OWASP top ten security vulnerabilities 2017

To guide developers for what they need to protect against, the Open Web Application Security Project publishes an annual document that lists the ten most critical security vulnerabilities identified for a year. Addressing the ten security vulnerabilities does not provide for total security, but is a good start in raising awareness to the current major security threats. This document explains how the Clinical Data API and API developers should address security vulnerabilities and risks documented by OWASP for 2017.

This document identifies the controls within the Clinical Data API that are used or may be used to address the associated risks. In some cases, the controls are baked into the product and proper use of the controls by the clients must be used to validate the integrity of the controls.