Where to start with security
Security is a vast topic, and it will require several books to cover all the aspects; even then, it will require more resources to keep it up to date. In this section, we will explore some resources to start learning but with a limited scope to the Node.js ecosystem and web application development.
We will learn about the OWASP Top 10, CVE, and CWE so we can have a clear compass to navigate through the security world as beginners.
OWASP Top 10 overview
Many possible attacks can affect our applications and we cannot cover all of them, so the task becomes overwhelming. To prioritize the most common attacks, the Open Web Application Security Project (OWASP) foundation created a list of the 10 most common attacks that affect web applications, and this is updated every few years. You can find the list at https://owasp.org/www-project-top-ten.
Let’s see the list of the OWASP Top 10 for 2021:
- A01:2021 Broken Access Control
- A02:2021...
