>
 +
<td style="border: 3px solid #444444;"><b>?</b></td>
 
   {{Top_10:SummaryTableTemplate|type=valueOnly|exploitability=1|prevalence=2|detectability=2|impact=1|language=de|year=2013}}
 
   {{Top_10:SummaryTableTemplate|type=valueOnly|exploitability=1|prevalence=2|detectability=2|impact=1|language=de|year=2013}}
 
<td style="border: 3px solid #444444"><b>?</b></td></tr>
 
<td style="border: 3px solid #444444"><b>?</b></td></tr>
  
−
<tr><td style="border: 3px solid #444444;">[[Germany/Projekte/Top 10 fuer Entwickler/A2_{{Top_10_2010:ByTheNumbers|2|language=de|year=2013}}|A2 {{Top_10_2010:ByTheNumbers|2|language=de|year=2013}}]]</td><td style="border: 3px solid #444444;"><b>?</b></td>
+
<tr><td style="border: 3px solid #444444;">[[{{Top_10:LanguageFile|text=documentRootTop10DeveloperEdition|year=2013|language=de}}A2 {{Top_10_2010:ByTheNumbers|2|language=de|year=2013}}|A2 {{Top_10:LanguageFile|text=authentication|year=2013|language=de}}]]</td>
 +
<td style="border: 3px solid #444444;"><b>?</b></td>
 
   {{Top_10:SummaryTableTemplate|type=valueOnly|exploitability=2|prevalence=1|detectability=2|impact=1|language=de|year=2013}}
 
   {{Top_10:SummaryTableTemplate|type=valueOnly|exploitability=2|prevalence=1|detectability=2|impact=1|language=de|year=2013}}
 
<td style="border: 3px solid #444444"><b>?</b></td></tr>
 
<td style="border: 3px solid #444444"><b>?</b></td></tr>
  
−
<tr><td style="border: 3px solid #444444;">[[Germany/Projekte/Top 10 fuer Entwickler/A3_{{Top_10_2010:ByTheNumbers|3|language=de|year=2013}}|A3 {{Top_10_2010:ByTheNumbers|3|language=de|year=2013}}]]</td><td style="border: 3px solid #444444;"><b>?</b></td>
+
<tr><td style="border: 3px solid #444444;">[[{{Top_10:LanguageFile|text=documentRootTop10DeveloperEdition|year=2013|language=de}}A3 {{Top_10_2010:ByTheNumbers|3|language=de|year=2013}}|A3 {{Top_10:LanguageFile|text=xssShort|year=2013|language=de}}]]</td>
 +
<td style="border: 3px solid #444444;"><b>?</b></td>
 
   {{Top_10:SummaryTableTemplate|type=valueOnly|exploitability=2|prevalence=0|detectability=1|impact=2|language=de|year=2013}}
 
   {{Top_10:SummaryTableTemplate|type=valueOnly|exploitability=2|prevalence=0|detectability=1|impact=2|language=de|year=2013}}
 
<td style="border: 3px solid #444444"><b>?</b></td></tr>
 
<td style="border: 3px solid #444444"><b>?</b></td></tr>
  
−
<tr><td style="border: 3px solid #444444;">[[Germany/Projekte/Top 10 fuer Entwickler/A4_{{Top_10_2010:ByTheNumbers|4|language=de|year=2013}}|A4 {{Top_10_2010:ByTheNumbers|4|language=de|year=2013}}]]</td><td style="border: 3px solid #444444;"><b>?</b></td>
+
<tr><td style="border: 3px solid #444444;">[[{{Top_10:LanguageFile|text=documentRootTop10DeveloperEdition|year=2013|language=de}}A4 {{Top_10_2010:ByTheNumbers|4|language=de|year=2013}}|A4 {{Top_10:LanguageFile|text=insecureDOR|year=2013|language=de}}]]</td><td style="border: 3px solid #444444;"><b>?</b></td>
 
   {{Top_10:SummaryTableTemplate|type=valueOnly|exploitability=1|prevalence=2|detectability=1|impact=2|language=de|year=2013}}
 
   {{Top_10:SummaryTableTemplate|type=valueOnly|exploitability=1|prevalence=2|detectability=1|impact=2|language=de|year=2013}}
 
<td style="border: 3px solid #444444"><b>?</b></td></tr>
 
<td style="border: 3px solid #444444"><b>?</b></td></tr>
  
−
<tr><td style="border: 3px solid #444444;">[[Germany/Projekte/Top 10 fuer Entwickler/A5_{{Top_10_2010:ByTheNumbers|5|language=de|year=2013}}|A5 {{Top_10_2010:ByTheNumbers|5|language=de|year=2013}}]]</td><td style="border: 3px solid #444444;"><b>?</b></td>
+
<tr><td style="border: 3px solid #444444;">[[{{Top_10:LanguageFile|text=documentRootTop10DeveloperEdition|year=2013|language=de}}A5 {{Top_10_2010:ByTheNumbers|5|language=de|year=2013}}|A5 {{Top_10:LanguageFile|text=misconfig|year=2013|language=de}}]]</td>
 +
<td style="border: 3px solid #444444;"><b>?</b></td>
 
   {{Top_10:SummaryTableTemplate|type=valueOnly|exploitability=1|prevalence=2|detectability=1|impact=2|language=de|year=2013}}
 
   {{Top_10:SummaryTableTemplate|type=valueOnly|exploitability=1|prevalence=2|detectability=1|impact=2|language=de|year=2013}}
 
<td style="border: 3px solid #444444"><b>?</b></td></tr>
 
<td style="border: 3px solid #444444"><b>?</b></td></tr>
  
−
<tr><td style="border: 3px solid #444444;">[[Germany/Projekte/Top 10 fuer Entwickler/A6_{{Top_10_2010:ByTheNumbers|6|language=de|year=2013}}|A6 {{Top_10_2010:ByTheNumbers|6|language=de|year=2013}}]]</td><td style="border: 3px solid #444444;"><b>?</b></td>
+
<tr><td style="border: 3px solid #444444;">[[{{Top_10:LanguageFile|text=documentRootTop10DeveloperEdition|year=2013|language=de}}A6 {{Top_10_2010:ByTheNumbers|6|language=de|year=2013}}|A6 {{Top_10:LanguageFile|text=sensData|year=2013|language=de}}]]</td>
 +
<td style="border: 3px solid #444444;"><b>?</b></td>
 
   {{Top_10:SummaryTableTemplate|type=valueOnly|exploitability=3|prevalence=3|detectability=2|impact=1|language=de|year=2013}}
 
   {{Top_10:SummaryTableTemplate|type=valueOnly|exploitability=3|prevalence=3|detectability=2|impact=1|language=de|year=2013}}
 
<td style="border: 3px solid #444444"><b>?</b></td></tr>
 
<td style="border: 3px solid #444444"><b>?</b></td></tr>
  
−
<tr><td style="border: 3px solid #444444;">[[Germany/Projekte/Top 10 fuer Entwickler/A7_{{Top_10_2010:ByTheNumbers|7|language=de|year=2013}}|A7 {{Top_10_2010:ByTheNumbers|7|language=de|year=2013}}]]</td><td style="border: 3px solid #444444;"><b>?</b></td>
+
<tr><td style="border: 3px solid #444444;">[[{{Top_10:LanguageFile|text=documentRootTop10DeveloperEdition|year=2013|language=de}}A7 {{Top_10_2010:ByTheNumbers|7|language=de|year=2013}}|A7 {{Top_10:LanguageFile|text=functionAcc|year=2013|language=de}}]]</td>
 +
<td style="border: 3px solid #444444;"><b>?</b></td>
 
   {{Top_10:SummaryTableTemplate|type=valueOnly|exploitability=1|prevalence=2|detectability=2|impact=2|language=de|year=2013}}
 
   {{Top_10:SummaryTableTemplate|type=valueOnly|exploitability=1|prevalence=2|detectability=2|impact=2|language=de|year=2013}}
 
<td style="border: 3px solid #444444"><b>?</b></td></tr>
 
<td style="border: 3px solid #444444"><b>?</b></td></tr>
  
−
<tr><td style="border: 3px solid #444444;">[[Germany/Projekte/Top 10 fuer Entwickler/A8_{{Top_10_2010:ByTheNumbers|8|language=de|year=2013}}|A8 {{Top_10_2010:ByTheNumbers|8|language=de|year=2013}}]]</td><td style="border: 3px solid #444444;"><b>?</b></td>
+
<tr><td style="border: 3px solid #444444;">[[{{Top_10:LanguageFile|text=documentRootTop10DeveloperEdition|year=2013|language=de}}A8 {{Top_10_2010:ByTheNumbers|8|language=de|year=2013}}|A8 {{Top_10:LanguageFile|text=csrfShort|year=2013|language=de}}]]</td>
−
   {{Top_10:SummaryTableTemplate|type=valueOnly|exploitability=2|prevalence=2|detectability=2|impact=2|language=de|year=2013}}
+
<td style="border: 3px solid #444444;"><b>?</b></td>
 +
   {{Top_10:SummaryTableTemplate|type=valueOnly|exploitability=2|prevalence=2|detectability=1|impact=2|language=de|year=2013}}
 
<td style="border: 3px solid #444444"><b>?</b></td></tr>
 
<td style="border: 3px solid #444444"><b>?</b></td></tr>
  
−
<tr><td style="border: 3px solid #444444;">[[Germany/Projekte/Top 10 fuer Entwickler/A9_{{Top_10_2010:ByTheNumbers|9|language=de|year=2013}}|A9 {{Top_10_2010:ByTheNumbers|9|language=de|year=2013}}]]</td><td style="border: 3px solid #444444;"><b>?</b></td>
+
<tr><td style="border: 3px solid #444444;">[[{{Top_10:LanguageFile|text=documentRootTop10DeveloperEdition|year=2013|language=de}}A9 {{Top_10_2010:ByTheNumbers|9|language=de|year=2013}}|A9 {{Top_10:LanguageFile|text=vulnComponents|year=2013|language=de}}]]</td>
 +
<td style="border: 3px solid #444444;"><b>?</b></td>
 
   {{Top_10:SummaryTableTemplate|type=valueOnly|exploitability=2|prevalence=1|detectability=3|impact=2|language=de|year=2013}}
 
   {{Top_10:SummaryTableTemplate|type=valueOnly|exploitability=2|prevalence=1|detectability=3|impact=2|language=de|year=2013}}
 
<td style="border: 3px solid #444444"><b>?</b></td></tr>
 
<td style="border: 3px solid #444444"><b>?</b></td></tr>
  
−
<tr><td style="border: 3px solid #444444;">[[Germany/Projekte/Top 10 fuer Entwickler/A10_{{Top_10_2010:ByTheNumbers|10|language=de|year=2013}}|A10 {{Top_10_2010:ByTheNumbers|10|language=de|year=2013}}]]</td><td style="border: 3px solid #444444;"><b>?</b></td>
+
<tr><td style="border: 3px solid #444444;">[[{{Top_10:LanguageFile|text=documentRootTop10DeveloperEdition|year=2013|language=de}}A10 {{Top_10_2010:ByTheNumbers|10|language=de|year=2013}}|A10 {{Top_10:LanguageFile|text=unvalRedirects|year=2013|language=de}}]]</td>
 +
<td style="border: 3px solid #444444;"><b>?</b></td>
 
   {{Top_10:SummaryTableTemplate|type=valueOnly|exploitability=2|prevalence=3|detectability=1|impact=2|language=de|year=2013}}
 
   {{Top_10:SummaryTableTemplate|type=valueOnly|exploitability=2|prevalence=3|detectability=1|impact=2|language=de|year=2013}}
 
<td style="border: 3px solid #444444"><b>?</b></td></tr>
 
<td style="border: 3px solid #444444"><b>?</b></td></tr>

Revision as of 16:31, 9 June 2013

← Top 10 fuer Entwickler/Anmerkungen zum Risikobegriff
Top 10 fuer Entwickler-2013: Inhaltsverzeichnis

Die Top-10-Risiken

 

TEST-TEST TEST -- Seite in Bearbeitung (BAUSTELLE!!) TEST-TEST TEST

Es geht nicht um Schwachstellen, sondern um Risiken

===!!2013!!=== => Links funktionieren nur für A1, A4 & A10!!! => tbd

Risiko Bedrohungsquellen Angriffsvektoren Schwachstellen
(Verbreitung)
 Schwachstellen
(Auffindbarkeit)
 Technische Auswirkung Auswirkung auf das Unternehmen
A1 Injection ? EINFACH HÄUFIG DURCHSCHNITTLICH SCHWERWIEGEND ?
A2 Authentifizierung ? DURCHSCHNITTLICH SEHR HÄUFIG DURCHSCHNITTLICH SCHWERWIEGEND ?
A3 XSS ? DURCHSCHNITTLICH AUSSERGEWÖHNLICH HÄUFIG EINFACH MITTEL ?
A4 Unsichere direkte Objektreferenzen? EINFACH HÄUFIG EINFACH MITTEL ?
A5 Fehlkonfiguration ? EINFACH HÄUFIG EINFACH MITTEL ?
A6 Sens. Data ? SCHWIERIG SELTEN DURCHSCHNITTLICH SCHWERWIEGEND ?
A7 Fehlerh. Autorisierung ? EINFACH HÄUFIG DURCHSCHNITTLICH MITTEL ?
A8 CSRF ? DURCHSCHNITTLICH HÄUFIG EINFACH MITTEL ?
A9 Komponenten mit Schwachstellen ? DURCHSCHNITTLICH SEHR HÄUFIG SCHWIERIG MITTEL ?
A10 Ungepr. Weiterltg. ? DURCHSCHNITTLICH SELTEN EINFACH MITTEL ?


Weitere zu betrachtende Risiken


← Top 10 fuer Entwickler/Anmerkungen zum Risikobegriff
Top 10 fuer Entwickler-2013: Inhaltsverzeichnis

Die Top-10-Risiken

 
© 2002-2013 OWASP Foundation This document is licensed under the Creative Commons Attribution-ShareAlike 3.0 license. Some rights reserved. CC-by-sa-3 0-88x31.png
Retrieved from "https://wiki.owasp.org/index.php?title=Germany/Projekte/Top_10_fuer_Entwickler-2013/Details_zu_Risiko-Faktoren&oldid=153290"