OWASPAppSecEU2006_CanTestingToolsReallyFindOWASPTop10

Can (Automated) Testing Tools Really Find the OWASP Top 10? Erwin Geirnaert Partner & Co-founder, ZI O N SECURITY [email_address] +32478289466

Agenda ,[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Introduction ,[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Existing studies ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Testing ,[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Testing ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Testing ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Automated Tools – Open-source ,[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Automated Tools - Commercial ,[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

OWASP Top Ten Most Critical Web Application Security Vulnerabilities ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Some questions ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A1. Unvalidated Input ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A1. Unvalidated Input ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A2. Broken Access Controls ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A2. Broken Access Controls ,[object Object],OWASP AppSec Europe 2006

A3. Broken Authentication and Session Management ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A4. Cross Site Scripting Flaws ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A5. Buffer Overflows ,[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A6. Injection Flaws ,[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A7. Improper Error Handling ,[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A8. Insecure Storage ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A9. Denial of Service ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A10. Insecure Configuration Management ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Conclusions ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

OWASPAppSecEU2006_CanTestingToolsReallyFindOWASPTop10

Recomendados

Recomendados

Más contenido relacionado

La actualidad más candente

La actualidad más candente (20)

Destacado

Destacado (9)

Similar a OWASPAppSecEU2006_CanTestingToolsReallyFindOWASPTop10

Similar a OWASPAppSecEU2006_CanTestingToolsReallyFindOWASPTop10 (20)

Más de Juan Golden Tiger

Más de Juan Golden Tiger (8)

Último

Último (20)

OWASPAppSecEU2006_CanTestingToolsReallyFindOWASPTop10