A04:2021-Insecure Design

A04:2021-Insecure Design

Insecure Design: Flaws in the overall architecture or design of a system or application.
Occur when security considerations are not adequately addressed during the design phase.
Manifest as structural weaknesses that undermine the security posture of the system.
Exploiting it: Attackers can exploit design flaws to bypass security controls or gain unauthorized access.
Mitigation: Conduct thorough security design reviews, follow secure design principles, and incorporate security into the development lifecycle.