Beyond the Web Application Firewall (WAF): Common Myths about Web Application Security

For most organizations, web application security begins with solutions designed to address the Open Web Application Security Project (OWASP) Top Ten Web Application Security Risks[1]. These risks include the most common web application attack vectors, such as SQL injection and cross-site scripting (XSS). However, OWASP also catalogues dozens of additional vulnerabilities, such as unrestricted file uploads[2], which “represent a severe risk to applications.” OPSWAT recently published its Web Application Security Report 2021, which reveals almost all (99%) of the companies surveyed are concerned about protecting against malware and cyberattacks from file uploads to varying degrees. Organizations deploy file upload portals for a variety of reasons, such as submitting forms and applications or sharing and collaborating on content. More than half (51 percent) of the organizations with a file upload portal process more than 5,000 file uploads per day. This volume (including submissions from 3rd party sources) provides a wide attack

Scroll to Top