Microsoft SDL, OSSTMM, Web application security, Risk management

1. OWASP TOP 10
1. INJECTION- SQL,LDAP
2.BROKEN AUTHENTICATION
&
SESSION MANAGEMENT
3.XSS
4.INSECURE OBJECT REFERENCE
5. CSRF CROSS SITE REQUEST FORGERY
6.SECURITY MISCONFIGURATION
7.INSECURE CRYPTOGRAPHIC STORAGE
8.FAILURE TO RESTRICT URL
9.INSUFFICIENT TRANSPORT LAYER PROTECTION
10.UN-VALIDATED REDIRECTS AND FORWARDS
Web Application Security

2. Penetration Testing methodology
OSTMM

3. Microsoft Security Development lifecycle SDL

4. More Detail
This is Evolving presentation: Will add more
detailsRefer Blog/presentation Read by almost
50,000 people. More details and write up can be
found at:
http://sandyclassic.wordpress.com
http://thesecurityview.wordpress.com/
http://productmanagementview.wordpress.com
http://projectmanagerview.wordpress.com