Web application security: OWASP Top 10, security testing and WAF
Web App Security: OWASP Top 10, WSTG methodology, Burp Suite, Nuclei scanning, security headers, WAF - PCI DSS, ISO 27001, NIS2 compliance.
Summary: AI security encompasses measures to protect AI/ML systems from attacks, as well as the secure use of AI in security-critical contexts. Large Language Models (LLMs) are of particular importance: the OWASP LLM Top 10 (2025) catalogs the most significant risks, such as prompt injection, training data poisoning, LLM supply chain vulnerabilities, and excessive agency. The EU AI Act and NIST AI RMF establish regulatory frameworks.
Sources & References
- [1] OWASP Top 10 2021 - OWASP Foundation
- [2] OWASP Web Security Testing Guide (WSTG) - OWASP Foundation
- [3] NIST SP 800-95: Guide to Secure Web Services - NIST
- [4] BSI ORP.2: Sicheres Webanwendungsdesign - BSI
Questions about this topic?
Our experts advise you free of charge and without obligation.
About the Author
M.Sc. IT-Sicherheit mit über 5 Jahren Erfahrung in offensiver Sicherheitsanalyse. Leitet die Durchführung von Penetrationstests mit Spezialisierung auf Web-Applikationen, Netzwerk-Infrastruktur, Reverse Engineering und Hardware-Sicherheit. Verantwortlich für mehrere Responsible Disclosures.
