OWASPAppSecEU2006_CanTestingToolsReallyFindOWASPTop10

Can (Automated) Testing Tools Really Find the OWASP Top 10? Erwin Geirnaert Partner & Co-founder, ZI O N SECURITY [email_address] +32478289466

Agenda ,[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Introduction ,[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Existing studies ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Testing ,[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Testing ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Testing ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Automated Tools – Open-source ,[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Automated Tools - Commercial ,[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

OWASP Top Ten Most Critical Web Application Security Vulnerabilities ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Some questions ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A1. Unvalidated Input ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A1. Unvalidated Input ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A2. Broken Access Controls ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A2. Broken Access Controls ,[object Object],OWASP AppSec Europe 2006

A3. Broken Authentication and Session Management ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A4. Cross Site Scripting Flaws ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A5. Buffer Overflows ,[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A6. Injection Flaws ,[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A7. Improper Error Handling ,[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A8. Insecure Storage ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A9. Denial of Service ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

A10. Insecure Configuration Management ,[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

Conclusions ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],OWASP AppSec Europe 2006

OWASPAppSecEU2006_CanTestingToolsReallyFindOWASPTop10

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Viewers also liked

Viewers also liked (9)

Similar to OWASPAppSecEU2006_CanTestingToolsReallyFindOWASPTop10

Similar to OWASPAppSecEU2006_CanTestingToolsReallyFindOWASPTop10 (20)

More from Juan Golden Tiger

More from Juan Golden Tiger (8)

Recently uploaded

Recently uploaded (20)

OWASPAppSecEU2006_CanTestingToolsReallyFindOWASPTop10