Ce diaporama a bien été signalé.
Nous utilisons votre profil LinkedIn et vos données d’activité pour vous proposer des publicités personnalisées et pertinentes. Vous pouvez changer vos préférences de publicités à tout moment.
OWASP y el cumplimiento  normativo: PCI-DSS y PA-DSS Juan Jose Rider Jimenez OWASP member Spain Chapter [email_address] 13...
Algo sobre mi <ul><li>Profesional desde 2001. </li></ul><ul><li>Experto en e-commerce: Verified By VISA y SecureCode. </li...
PCI-DSS y PA-DSS <ul><li>PCI-DSS es un estándar de obligado cumplimiento en la industria de los medios de pago. Es de obli...
¿Qué es PCI-DSS y PA-DSS? (II) PCI SSC Payment Card Industry  Security Standards Council PA DSS Payment Application  Data ...
Los 12 requerimientos de PCI-DSS Categoría Requerimiento Construir y Mantener una red segura 1)Instalar y mantener una con...
Los 14 requerimientos de PA-DSS Requirement 1 Do not retain full magnetic stripe, card validation code or value  (CAV2, CI...
¿Qué puede aportar OWASP al cumplimiento de PCI-DSS y PA-DSS? <ul><li>Lo obvio : En la normativa PCI-DSS sólo se nombra a ...
¿Qué puede aportar OWASP al cumplimiento de PCI-DSS y PA-DSS? <ul><li>Req 6.2: “Risk Ranking” (PA-DSS Req.7.1) </li></ul><...
¿Qué puede aportar OWASP al cumplimiento de PCI-DSS y PA-DSS? <ul><li>Req 11.2: “ Run internal and external network vulner...
¿Qué puede aportar OWASP al cumplimiento de PCI-DSS y PA-DSS? <ul><li>Existen  aportaciones que no son tan obvias. </li></...
¿Qué puede aportar OWASP al cumplimiento de PCI-DSS y PA-DSS? <ul><li>Y algunas más: </li></ul><ul><li>Seguridad a todos l...
¿Qué puede aportar OWASP al cumplimiento de PCI-DSS y PA-DSS? <ul><li>Finalmente, otras iniciativas: </li></ul><ul><li>OWA...
Conclusiones <ul><li>El cumplimiento del estándar PCI-DSS y PA-DSS no se puede alcanzar totalmente usando exclusivamente c...
¿Preguntas?
Prochain SlideShare
Chargement dans…5
×

Infosecure 2011 owasp y cumplimiento normativo pci-dss y pa-dss

1 950 vues

Publié le

Presentacion durante en InfoSecure 2011 de cómo ayuda OWASP al cumplimineto de PCI-DSS

Publié dans : Économie & finance
  • DOWNLOAD THIS BOOKS INTO AVAILABLE FORMAT (Unlimited) ......................................................................................................................... ......................................................................................................................... Download Full PDF EBOOK here { https://soo.gd/qURD } ......................................................................................................................... Download Full EPUB Ebook here { https://soo.gd/qURD } ......................................................................................................................... Download Full doc Ebook here { https://soo.gd/qURD } ......................................................................................................................... Download PDF EBOOK here { https://soo.gd/qURD } ......................................................................................................................... Download EPUB Ebook here { https://soo.gd/qURD } ......................................................................................................................... Download doc Ebook here { https://soo.gd/qURD } ......................................................................................................................... ......................................................................................................................... ................................................................................................................................... eBook is an electronic version of a traditional print book THIS can be read by using a personal computer or by using an eBook reader. (An eBook reader can be a software application for use on a computer such as Microsoft's free Reader application, or a book-sized computer THIS is used solely as a reading device such as Nuvomedia's Rocket eBook.) Users can purchase an eBook on diskette or CD, but the most popular method of getting an eBook is to purchase a downloadable file of the eBook (or other reading material) from a Web site (such as Barnes and Noble) to be read from the user's computer or reading device. Generally, an eBook can be downloaded in five minutes or less ......................................................................................................................... .............. Browse by Genre Available eBooks .............................................................................................................................. Art, Biography, Business, Chick Lit, Children's, Christian, Classics, Comics, Contemporary, Cookbooks, Manga, Memoir, Music, Mystery, Non Fiction, Paranormal, Philosophy, Poetry, Psychology, Religion, Romance, Science, Science Fiction, Self Help, Suspense, Spirituality, Sports, Thriller, Travel, Young Adult, Crime, Ebooks, Fantasy, Fiction, Graphic Novels, Historical Fiction, History, Horror, Humor And Comedy, ......................................................................................................................... ......................................................................................................................... .....BEST SELLER FOR EBOOK RECOMMEND............................................................. ......................................................................................................................... Blowout: Corrupted Democracy, Rogue State Russia, and the Richest, Most Destructive Industry on Earth,-- The Ride of a Lifetime: Lessons Learned from 15 Years as CEO of the Walt Disney Company,-- Call Sign Chaos: Learning to Lead,-- StrengthsFinder 2.0,-- Stillness Is the Key,-- She Said: Breaking the Sexual Harassment Story THIS Helped Ignite a Movement,-- Atomic Habits: An Easy &amp; Proven Way to Build Good Habits &amp; Break Bad Ones,-- Everything Is Figureoutable,-- What It Takes: Lessons in the Pursuit of Excellence,-- Rich Dad Poor Dad: What the Rich Teach Their Kids About Money THIS the Poor and Middle Class Do Not!,-- The Total Money Makeover: Classic Edition: A Proven Plan for Financial Fitness,-- Shut Up and Listen!: Hard Business Truths THIS Will Help You Succeed, ......................................................................................................................... .........................................................................................................................
       Répondre 
    Voulez-vous vraiment ?  Oui  Non
    Votre message apparaîtra ici
  • DOWNLOAD THIS BOOKS INTO AVAILABLE FORMAT (2019 Update) ......................................................................................................................... ......................................................................................................................... Download Full PDF EBOOK here { https://soo.gd/irt2 } ......................................................................................................................... Download Full EPUB Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download Full doc Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download PDF EBOOK here { https://soo.gd/irt2 } ......................................................................................................................... Download EPUB Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download doc Ebook here { https://soo.gd/irt2 } ......................................................................................................................... ......................................................................................................................... ................................................................................................................................... eBook is an electronic version of a traditional print book THIS can be read by using a personal computer or by using an eBook reader. (An eBook reader can be a software application for use on a computer such as Microsoft's free Reader application, or a book-sized computer THIS is used solely as a reading device such as Nuvomedia's Rocket eBook.) Users can purchase an eBook on diskette or CD, but the most popular method of getting an eBook is to purchase a downloadable file of the eBook (or other reading material) from a Web site (such as Barnes and Noble) to be read from the user's computer or reading device. Generally, an eBook can be downloaded in five minutes or less ......................................................................................................................... .............. Browse by Genre Available eBooks .............................................................................................................................. Art, Biography, Business, Chick Lit, Children's, Christian, Classics, Comics, Contemporary, Cookbooks, Manga, Memoir, Music, Mystery, Non Fiction, Paranormal, Philosophy, Poetry, Psychology, Religion, Romance, Science, Science Fiction, Self Help, Suspense, Spirituality, Sports, Thriller, Travel, Young Adult, Crime, Ebooks, Fantasy, Fiction, Graphic Novels, Historical Fiction, History, Horror, Humor And Comedy, ......................................................................................................................... ......................................................................................................................... .....BEST SELLER FOR EBOOK RECOMMEND............................................................. ......................................................................................................................... Blowout: Corrupted Democracy, Rogue State Russia, and the Richest, Most Destructive Industry on Earth,-- The Ride of a Lifetime: Lessons Learned from 15 Years as CEO of the Walt Disney Company,-- Call Sign Chaos: Learning to Lead,-- StrengthsFinder 2.0,-- Stillness Is the Key,-- She Said: Breaking the Sexual Harassment Story THIS Helped Ignite a Movement,-- Atomic Habits: An Easy &amp; Proven Way to Build Good Habits &amp; Break Bad Ones,-- Everything Is Figureoutable,-- What It Takes: Lessons in the Pursuit of Excellence,-- Rich Dad Poor Dad: What the Rich Teach Their Kids About Money THIS the Poor and Middle Class Do Not!,-- The Total Money Makeover: Classic Edition: A Proven Plan for Financial Fitness,-- Shut Up and Listen!: Hard Business Truths THIS Will Help You Succeed, ......................................................................................................................... .........................................................................................................................
       Répondre 
    Voulez-vous vraiment ?  Oui  Non
    Votre message apparaîtra ici
  • DOWNLOAD THIS BOOKS INTO AVAILABLE FORMAT (2019 Update) ......................................................................................................................... ......................................................................................................................... Download Full PDF EBOOK here { https://soo.gd/irt2 } ......................................................................................................................... Download Full EPUB Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download Full doc Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download PDF EBOOK here { https://soo.gd/irt2 } ......................................................................................................................... Download EPUB Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download doc Ebook here { https://soo.gd/irt2 } ......................................................................................................................... ......................................................................................................................... ................................................................................................................................... eBook is an electronic version of a traditional print book THIS can be read by using a personal computer or by using an eBook reader. (An eBook reader can be a software application for use on a computer such as Microsoft's free Reader application, or a book-sized computer THIS is used solely as a reading device such as Nuvomedia's Rocket eBook.) Users can purchase an eBook on diskette or CD, but the most popular method of getting an eBook is to purchase a downloadable file of the eBook (or other reading material) from a Web site (such as Barnes and Noble) to be read from the user's computer or reading device. Generally, an eBook can be downloaded in five minutes or less ......................................................................................................................... .............. Browse by Genre Available eBooks .............................................................................................................................. Art, Biography, Business, Chick Lit, Children's, Christian, Classics, Comics, Contemporary, Cookbooks, Manga, Memoir, Music, Mystery, Non Fiction, Paranormal, Philosophy, Poetry, Psychology, Religion, Romance, Science, Science Fiction, Self Help, Suspense, Spirituality, Sports, Thriller, Travel, Young Adult, Crime, Ebooks, Fantasy, Fiction, Graphic Novels, Historical Fiction, History, Horror, Humor And Comedy, ......................................................................................................................... ......................................................................................................................... .....BEST SELLER FOR EBOOK RECOMMEND............................................................. ......................................................................................................................... Blowout: Corrupted Democracy, Rogue State Russia, and the Richest, Most Destructive Industry on Earth,-- The Ride of a Lifetime: Lessons Learned from 15 Years as CEO of the Walt Disney Company,-- Call Sign Chaos: Learning to Lead,-- StrengthsFinder 2.0,-- Stillness Is the Key,-- She Said: Breaking the Sexual Harassment Story THIS Helped Ignite a Movement,-- Atomic Habits: An Easy &amp; Proven Way to Build Good Habits &amp; Break Bad Ones,-- Everything Is Figureoutable,-- What It Takes: Lessons in the Pursuit of Excellence,-- Rich Dad Poor Dad: What the Rich Teach Their Kids About Money THIS the Poor and Middle Class Do Not!,-- The Total Money Makeover: Classic Edition: A Proven Plan for Financial Fitness,-- Shut Up and Listen!: Hard Business Truths THIS Will Help You Succeed, ......................................................................................................................... .........................................................................................................................
       Répondre 
    Voulez-vous vraiment ?  Oui  Non
    Votre message apparaîtra ici
  • DOWNLOAD THIS BOOKS INTO AVAILABLE FORMAT (2019 Update) ......................................................................................................................... ......................................................................................................................... Download Full PDF EBOOK here { https://soo.gd/irt2 } ......................................................................................................................... Download Full EPUB Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download Full doc Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download PDF EBOOK here { https://soo.gd/irt2 } ......................................................................................................................... Download EPUB Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download doc Ebook here { https://soo.gd/irt2 } ......................................................................................................................... ......................................................................................................................... ................................................................................................................................... eBook is an electronic version of a traditional print book THIS can be read by using a personal computer or by using an eBook reader. (An eBook reader can be a software application for use on a computer such as Microsoft's free Reader application, or a book-sized computer THIS is used solely as a reading device such as Nuvomedia's Rocket eBook.) Users can purchase an eBook on diskette or CD, but the most popular method of getting an eBook is to purchase a downloadable file of the eBook (or other reading material) from a Web site (such as Barnes and Noble) to be read from the user's computer or reading device. Generally, an eBook can be downloaded in five minutes or less ......................................................................................................................... .............. Browse by Genre Available eBooks .............................................................................................................................. Art, Biography, Business, Chick Lit, Children's, Christian, Classics, Comics, Contemporary, Cookbooks, Manga, Memoir, Music, Mystery, Non Fiction, Paranormal, Philosophy, Poetry, Psychology, Religion, Romance, Science, Science Fiction, Self Help, Suspense, Spirituality, Sports, Thriller, Travel, Young Adult, Crime, Ebooks, Fantasy, Fiction, Graphic Novels, Historical Fiction, History, Horror, Humor And Comedy, ......................................................................................................................... ......................................................................................................................... .....BEST SELLER FOR EBOOK RECOMMEND............................................................. ......................................................................................................................... Blowout: Corrupted Democracy, Rogue State Russia, and the Richest, Most Destructive Industry on Earth,-- The Ride of a Lifetime: Lessons Learned from 15 Years as CEO of the Walt Disney Company,-- Call Sign Chaos: Learning to Lead,-- StrengthsFinder 2.0,-- Stillness Is the Key,-- She Said: Breaking the Sexual Harassment Story THIS Helped Ignite a Movement,-- Atomic Habits: An Easy &amp; Proven Way to Build Good Habits &amp; Break Bad Ones,-- Everything Is Figureoutable,-- What It Takes: Lessons in the Pursuit of Excellence,-- Rich Dad Poor Dad: What the Rich Teach Their Kids About Money THIS the Poor and Middle Class Do Not!,-- The Total Money Makeover: Classic Edition: A Proven Plan for Financial Fitness,-- Shut Up and Listen!: Hard Business Truths THIS Will Help You Succeed, ......................................................................................................................... .........................................................................................................................
       Répondre 
    Voulez-vous vraiment ?  Oui  Non
    Votre message apparaîtra ici
  • DOWNLOAD THIS BOOKS INTO AVAILABLE FORMAT (2019 Update) ......................................................................................................................... ......................................................................................................................... Download Full PDF EBOOK here { https://soo.gd/irt2 } ......................................................................................................................... Download Full EPUB Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download Full doc Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download PDF EBOOK here { https://soo.gd/irt2 } ......................................................................................................................... Download EPUB Ebook here { https://soo.gd/irt2 } ......................................................................................................................... Download doc Ebook here { https://soo.gd/irt2 } ......................................................................................................................... ......................................................................................................................... ................................................................................................................................... eBook is an electronic version of a traditional print book THIS can be read by using a personal computer or by using an eBook reader. (An eBook reader can be a software application for use on a computer such as Microsoft's free Reader application, or a book-sized computer THIS is used solely as a reading device such as Nuvomedia's Rocket eBook.) Users can purchase an eBook on diskette or CD, but the most popular method of getting an eBook is to purchase a downloadable file of the eBook (or other reading material) from a Web site (such as Barnes and Noble) to be read from the user's computer or reading device. Generally, an eBook can be downloaded in five minutes or less ......................................................................................................................... .............. Browse by Genre Available eBooks .............................................................................................................................. Art, Biography, Business, Chick Lit, Children's, Christian, Classics, Comics, Contemporary, Cookbooks, Manga, Memoir, Music, Mystery, Non Fiction, Paranormal, Philosophy, Poetry, Psychology, Religion, Romance, Science, Science Fiction, Self Help, Suspense, Spirituality, Sports, Thriller, Travel, Young Adult, Crime, Ebooks, Fantasy, Fiction, Graphic Novels, Historical Fiction, History, Horror, Humor And Comedy, ......................................................................................................................... ......................................................................................................................... .....BEST SELLER FOR EBOOK RECOMMEND............................................................. ......................................................................................................................... Blowout: Corrupted Democracy, Rogue State Russia, and the Richest, Most Destructive Industry on Earth,-- The Ride of a Lifetime: Lessons Learned from 15 Years as CEO of the Walt Disney Company,-- Call Sign Chaos: Learning to Lead,-- StrengthsFinder 2.0,-- Stillness Is the Key,-- She Said: Breaking the Sexual Harassment Story THIS Helped Ignite a Movement,-- Atomic Habits: An Easy &amp; Proven Way to Build Good Habits &amp; Break Bad Ones,-- Everything Is Figureoutable,-- What It Takes: Lessons in the Pursuit of Excellence,-- Rich Dad Poor Dad: What the Rich Teach Their Kids About Money THIS the Poor and Middle Class Do Not!,-- The Total Money Makeover: Classic Edition: A Proven Plan for Financial Fitness,-- Shut Up and Listen!: Hard Business Truths THIS Will Help You Succeed, ......................................................................................................................... .........................................................................................................................
       Répondre 
    Voulez-vous vraiment ?  Oui  Non
    Votre message apparaîtra ici
  • Soyez le premier à aimer ceci

Infosecure 2011 owasp y cumplimiento normativo pci-dss y pa-dss

  1. 1. OWASP y el cumplimiento normativo: PCI-DSS y PA-DSS Juan Jose Rider Jimenez OWASP member Spain Chapter [email_address] 13/09/2011
  2. 2. Algo sobre mi <ul><li>Profesional desde 2001. </li></ul><ul><li>Experto en e-commerce: Verified By VISA y SecureCode. </li></ul><ul><li>OWASP member desde 2010. Miembro del Spain Chapter. </li></ul><ul><li>Twitter: @jjriderWul4 </li></ul><ul><li>Email: [email_address] </li></ul>
  3. 3. PCI-DSS y PA-DSS <ul><li>PCI-DSS es un estándar de obligado cumplimiento en la industria de los medios de pago. Es de obligado cumplimiento para comercios, entidades y proveedores de servicio. </li></ul><ul><li>PA-DSS está dirigido a las empresas desarrolladores de software y PCI-DSS a las instituciones (comercios, entidades y proveedores de servicios) </li></ul><ul><li>Su misión es proteger los datos de tarjetas de posibles usos malintencionados(robos, etc) </li></ul><ul><li>Ambas normativas están reguladas/definidas por el PCI SSC (Payment Card Industry – Security Standards Council) </li></ul>
  4. 4. ¿Qué es PCI-DSS y PA-DSS? (II) PCI SSC Payment Card Industry Security Standards Council PA DSS Payment Application Data Security Standard PCI DSS Payment Card Industry Data Security Standards PCI PTS PIN Transaction Security Merchant Compliance Validation Acquirer Card Brands
  5. 5. Los 12 requerimientos de PCI-DSS Categoría Requerimiento Construir y Mantener una red segura 1)Instalar y mantener una configuración de firewall para proteger datos de tarjetas 2) No usar passwords ni configuraciones de seguridad por defecto Proteger Datos de Tarjetas 3)Proteger los almacenes de datos de tarjetas 4) Encriptar transmisiones de datos de tarjetas que se produzcan en redes públicas. Programa de gestión de vulnerabilidades 5) Usar y actualizar regularmente un software antivirus 6) Desarrollar y mantener sistemas seguros y aplicaciones Implementar medidas de control de acceso 7) Restringir el acceso a los datos sensibles en base al ‘need-to-know’ 8) Asignar un único identificador a cada individuo con acceso 9) Restringir el acceso físico a los datos Monitorizar y probar regularmente las redes 10) Auditar y monitorizar todos los accesos a la red y a los datos sensibles 11) Testar regularmente sistemas y procesos Política de Seguridad de la Información 12) Mantener una política que tenga en cuenta la seguridad de la información
  6. 6. Los 14 requerimientos de PA-DSS Requirement 1 Do not retain full magnetic stripe, card validation code or value (CAV2, CID, CVC2, CVV2), or PIN block data Requirement 2 Protect stored cardholder data Requirement 3 Provide secure authentication features Requirement 4 Log payment application activity Requirement 5 Develop secure payment applications (5.2 - OWASP Guide, SANS CWE Top 25, CERT Secure Coding) Requirement 6 Protect wireless transmissions Requirement 7 Test payment applications to address vulnerabilities Requirement 8 Facilitate secure network implementation Requirement 9 Cardholder data must never be stored on a server connected to the Internet Requirement 10 Facilitate secure remote software updates Requirement 11 Facilitate secure remote access to payment application Requirement 12 Encrypt sensitive traffic over public networks Requirement 13 Encrypt all non-console administrative access Requirement 14 Maintain instructional documentation and training programs for customers, resellers, and integrators
  7. 7. ¿Qué puede aportar OWASP al cumplimiento de PCI-DSS y PA-DSS? <ul><li>Lo obvio : En la normativa PCI-DSS sólo se nombra a OWASP en el cumplimiento del requerimiento 6.5 : “Develop applications based on secure coding guidelines” (PA-DSS Req.5.2) </li></ul><ul><li> “ OWASP Development Guide” </li></ul><ul><ul><li>Secure coding principles </li></ul></ul><ul><ul><li>Threat Risk Modeling </li></ul></ul><ul><ul><li>Phishing, Web Services, Authentication, Session management, Cryptography, etc.. </li></ul></ul><ul><li> “ OWASP Top 10” </li></ul>
  8. 8. ¿Qué puede aportar OWASP al cumplimiento de PCI-DSS y PA-DSS? <ul><li>Req 6.2: “Risk Ranking” (PA-DSS Req.7.1) </li></ul><ul><li> “ OWASP Development Guide” </li></ul><ul><li> “ OWASP Testing Guide” </li></ul><ul><li>Req 6.3.2: “Review of code”(PA-DSS Req.5.1.4) </li></ul><ul><li> “ OWASP Code Review Guide” </li></ul><ul><ul><li>Authentication, Authorization, Session management, etc </li></ul></ul><ul><ul><li>OWASP Code review Top 9 </li></ul></ul><ul><li> Herramientas: CodeCrawler, Orizon, LAPSE, YASCA, etc </li></ul>
  9. 9. ¿Qué puede aportar OWASP al cumplimiento de PCI-DSS y PA-DSS? <ul><li>Req 11.2: “ Run internal and external network vulnerability scans ” </li></ul><ul><li> Herramientas: OWASP ZAP, WebScarab </li></ul><ul><li> “ OWASP Testing Guide” </li></ul><ul><li>Req 11.3: “Penetration Testing” </li></ul><ul><li> Herramientas: OWASP ZAP, WebScarab </li></ul><ul><li> “ OWASP Testing Guide” </li></ul><ul><li>Req 11.4: “IDS” </li></ul><ul><li> Herramientas: AppSensor </li></ul>
  10. 10. ¿Qué puede aportar OWASP al cumplimiento de PCI-DSS y PA-DSS? <ul><li>Existen aportaciones que no son tan obvias. </li></ul><ul><li>Formación </li></ul><ul><ul><li>A/P: WebGoat, OWASP Top Ten. </li></ul></ul><ul><ul><li>Testers: Testing Guide, OWASP Live CD, ZAP, etc. </li></ul></ul><ul><ul><li>Jefes de Proyecto: Development Guide, ASVS </li></ul></ul><ul><ul><li>Arquitectos: ASVS, SAMM </li></ul></ul><ul><ul><li>Managers y Ejecutivos: </li></ul></ul><ul><ul><li>Para todos: www.owaspa.org </li></ul></ul><ul><ul><ul><li>CBT ( https://www.owasp.org/index.php/Category:OWASP_CBT_Project ) </li></ul></ul></ul><ul><li>APIs que mejoran la calidad/seguridad: </li></ul><ul><ul><li>ESAPI, AntiSamy, etc </li></ul></ul><ul><li>Ciclo de Vida: CLASP </li></ul>
  11. 11. ¿Qué puede aportar OWASP al cumplimiento de PCI-DSS y PA-DSS? <ul><li>Y algunas más: </li></ul><ul><li>Seguridad a todos los niveles: SAMM </li></ul><ul><ul><li>Entra a todos los niveles: Política, Métricas, Requerimientos, Diseño, Despliegue seguro, etc.. </li></ul></ul>
  12. 12. ¿Qué puede aportar OWASP al cumplimiento de PCI-DSS y PA-DSS? <ul><li>Finalmente, otras iniciativas: </li></ul><ul><li>OWASP PCI Project </li></ul><ul><ul><li>https://www.owasp.org/index.php/Key_Project_Information:OWASP_PCI_Project . </li></ul></ul><ul><li>OWASP: Congresos, conferencias, podcasts, mailing lists, etc… </li></ul><ul><li>Colaboración en proyectos nuevos: OWASP DNIe ( https://www.owasp.org/index.php/Spain/Projects/DNIe ), etc </li></ul><ul><ul><li>Hacer la encuesta!!!: http://www.surveymonkey.com/s/3SP5Z88 </li></ul></ul>
  13. 13. Conclusiones <ul><li>El cumplimiento del estándar PCI-DSS y PA-DSS no se puede alcanzar totalmente usando exclusivamente contenidos de OWASP, sin embargo, sí que se puede facilitar el cumplimiento en gran medida. </li></ul><ul><li>Facilita y mejora el desarrollo, la calidad del software y el conocimiento de todas las partes: desarrolladores, testadores, responsables de sistemas, etc. </li></ul>
  14. 14. ¿Preguntas?

×