Security Content Automation Protocol and Web Application Security
Report
Michael SmithFollow
Aug. 7, 2009•0 likes•1,896 views
5 likes
Be the first to like this
Show More
views
Total views
0
On Slideshare
0
From embeds
0
Number of embeds
0
Security Content Automation Protocol and Web Application Security
Aug. 7, 2009•0 likes•1,896 views
5 likes
Be the first to like this
Show More
views
Total views
0
On Slideshare
0
From embeds
0
Number of embeds
0
Download to read offline
Report
Technology
News & Politics
A presentation on SCAP I delivered at the August 5th OWASP DC Chapter.
Michael SmithFollow
Recommended
Top Security Threats for .NET DevelopersMikhail Shcherbakov
Practice of AppSec .NETMikhail Shcherbakov
Sergey Kochergan - OWASP Top 10 Web Application Vulnerabilities Braindev Kyiv
Owasp lapsen|u - The Open Security Community
Pentesting Rest API's by :- Gaurang BhatnagarOWASP Delhi
Implementing application security using the .net frameworkLalit Kale
Security Content Automation Protocol and Web Application Security
- The Security Content Automation Protocol and Web Application Security Automatisch, Praktisch, Gut!
- Scenario: Patch, VM, and Audit
- Scenario: Configuration Management
- Scenario: Vulnerability Research
- The Final Message
Editor's Notes
- The following presentation contains insights and opinions gathered from over 30 years of combined experience in the government INFOSEC space. It’s interspersed with some humor – security presentations can be pretty dry without it. We hope that this presentation will provide you with the impetus to reemphasize security within your organization, and feel good about doing so. The subtitle means “Automatic, Practical, Good!” and is a play on the Ritter Sport tagline “Quadratisch, Praktish, Gut!” which translates as “Square, Practical, Good!” http://www.ritter-sport.de/
- Mike’s blog is at http://www.guerilla-ciso.com/ Mike teaches for Potomac Forum http://www.potomacforum.org/ Contact information for Mike is at the end of this presentation.
- OK, it could be that SCAP and automation replaces all of us with tool monkeys. This impact remains to be seen.
- WASC Threat Classification Working Group http://projects.webappsec.org/Threat-Classification-Working CWE http://cwe.mitre.org/
- Picture is “lifted” from Encyclopedia Dramatica and used under Fair Use. http://www.encyclopediadramatica.com/Image:God-kills-kitten.jpg http://www.encyclopediadramatica.com/Encyclopedia_Dramatica:General_disclaimer#Fair_Use_and_Copyrighted_Materials
- If you would like us to speak for your event or group, please ask. If you would like to learn more and to keep up-to-date on groundbreaking Government security news, subscribe to the guerilla-ciso blog feed. Presentation released under the Creative Commons Attribution-NonCommercial-ShareAlike 3.0 License. More information available at http://creativecommons.org/licenses/by-nc-sa/3.0/