OWASPAppSecEU2006_CanTestingToolsReallyFindOWASPTop10

Can (Automated) Testing Tools Really Find the OWASP Top 10? Erwin Geirnaert Partner & Co-founder, ZI O N SECURITY [email_address] +32478289466

Agenda ,[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Introduction ,[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Existing studies ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Testing ,[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Testing ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Testing ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Automated Tools – Open-source ,[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Automated Tools - Commercial ,[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

OWASP Top Ten Most Critical Web Application Security Vulnerabilities ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Some questions ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A1. Unvalidated Input ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A1. Unvalidated Input ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A2. Broken Access Controls ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A2. Broken Access Controls ,[object Object],OWASP AppSec Europe 2006

A3. Broken Authentication and Session Management ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A4. Cross Site Scripting Flaws ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A5. Buffer Overflows ,[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A6. Injection Flaws ,[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A7. Improper Error Handling ,[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A8. Insecure Storage ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A9. Denial of Service ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A10. Insecure Configuration Management ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Conclusions ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

OWASPAppSecEU2006_CanTestingToolsReallyFindOWASPTop10

Recommandé

Recommandé

Contenu connexe

Tendances

Tendances (20)

En vedette

En vedette (9)

Similaire à OWASPAppSecEU2006_CanTestingToolsReallyFindOWASPTop10

Similaire à OWASPAppSecEU2006_CanTestingToolsReallyFindOWASPTop10 (20)

Plus de Juan Golden Tiger

Plus de Juan Golden Tiger (8)

Dernier

Dernier (20)

OWASPAppSecEU2006_CanTestingToolsReallyFindOWASPTop10