Web application security: OWASP Top 10, security testing and WAF
Web App Security: OWASP Top 10, WSTG methodology, Burp Suite, Nuclei scanning, security headers, WAF - PCI DSS, ISO 27001, NIS2 compliance.
Summary: AI security encompasses measures to protect AI/ML systems from attacks, as well as the secure use of AI in security-critical contexts. Large Language Models (LLMs) are of particular importance: the OWASP LLM Top 10 (2025) catalogs the most significant risks, such as prompt injection, training data poisoning, LLM supply chain vulnerabilities, and excessive agency. The EU AI Act and NIST AI RMF establish regulatory frameworks.
Sources & References
- [1] OWASP Top 10 2021 - OWASP Foundation
- [2] OWASP Web Security Testing Guide (WSTG) - OWASP Foundation
- [3] NIST SP 800-95: Guide to Secure Web Services - NIST
- [4] BSI ORP.2: Sicheres Webanwendungsdesign - BSI
Questions about this topic?
Our experts advise you free of charge and without obligation.
About the Author
M.Sc. in IT Security with more than 5 years of experience in offensive security analysis. Leads the delivery of penetration tests, specializing in web applications, network infrastructure, reverse engineering and hardware security. Responsible for several responsible disclosures.
