owasp security standards

. July 8, the owasp Asia Summit held in Shenzhen, 2017 is the first year of the official implementation of the cyber Security Law in China and the first year of the "cyber-space security strategy". This summit, with the theme of "safe and orderly construction of the global global Village", invited many top security lea

The authoritative security organization Owasp has just updated top 10:https://www.owasp.org/index.php/top_10_2013-top_10 ten security vulnerabilities: 1. injection, including SQL, operating system, and LDAP injection. 2. Problematic identification of session management. 3. Cross-site scripting attacks (XSS). 4. Unsafe direct object references. 5.

The Fuzzer available scenarios for the Owasp Zap Security Audit tool are as follows:One, SQL injection and XSS attacks, etc.1. Select the field value to check in the request, right click-fuzzy2. Select the file Fuzzer function (including SQL injection, XSS attack, etc.) to check the related security issues.3, the following is the results of SQL injection inspecti

successfully won. IT should be pointed out that the first horizontal comparison test of Web security gateway organized by Renmin University in China is of great significance and not only suits the General Direction of mainstream IT applications in China, it also focuses on the latest technologies in the security industry. In this process, the majority of enterprise users need to understand two points: Firs

impact.However, this situation with the introduction of relevant laws and regulations, as well as some industry leaders and representatives of the appeal of the gradual improvement, some of the responsibility and obligation of the platform has been in the pattern innovation, wind control management and other aspects of the positive exploration and initiatives, to a certain extent for the industry's development has brought positive demonstration effect, means a new milestone in the development o

prevent malicious users from causing the application to perform unplanned tasks, such as starting arbitrary SQL queries, embedding JavaScript code that will be executed on the client, running various operating system commands, and so on. The concrete implementation can refer to the combination of 1. SQL injection file writes with 3. Cross-site request forgery resolution;16. Insufficient account blockadeWorkaround: To limit the number of user login errors, and in a certain period of time do not

prevent malicious users from causing the application to perform unplanned tasks, such as starting arbitrary SQL queries, embedding JavaScript code that will be executed on the client, running various operating system commands, and so on. The concrete implementation can refer to the combination of 1. SQL injection file writes with 3. Cross-site request forgery resolution;16. Insufficient account blockadeWorkaround: To limit the number of user login errors, and in a certain period of time do not