Fixing Broken Access Control

Slides: https://static.sched.com/hosted_files/owasp2023globalappsecwashin/8a/Global%20AppSec%202023%20-%20Fixing%20Broken%20Access%20Control%20-%20Final.pptx

Broken Access Control is #1 on the OWASP top 10 list for good reason. Every cloud-native application needs some form of access control to secure protected resources. Unfortunately, only a very limited few have the expertise and teams required to build centralized authorization systems that avoid broken access vulnerabilities.

Google, Airbnb, Intuit, Netflix and Carta have successfully built fine-grained access control systems. The common application has not. In fact, an astonishing 94% of applications tested by the OWASP …

access access control airbnb application authorization broken access control build cloud cloud-native control expertise good google intuit list netflix owasp owasp top 10 resources systems teams top 10 vulnerabilities