Source: https://owasp.org/www-pdf-archive//OWASP-Top-10-2017-en.pdf