|
 |
Home > Topics > Security
 | | Show Some Respect to Cross-Site Scripting
James Bond, Mr. Creosote, and Don Corleone are just some of the personas Bryan Sullivan uses for security vulnerabilities. In this week's column, Bryan pays homage to the one vulnerability that gets the least respect, cross-site scripting (XSS), and calls it the Rodney Dangerfield of vulnerabilities. The problem is that XSS vulnerabilities are...Read On | | | Show All Articles & Papers | | |
|
|
|
|
|
|
|
The Top 10 hacks that will be launched against your code!
We often think we have developed and tested our applications for security, but in reality most application attacks take advantage of code defects that development and QA teams don't find. Hackers use various techniques leveraging code weaknesses, mis-configurations and web server vulnerabilities to obtain full access and steal your most sensitive information. Download this free white paper and learn how hackers develop and launch these application attacks. Download this complimentary white paper from HP.
From the Conference Archives
|
Software Security Testing: It's Not Just for Functions Anymore
By Gary McGraw
Security testing comes in two flavors and involves standard functional security testing (making sure that the security apparatus works as advertised), as well as risk-based testing (malicious testing that simulates attacks). Risk-based security testing should be driven by architectural risk analysis, abuse and misuse cases, and attack patterns. Unfortunately, first generation "application security" testing misses the mark on all fronts. That's because canned black-box probes—at best—can show you that things are broken, but say very little about the total security posture. Read Gary McGraw's presentation outline to learn what software security testing should look like, what kinds of knowledge testers must have to carry out such testing, and what the results may say about security.
|
|
|
|
|
|
|
|
|
|
|
Testing Training Courses
Software Testing Certification, Systematic Software Testing, Test Management, Mastering Test Design, Just-in-time Testing
Software Engineering Training
Mastering the Requirements Process, Requirements Modeling, Introduction to the Capability Maturity Model Integration, Business-Driven Software Measurement
Agile Software Development Training
Scrum Master Implementation Workshop, User Stories and Estimation in Agile Development, Design Patterns Explained, Practical Test-Driven Development
|
|
|
|
|
|
|
|
