The document discusses web security threats and statistics from 2010, finding a 93% increase in web attacks, 1+ million bots, and 260+ million new malware. It also notes that 84% of websites are susceptible to one of the top 30 vulnerabilities. The document promotes the OWASP organization as helping to defend against these threats through various open source projects, guides, and a discussion group.

1. The Chaos
Report
Web Security Version
Eduardo Bohrer - @nbluis
eduardobohrer.com.br

2. Você tem tido o devido cuidado?

3. O nosso inimigo está armado e parapetado!

4. Os números de 2010

5. Os números de 2010
93% mais ataques web
15~20 milhões de ataques por dia
1+ milhão bots
42% mais ataques mobile
260+ milhões novos malwares
Brasil 4 colocado em atividade maliciosa
Fonte: Symantec Security Threat Report Volume 16

7. 6

8. 30 vulnerabilidades mais recorrentes.
84% websites do mundo são susceptíveis.
Fonte: Whitehat website security statistics report 2011.
6

9. 30 vulnerabilidades
84% websites do mundo
Fonte: Whitehat website security statistics report 2011.
6

11. Quem poderá nos defender?

12. Sem fins lucrativos

13. Diversos apoiadores

14. Muitos projetos e material de estudo

15. Muitos projetos e material de estudo
OWASP Top 10
OWASP Testing Guide
ESAPI
Web Goat
WebScarab
OWASP Development Guide

16. Grupo de discussão;
Organização de eventos;
Fez a organização do AppSec Latin America 2011.

18. Referencias
http://www.symantec.com/business/threatreport/
https://www.whitehatsec.com/assets/WPstats_winter11_11th.pdf
https://www.owasp.org/index.php/Main_Page
https://www.owasp.org/index.php/Category:OWASP_Project
https://www.owasp.org/index.php/Porto_Alegre
https://www.owasp.org/index.php/Category:OWASP_WebScarab_Project
https://www.owasp.org/index.php/Category:OWASP_Guide_Project
https://www.owasp.org/index.php/Category:OWASP_Testing_Project
https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project
https://www.owasp.org/index.php/Category:OWASP_WebGoat_Project
https://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API

19. Imagens
http://3.bp.blogspot.com/_Na4CPVnGtCk/TT8o77X2PxI/AAAAAAAAZ6c/xfQtTtZxM_w/s400/
apontando_o_dedo.jpg
http://1.bp.blogspot.com/_TBFrVWg5uOM/TF_9R41sK7I/AAAAAAAAB1U/elW_A1ning8/s1600/chapolin.jpg
http://www.yaboukir.com/wp-content/uploads/2011/09/owasp.png
https://www.owasp.org/images/c/c1/Owasp-poa-eng.png
http://wallpapergravity.com/wallpapers2/650/650912.jpg
http://i277.photobucket.com/albums/kk65/darinaldi/fuuu.png
http://fak3r.com/wp-content/blogs.dir/12/files/
challenge_accepted_Amazing_Feats_Fails_WIns_Lolz_and_A_Contest-s325x265-158648-535.png
http://osprofanos.com/wp-content/uploads/2011/02/