Skip to content

Commit

Permalink
Add link to Serverless Architectures article
Browse files Browse the repository at this point in the history
A link to external resource describing the serverless architectural style might be good for newcomers to get a better understanding what the project is about.
  • Loading branch information
MarcinHoppe authored Nov 19, 2018
1 parent 1261a5e commit 42bb921
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@

## Overview

When adopting serverless technology, we eliminate the need to develop a server to manage our application. By doing so, we also pass some of the security threats to the infrastructure provider. In addition to the many advantages of serverless application development, such as cost and scalability, some security aspects are also handed to our service provider, which can usually be trusted.
When adopting a [serverless architecture](https://martinfowler.com/articles/serverless.html), we eliminate the need to develop a server to manage our application. By doing so, we also pass some of the security threats to the infrastructure provider. In addition to the many advantages of serverless application development, such as cost and scalability, some security aspects are also handed to our service provider, which can usually be trusted.

However, even if these applications are running without a provisioning server, they still execute code. If this code is written in an insecure manner, the application can be vulnerable to traditional application-level attacks, like Cross-Site Scripting (XSS), Command/SQL Injection, Denial of Service (DoS), broken authentication and authorization and many more.

Expand Down Expand Up @@ -44,4 +44,4 @@ The first report is first glance to the serverless security world and will serve

[Slack Channel](https://join.slack.com/t/owasp/shared_invite/enQtNDI5MzgxMDQ2MTAwLTEyNzIzYWQ2NDZiMGIwNmJhYzYxZDJiNTM0ZmZiZmJlY2EwZmMwYjAyNmJjNzQxNzMyMWY4OTk3ZTQ0MzFhMDY)

[Official page](https://www.owasp.org/index.php/OWASP_Serverless_Top_10_Project)
[Official page](https://www.owasp.org/index.php/OWASP_Serverless_Top_10_Project)

0 comments on commit 42bb921

Please sign in to comment.