How to identify vulnerabilities in your Go application
This video is cut from a June 2021 webinar titled “Writing Secure Go Code” with Miki Tebeka. Get the full webinar on https://education.ardanlabs.com/cours....
In this video, we discuss 3 places you can go to find information about security vulnerabilities, review the OWASP Top Ten, and overview a go application with known vulnerabilities.
Golang security resources:
- Go CVE list: https://www.cvedetails.com/vulnerabil...
- Synk Vulnerability DB: www.synk.io/vuln?type=golang
- Golang-announce: https://groups.google.com/g/golang-an...
OWASP Top Ten: https://owasp.org/www-project-top-ten/
- Injection
- Broken Authentication
- Sensitive Data Exposure
- XML External Entities
- Broken Access Control
- Security Misconfiguration
- Cross-site scripting
- Insecure Deserialization
- Using Components with Known Vulnerabilities
- Insufficient Logging and Monitoring
GitHub Repo (code & slides): https://github.com/tebeka/talks/tree/...
----
Access our online courses → https://www.ardanlabs.com/education
Attend a live training → https://www.ardanlabs.com/live-traini...
Other Links:
Website: https://www.ardanlabs.com/
Github: https://github.com/ardanlabs
Twitter: / ardanlabs