Firewall/Proxy

https://lexica.fri3dl.dev/school/nscs_theorie/firewall_proxy

Pentesting

Nessus/OpenVAS

Applikationssicherheit (OWASP Top 10)

OWASP Top 10 (2025)

1. A01:2025 - Broken Access Control: z.B. broken/missing Auth check
2. A02:2025 - Security Misconfiguration: z.B. firebase allow all
3. A03:2025 - Software Supply Chain Failures: z.B. npm packages
4. A04:2025 - Cryptographic Failures: z.B. legacy hash algorithm
5. A05:2025 - Injection: z.B. SQL injection
6. A06:2025 - Insecure Design: z.B. unsichere reset-password frage
7. A07:2025 - Authentication Failures: z.B. kein JWT-expire
8. A08:2025 - Software or Data Integrity Failures: z.B. digital signuature von update nicht überprüfen
9. A09:2025 - Security Logging & Alerting Failures: z.B. kein logging für API failures
10. A10:2025 - Mishandling of Exceptional Conditions: z.B. keine Exception handling