1. Choose one of the OWASP Top Ten Web Application Security Risks (https://owasp.org/www-project-top-ten/). Note that OWASP usually doesn't provide a description that is accessible to non-programmers.

1. Choose one of the OWASP Top Ten Web Application Security Risks (https://owasp.org/www-project-top-ten/). Note that OWASP usually doesn't provide a description that is accessible to non-programmers. Using your textbook and web searches, write up a definition of the weakness that a typical adult could understand. The essay should be at least two paragraphs. I recommend that you describe the web application feature in the first paragraph, and then describe the Security Risk in a later paragraph.

2. Choose one of the CWE Top 25 Most Dangerous Software Errors (https://cwe.mitre.org/data/definitions/1200.html). Give a description, as you did for the OWASP Risk. Then search for a vulnerability that has that error in the National Vulnerability Database. Go to the NVD search page https://nvd.nist.gov/vuln/search and enter the CWE number (CWE-NNN) as a keyword. List the vulnerability's CVE number (not CWE), at least one product affected, and that vulnerability's Severity Base Score. Comment on the vulnerability for additional credit.

Be sure you write for a reasonably educated and aware adult who may not know much about software or networks