{"id":112607,"date":"2022-06-29T00:00:00","date_gmt":"2022-06-29T00:00:00","guid":{"rendered":"https:\/\/nursingstudybay.com\/2022\/06\/29\/owasp-top-10-a92017-using-components-with-known-vulnerabilities\/"},"modified":"2022-06-29T00:00:00","modified_gmt":"2022-06-29T00:00:00","slug":"owasp-top-10-a92017-using-components-with-known-vulnerabilities","status":"publish","type":"post","link":"https:\/\/www.studyproessays.com\/help\/owasp-top-10-a92017-using-components-with-known-vulnerabilities\/","title":{"rendered":"OWASP Top 10 \u2013 A9:2017\u2013 Using Components with Known Vulnerabilities"},"content":{"rendered":"<p>Code Security \u2013 Issues and Best Practices<\/p>\n<p>1<\/p>\n<p>Outline<\/p>\n<p>Intro to Code Security<\/p>\n<p>Need for Code Security<\/p>\n<p>Code Security Fundamentals<\/p>\n<p>Code Security Issues<\/p>\n<p>OWASP Top 10 \u2013 A4:2017\u2013 XML External Entities (XXE)<\/p>\n<p>OWASP Top 10 \u2013 A8:2017\u2013 Insecure Deserialization<\/p>\n<p>OWASP Top 10 \u2013 A9:2017\u2013 Using Components with Known Vulnerabilities<\/p>\n<p>Attacks against Code Security Mechanisms<\/p>\n<p>Code Security Best Practices<\/p>\n<p>2<\/p>\n<p>Intro to Code Security<\/p>\n<p>3<\/p>\n<p>What is Code?<\/p>\n<p>Code refers to instructions issued to a computer that tells it which actions to perform and in what order<\/p>\n<p>Code is made of strings of typed letters, numbers, and figures, which constitute a language complete with spelling rules and syntax<\/p>\n<p>Code is used to do all sorts of activities including:<\/p>\n<p>Building websites<\/p>\n<p>Flying airplanes<\/p>\n<p>Running NASA satellites<\/p>\n<p>Making cars\/cellphones\/TVs\/gaming consoles, etc. work<\/p>\n<p>Intro to Code Security<\/p>\n<p>Source: Indeed.com \u2013 How to Write Code in 6 Steps? \u2013<\/p>\n<p>https:\/\/www.indeed.com\/career-advice\/career-development\/how-to-write-code<\/p>\n<p>4<\/p>\n<p>Code Types<\/p>\n<p>Markup Languages \u2013 Use start tags (&lt;&gt;) and end tags () to represent different components<\/p>\n<p>Examples:<\/p>\n<p>HTML \u2013 Is the code that describes the structure and content of a web application<\/p>\n<p>XML \u2013 Is code that is designed to store and transport data in both human\u2013 and machine\u2013readable format<\/p>\n<p>SAML \u2013 Is a framework for describing and exchanging security information between online business partners<\/p>\n<p>Intro to Code Security (contd.)<\/p>\n<p>5<\/p>\n<p>Code Types (continued)<\/p>\n<p>Scripting Languages \u2013 Used to write small programs that are usually interpreted at runtime by a runtime environment<\/p>\n<p>Examples (client-side):<\/p>\n<p>JavaScript \u2013 Is a cross-platform scripting language that can be embedded within web pages to create interactive documents<\/p>\n<p>AJAX \u2013 Is a collection of technologies that allows web developers to improve the response times between web pages<\/p>\n<p>Intro to Code Security (contd.)<\/p>\n<p>Source: NIST SP 800-44 \u2013 Guidelines on Securing Public Web Servers \u2013<\/p>\n<p>https:\/\/nvlpubs.nist.gov\/nistpubs\/Legacy\/SP\/nistspecialpublication800-44ver2.pdf<\/p>\n<p>6<\/p>\n<p>Code Types (continued)<\/p>\n<p>Scripting Languages \u2013 Can also be used from server-side<\/p>\n<p>Examples (server-side):<\/p>\n<p>CGI \u2013 Is used to make web sites interact with databases and other applications<\/p>\n<p>SSI \u2013 Is a limited scripting language supported by most web servers<\/p>\n<p>ASP \u2013 Is used to create dynamic and interactive web applications for servers that serve \u201c.asp\u201d web pages using the .NET framework<\/p>\n<p>PHP \u2013 Is used to create dynamic web pages that extract data from a database and present it on a web page<\/p>\n<p>Intro to Code Security (contd.)<\/p>\n<p>Source: NIST SP 800-44 \u2013 Guidelines on Securing Public Web Servers \u2013<\/p>\n<p>https:\/\/nvlpubs.nist.gov\/nistpubs\/Legacy\/SP\/nistspecialpublication800-44ver2.pdf<\/p>\n<p>7<\/p>\n<p>Code Types (continued)<\/p>\n<p>Programming Languages \u2013 Used to code the business logic behind the web applications<\/p>\n<p>Examples:<\/p>\n<p>Java \u2013 Is a cross-platform programming language that is secure, fast, powerful, open-source, and free<\/p>\n<p>C# \u2013 Is an object-oriented programming language created by Microsoft that runs on the .NET framework<\/p>\n<p>Python \u2013 Is an interpreted programming language used to create web applications that can be used to handle big data and perform complex math<\/p>\n<p>Ruby \u2013 Is an open-source programming language with a focus on simplicity and productivity<\/p>\n<p>Intro to Code Security (contd.)<\/p>\n<p>8<\/p>\n<p>Code Market Share:<\/p>\n<p>Intro to Code Security (contd.)<\/p>\n<p>Source: Programming Languages Market Share Report \u2013 Datanyze \u2013<\/p>\n<p>https:\/\/www.datanyze.com\/market-share\/programming-languages&#8211;67\/<\/p>\n<p>9<\/p>\n<p>Secure Coding Concepts \u2013 Professor Messer<\/p>\n<p>Intro to Code Security (contd.)<\/p>\n<p>Source: Professor Messer \u2013 Secure Coding Concepts \u2013 CompTIA Security+ SY0-401: 4.1 \u2013<\/p>\n<p><iframe loading=\"lazy\" title=\"Secure Coding Concepts - CompTIA Security+ SY0-401: 4.1\" width=\"1200\" height=\"675\" src=\"https:\/\/www.youtube.com\/embed\/N-tQtS5uQoo?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe><\/p>\n<p>10<\/p>\n<p>Code security refers to \u201ca set of technologies and best practices for making software as secure and stable as possible. It encompasses everything from encryption, certificates, and federated identity to recommendations for moving sensitive data, accessing a file system, and managing memory\u201d (Red Hat, 2020)<\/p>\n<p>As per Apple (2016), code security involves writing software that:<\/p>\n<p>Is resistant to attack by malicious or mischievous people or programs<\/p>\n<p>Stops an attacker from accessing and taking control of a server or a user\u2019s computer resulting in denial of service, compromise of secrets, or damage to the systems of thousands of users<\/p>\n<p>Protects a user\u2019s data from theft or corruption<\/p>\n<p>Is secure regardless of whether it is a small script or a commercial application<\/p>\n<p>Intro to Code Security (contd.)<\/p>\n<p>11<\/p>\n<p>Need for Code Security<\/p>\n<p>12<\/p>\n<p>As per OWASP (2010):<\/p>\n<p>It is much less expensive to build secure software than to correct security issues after the software package has been completed, not to mention the costs that may be associated with a security breach<\/p>\n<p>Securing critical software resources is more important than ever as the focus of attackers has steadily moved toward the application layer<\/p>\n<p>Failure to do secure coding can compromise:<\/p>\n<p>The software and its associated information<\/p>\n<p>The operating systems of the associated servers<\/p>\n<p>The backend database<\/p>\n<p>Other applications in a shared environment<\/p>\n<p>Need for Code Security<\/p>\n<p>13<\/p>\n<p>As per Veracode (2020):<\/p>\n<p>Code security analysis is a must for competitive enterprises<\/p>\n<p>Most current threats are directed at the application layer<\/p>\n<p>It is critical to search code for vulnerabilities such as backdoors and malicious code before hackers discover and exploit those vulnerabilities using a variety of attacks<\/p>\n<p>Such code-targeted attacks on the enterprise can have severe consequences:<\/p>\n<p>Reduce productivity<\/p>\n<p>Tie up valuable organizational resources<\/p>\n<p>Damage brand reputation<\/p>\n<p>Cut into profits<\/p>\n<p>Need for Code Security (contd.)<\/p>\n<p>14<\/p>\n<p>As per the Veracode (2019) State of Software Security Report, web applications coded in most common languages have at least 1 vulnerability:<\/p>\n<p>Need for Code Security (contd.)<\/p>\n<p>15<\/p>\n<p>As per the Veracode (2019) State of Software Security Report, the flaw intensity vs flaw prevalence are:<\/p>\n<p>Need for Code Security (contd.)<\/p>\n<p>16<\/p>\n<p>As per the Veracode (2019) State of Software Security Report, the flaw intensity vs flaw prevalence are :<\/p>\n<p>Need for Code Security (contd.)<\/p>\n<p>17<\/p>\n<p>As per the Veracode (2019) State of Software Security Report, the flaw debt types by language are :<\/p>\n<p>Need for Code Security (contd.)<\/p>\n<p>18<\/p>\n<p>Poor code security continues to be a major cause data breaches (Privacy Rights Clearinghouse, 2020)<\/p>\n<p>Need for Code Security (contd.)<\/p>\n<p>19<\/p>\n<p>Code Security Fundamentals<\/p>\n<p>20<\/p>\n<p>Secure Coding Standards \u2013 SEI | CMU | CERT<\/p>\n<p>Code Security Fundamentals<\/p>\n<p>Source: SEI | CMU | CERT \u2013 Secure Coding Standards \u2013<\/p>\n<p><iframe loading=\"lazy\" title=\"Secure Coding Standards\" width=\"1200\" height=\"675\" src=\"https:\/\/www.youtube.com\/embed\/WYKSivnp3gA?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe><\/p>\n<p>21<\/p>\n<p>Code security (by code type):<\/p>\n<p>Markup language security<\/p>\n<p>HTML security<\/p>\n<p>XML security<\/p>\n<p>SAML security<\/p>\n<p>Scripting language (client-side) security<\/p>\n<p>JavaScript security (in Firefox)<\/p>\n<p>AJAX security<\/p>\n<p>Code Security Fundamentals (contd.)<\/p>\n<p>22<\/p>\n<p>Code security (by code type):<\/p>\n<p>Scripting language (server-side) security<\/p>\n<p>CGI security<\/p>\n<p>SSI security<\/p>\n<p>ASP security<\/p>\n<p>PHP security<\/p>\n<p>Programming language security<\/p>\n<p>Java security<\/p>\n<p>C++ security<\/p>\n<p>Python security<\/p>\n<p>Ruby security<\/p>\n<p>Code Security Fundamentals (contd.)<\/p>\n<p>23<\/p>\n<p>Code Security Issues<\/p>\n<p>24<\/p>\n<p>Specific code security issues include the following:<\/p>\n<p>Vulnerabilities in C amounted to 50% of all reported vulnerabilities<\/p>\n<p>The most common CWEs across most programming languages are Cross-Site-Scripting (XSS), Input Validation, Permissions, Privileges, and Access Control, and Information Leak \/ Disclosure<\/p>\n<p>A significant rise was seen in reported vulnerabilities as a result of the use of automated tools and the trend of bug bounty programs<\/p>\n<p>While there was a spike in the number of reported security vulnerabilities in the past couple of years, the number of high severity vulnerabilities has decreased in most languages.<\/p>\n<p>Code Security Issues<\/p>\n<p>Source: Whitesource \u2013 Most Secure Programming Languages \u2013<\/p>\n<p>https:\/\/www.whitesourcesoftware.com\/most-secure-programming-languages\/<\/p>\n<p>25<\/p>\n<p>Specific code security issues include the following:<\/p>\n<p>Total reported vulnerabilities per language<\/p>\n<p>Code Security Issues (contd.)<\/p>\n<p>Source: Whitesource \u2013 Most Secure Programming Languages \u2013<\/p>\n<p>https:\/\/www.whitesourcesoftware.com\/most-secure-programming-languages\/<\/p>\n<p>26<\/p>\n<p>Top 3 vulnerabilities per language<\/p>\n<p>Code Security Issues (contd.)<\/p>\n<p>Source: Whitesource \u2013 Most Secure Programming Languages \u2013<\/p>\n<p>https:\/\/www.whitesourcesoftware.com\/most-secure-programming-languages\/<\/p>\n<p>27<\/p>\n<p>Code Security Issues (contd.)<\/p>\n<p>Top 3 vulnerabilities per language<\/p>\n<p>Source: Whitesource \u2013 Most Secure Programming Languages \u2013<\/p>\n<p>https:\/\/www.whitesourcesoftware.com\/most-secure-programming-languages\/<\/p>\n<p>28<\/p>\n<p>OWASP Top 10\u2013A4:2017 \u2013 XML External Entities (XXE)<\/p>\n<p>Code Security Issues (contd.)<\/p>\n<p>Source: OWASP Top 10 2017 A4 \u2013 XML External Entities (XXE) \u2013<\/p>\n<p>https:\/\/owasp.org\/www-project ( help with nursing paper writing from experts with MSN &#038; DNP degrees)-top-ten\/2017\/A4_2017-XML_External_Entities_(XXE).html<\/p>\n<p>29<\/p>\n<p>Common code security vulnerabilities:<\/p>\n<p>Code Security Issues (contd.)<\/p>\n<p>Source: OWASP Top 10 2017 A4 \u2013 XML External Entities (XXE) \u2013<\/p>\n<p>https:\/\/owasp.org\/www-project ( help with nursing paper writing from experts with MSN &#038; DNP degrees)-top-ten\/2017\/A4_2017-XML_External_Entities_(XXE).html<\/p>\n<p>30<\/p>\n<p>OWASP Top 10\u2013A8:2017 \u2013 Insecure Deserialization<\/p>\n<p>Code Security Issues (contd.)<\/p>\n<p>Source: OWASP Top 10 2017 A8 \u2013 Insecure Deserialization \u2013<\/p>\n<p>https:\/\/owasp.org\/www-project ( help with nursing paper writing from experts with MSN &#038; DNP degrees)-top-ten\/2017\/A8_2017-Insecure_Deserialization<\/p>\n<p>31<\/p>\n<p>Code Security Issues (contd.)<\/p>\n<p>Common code security vulnerabilities:<\/p>\n<p>Source: OWASP Top 10 2017 A8 \u2013 Insecure Deserialization \u2013<\/p>\n<p>https:\/\/owasp.org\/www-project ( help with nursing paper writing from experts with MSN &#038; DNP degrees)-top-ten\/2017\/A8_2017-Insecure_Deserialization<\/p>\n<p>32<\/p>\n<p>OWASP Top 10\u2013A9:2017 \u2013 Using Components with Known Vulnerabilities<\/p>\n<p>Code Security Issues (contd.)<\/p>\n<p>Source: OWASP Top 10 2017 A9 \u2013 Using Components with Known Vulnerabilities \u2013<\/p>\n<p>https:\/\/owasp.org\/www-project ( help with nursing paper writing from experts with MSN &#038; DNP degrees)-top-ten\/2017\/A9_2017-Using_Components_with_Known_Vulnerabilities<\/p>\n<p>33<\/p>\n<p>Common code security vulnerabilities:<\/p>\n<p>Code Security Issues (contd.)<\/p>\n<p>Source: OWASP Top 10 2017 A9 \u2013 Using Components with Known Vulnerabilities \u2013<\/p>\n<p>https:\/\/owasp.org\/www-project ( help with nursing paper writing from experts with MSN &#038; DNP degrees)-top-ten\/2017\/A9_2017-Using_Components_with_Known_Vulnerabilities<\/p>\n<p>34<\/p>\n<p>Code Security Attacks<\/p>\n<p>35<\/p>\n<p>Most common code security attacks:<\/p>\n<p>Code Security Attacks<\/p>\n<p>Attack Type\tDescription<br \/>\nBillion Laughs Attack \/ XML Bomb\tA block of XML that is both well-formed and valid according to the rules of an XML schema but which crashes or hangs a program when that program attempts to parse it (Microsoft, 2015)<br \/>\nBuffer Overflow\tAn attack which consists of overwriting memory fragments of a process resulting in errors that end execution of the application in an unexpected way<br \/>\nCode Injection\tAn attack which consists of injecting code that is then interpreted\/executed by the application<br \/>\n36<\/p>\n<p>Most common code security attacks (continued):<\/p>\n<p>Code Security Attacks (contd.)<\/p>\n<p>Attack Type\tDescription<br \/>\nJSON Injection\tA simple server-side attack that could be performed in PHP to grant admin privileges to a regular user<br \/>\nSSI Injection\tAn attack allows the exploitation of a web application by injecting scripts in HTML pages or executing arbitrary codes remotely<br \/>\nXXE Attack\tThe attacker breaks out of the usual processing schema and bypasses the security verification and reads locally stored files<br \/>\n37<\/p>\n<p>What is an XXE Attack \u2013 Hacksplaining<\/p>\n<p>Code Security Attacks (contd.)<\/p>\n<p>Source: Hacksplaining \u2013 What is an XXE Attack? \u2013<\/p>\n<p><iframe loading=\"lazy\" title=\"What is an XXE Attack?\" width=\"1200\" height=\"675\" src=\"https:\/\/www.youtube.com\/embed\/hIHrGuG3r5w?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe><\/p>\n<p>38<\/p>\n<p>Code Security Best Practices<\/p>\n<p>39<\/p>\n<p>Code Security Best Practices<\/p>\n<p>Best practices for code security include :<\/p>\n<p>Establishing coding standards and conventions<\/p>\n<p>Select languages based on security issues they inherit<\/p>\n<p>Use built-in security features<\/p>\n<p>Use loosely coupled frameworks \/ libraries \/ components<\/p>\n<p>Enforce standards<\/p>\n<p>Using safe functions \/ APIs only<\/p>\n<p>Provide guidance to developers on what functions \/ APIs to avoid<\/p>\n<p>Use appropriate tools to Help in identifying and reviewing the usage of dangerous functions<\/p>\n<p>Use the latest versions of compliers \/ interpreters \/ runtime environments<\/p>\n<p>Source: SAFEcode.org \u2013 Fundamental Practices for Secure Software Development \u2013<\/p>\n<p>https:\/\/safecode.org\/wp-content\/uploads\/2018\/03\/SAFECode_Fundamental_Practices_for_Secure_Software_Development_March_2018.pdf<\/p>\n<p>40<\/p>\n<p>Code Security Best Practices (contd.)<\/p>\n<p>Best practices for code security include (continued):<\/p>\n<p>Using code analysis tools to find security issues early<\/p>\n<p>Use tools to analyze code to identify deviation from requirements<\/p>\n<p>Use tools that plug in directly into the IDE<\/p>\n<p>Use secure code review to identify logical errors in the source code<\/p>\n<p>Handling data safely \/ handling errors gracefully<\/p>\n<p>Use input validation techniques to begin with<\/p>\n<p>Enforce data segregation to prevent data from becoming application logic<\/p>\n<p>Use encoding so that data is interpreted in the context in which it is used<\/p>\n<p>Use data binding which prevents data from being interpreted as control logic<\/p>\n<p>Use sanitization techniques to remove, replace, or encode unwanted characters<\/p>\n<p>Source: SAFEcode.org \u2013 Fundamental Practices for Secure Software Development \u2013<\/p>\n<p>https:\/\/safecode.org\/wp-content\/uploads\/2018\/03\/SAFECode_Fundamental_Practices_for_Secure_Software_Development_March_2018.pdf<\/p>\n<p>41<\/p>\n<p>Code Security Best Practices (contd.)<\/p>\n<p>Best practices for code security include the following:<\/p>\n<p>Take Security Requirements and Risk Information into Account During Software Design<\/p>\n<p>Review the Software Design to Verify Compliance with Security Requirements and Risk Information<\/p>\n<p>Verify Third-Party Software Complies with Security Requirements<\/p>\n<p>Reuse Existing, Well-Secured Software When Feasible Instead of Duplicating Functionality<\/p>\n<p>Create Source Code Adhering to Secure Coding Practices<\/p>\n<p>Source: NIST \u2013 Cybersecurity White Paper \u2013<\/p>\n<p>https:\/\/csrc.nist.gov\/CSRC\/media\/Publications\/white-paper\/2019\/06\/07\/mitigating-risk-of-software-vulnerabilities-with-ssdf\/draft\/documents\/ssdf-for-mitigating-risk-of-software-vulns-draft.pdf<\/p>\n<p>42<\/p>\n<p>Code Security Best Practices (contd.)<\/p>\n<p>Best practices for code security include the following:<\/p>\n<p>Configure the Compilation and Build Processes to Improve Executable Security<\/p>\n<p>Review and\/or Analyze Human-Readable Code to Identify Vulnerabilities and Verify Compliance with Security Requirements<\/p>\n<p>Test Executable Code to Identify Vulnerabilities and Verify Compliance with Security Requirements<\/p>\n<p>Configure the Software to Have Secure Settings by Default<\/p>\n<p>Source: NIST \u2013 Cybersecurity White Paper \u2013<\/p>\n<p>https:\/\/csrc.nist.gov\/CSRC\/media\/Publications\/white-paper\/2019\/06\/07\/mitigating-risk-of-software-vulnerabilities-with-ssdf\/draft\/documents\/ssdf-for-mitigating-risk-of-software-vulns-draft.pdf<\/p>\n<p>43<\/p>\n<p>Use the following code security best practices to protect against XML External Entities (XXE):<\/p>\n<p>Code Security Best Practices (contd.)<\/p>\n<p>Source: OWASP Top 10 2017 A4 \u2013 XML External Entities (XXE) \u2013<\/p>\n<p>https:\/\/owasp.org\/www-project ( help with nursing paper writing from experts with MSN &#038; DNP degrees)-top-ten\/2017\/A4_2017-XML_External_Entities_(XXE).html<\/p>\n<p>44<\/p>\n<p>Use the following code security best practices to protect against insecure deserialization:<\/p>\n<p>Code Security Best Practices (contd.)<\/p>\n<p>Source: OWASP Top 10 2017 A8 \u2013 Insecure Deserialization \u2013<\/p>\n<p>https:\/\/owasp.org\/www-project ( help with nursing paper writing from experts with MSN &#038; DNP degrees)-top-ten\/2017\/A8_2017-Insecure_Deserialization.html<\/p>\n<p>45<\/p>\n<p>Use the following code security best practices to protect against using components with known vulnerabilities:<\/p>\n<p>Code Security Best Practices (contd.)<\/p>\n<p>Source: OWASP Top 10 2017 A9 \u2013 Using Components with Known Vulnerabilities \u2013<\/p>\n<p>https:\/\/owasp.org\/www-project ( help with nursing paper writing from experts with MSN &#038; DNP degrees)-top-ten\/2017\/A9_2017-Using_Components_with_Known_Vulnerabilities.html<\/p>\n<p>46<\/p>\n<p>Code security issues are among the OWASP Top 10 list of web application security risks<\/p>\n<p>This is due to weaknesses in coding technologies such as markup languages, scripting languages (client- and server-side), programming languages, etc.<\/p>\n<p>Hackers are able to exploit the weaknesses using attacks such as billion laughs, buffer overflow, code\/SSI\/JSON injection, XXE attacks, etc.<\/p>\n<p>Best practices to protect code include establishing coding standards, protecting data, performing input validation\/error handling\/logging, ensuring proper memory management, using code analysis tools to do secure code review, etc.<\/p>\n<p>Recap<\/p>\n<p>47<\/p>\n<p>Thank you!!!<\/p>\n<p>48<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Code Security \u2013 Issues and Best Practices 1 Outline Intro to Code Security Need for Code Security Code Security Fundamentals Code Security Issues OWASP Top\u2026<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7316,7318,7317,7315,7319,7321],"tags":[642,618,8825,576,116,631,19,643,473,633,630,628,450,597,594,626,635,574,622,624,620,621,619,623,617,625,627,634,629,632,644,645,42,66],"class_list":["post-112607","post","type-post","status-publish","format-standard","hentry","category-best-dissertation-writers-uk","category-british-dissertation-writers","category-dissertation-help-online","category-dissertation-writing-services-uk","category-help-with-dissertation-writing","category-uk-dissertation-help","tag-apps-that-write-essays-for-you-free","tag-assignment-writing-services-in-usa","tag-bes","tag-best-dissertation-writing-services","tag-best-essay-writing-service","tag-best-paper-writing-services","tag-best-research-paper-writing-services-in-usa","tag-best-website-to-write-my-essay","tag-cheap-essay-writing-service","tag-cheap-research-paper-writing-service","tag-college-paper-writing-service","tag-dissertation-help-online","tag-dissertation-writing-services","tag-dissertation-writing-services-illegal","tag-dissertation-writing-services-near-me","tag-dissertation-writing-services-usa","tag-essay-writing-service","tag-free-dissertation-writing-services","tag-homework-essay-writer","tag-homework-essay-writer-free","tag-homework-help-global","tag-homework-help-services","tag-homework-help-usa","tag-homework-writing-help","tag-homework-writing-service","tag-legit-research-paper-writing-services","tag-legitimate-dissertation-writing-services","tag-research-paper-writer-online-free","tag-research-paper-writing-services-online","tag-research-paper-writing-websites","tag-write-my-essay-for-me-cheap","tag-write-my-essay-for-me-tik-tok","tag-write-my-essay-free","tag-write-my-paper"],"_links":{"self":[{"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/posts\/112607","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/comments?post=112607"}],"version-history":[{"count":0,"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/posts\/112607\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/media?parent=112607"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/categories?post=112607"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/tags?post=112607"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}