owasp

Whitepapers

Defending Against Web Vulnerabilities and Cross-Site Scripting

May 1, 2012 12:00am PDT

Researchers have devised multiple solutions to cross-site scripting, but vulnerabilities persists in many Web applications due to developer's lack of expertise in the problem identification and...

Provided by: Journal of Global Research in Computer Science (JGRCS)

White Papers

CSRF Vulnerabilities and Defensive Techniques

February 1, 2012 12:00am PST

Web applications are now part of day to day life due to their user friendly environment as well as advancement of technology to provide internet facilities, but these web applications brought lot...

Provided by: mecs-press

Whitepapers

The Right Tool For The Right Job: An Application Security Tool Report Card

October 25, 2011 12:00am PDT

A series of tools are evaluated and compared in terms of how they address critical vulnerabilities, beginning with the Top 10 Vulnerabilities identified by the Open Web Application Security...

Provided by: IBM

Discussion Threads

Secure coding guidelines: Are they the answer to buggy software?

January 3, 2011 1:28pm PST

Secure coding guidelines: Are they the answer to buggy software? article root Will a checklist help promote secure code? OWASP hopes so. Read about their project to reduce, even eliminate...

28 Started by Michael Kassner  |  Latest comment by apotheon

Blog Post

Secure coding guidelines: Are they the answer to buggy software?

January 3, 2011 12:41pm PST

People are using flawed software. And, the bad guys love it. A recently formed group called the Open Web Application Security Project is working to improve secure coding, but is it practical?

28 Latest comment by apotheon

Software

OWASP OWASP 1.0 (iOS)

January 7, 2010 12:00am PST

This app is by OWASP.org*******This app was built through AppMakrVisit our website at www.AppMakr.com for more information

Provided by: PointAbout

White Papers

Safety in the Cloud(s): 'Vaporizing' the Web Application Firewall to Secure Cloud Computing

July 22, 2009 12:00am PDT

Cloud computing was not designed for security, although organizations such as Cloud Security Alliance (CSA) and Open Web Application Security Project (OWASP) are making great strides in helping...

Provided by: art of defence

White Papers

Security Pitfalls in Stripes Web Applications

May 11, 2009 12:00am PDT

The Stripes framework (www.stripesframework.org) is a Java web presentation framework that aims to ease the process of creating Java based web applications, by favouring defaults over verbose...

Provided by: Corsaire

White Papers

WAF Virtual Patching Challenge: Securing WebGoat With ModSecurity

January 20, 2009 12:00am PST

This paper presents the technical details behind a virtual patch, which is a critical protection function provided by Web Application Firewalls (WAFs). A virtual patch is a powerful, agile...

Provided by: Breach Security

Case Studies

Honeywell Protects Against Web Threats, Achieves Significant Cost Savings Using Breach Security WebDefend

January 13, 2009 12:00am PST

Global companies like Honeywell are often targeted at the web application layer. As new online threats emerged, Honeywell sought solutions to protect its extensive web layer. Specifically,...

Provided by: Breach Security

Webcasts

Outsmarting Tomorrow's Hackers Today

January 1, 2009 12:00am PST

Network IDS/IPS and first-generation Web Application Firewalls (WAFs) don't protect against today's sophisticated web application threats, such as cross-site scripting, injection flaws and other...

Provided by: Breach Security

Webcasts

WebDefend and the OWASP Top Ten

January 1, 2009 12:00am PST

With all the web application attacks and vulnerabilities surfacing - it is hard to know where to focus the security efforts. Luckily, OWASP produces the OWASP Top Ten list to raise awareness of...

Provided by: Breach Security

White Papers

Web Application Security: Managing Cross-Site Scripting, the Number One Item on OWASP's Top Ten List

January 1, 2009 12:00am PST

The Open Web Application Security Project (OWASP) is, by its own definition, "a worldwide free and open community focused on improving the security of application software. Its mission is to make...

Provided by: Rapid7

Blog Post

How do you keep your sys admins from stealing company secrets?

September 1, 2008 4:00am PDT

Administrators of your network resources are valuable assets, assets that keep services flowing to your business users. But proper oversight of these critical employees, and their network rights...

51 Latest comment by The 'G-Man.'

White Papers

Best Practices: Use of Web Application Firewalls

May 1, 2008 12:00am PDT

Web applications of all kinds, whether online shops or partner portals, have in recent years increasingly become the target of hacker attacks. The attackers are using methods which are...

Provided by: OWASP

Q&A

Training on OWASP top 10 vulnerabilities- for developers

July 26, 2007 12:21pm PDT

Training on OWASP top 10 vulnerabilities- for developers would appreciate recommendations (and contact info) for effective and resonably priced training for SW dev. team that addresses the OWASP...

2 Started by dkling@...  |  Latest comment by chuck@...

Blog Post

Use the revised OWASP Top Ten to secure your Web applications -- Part 8

June 13, 2007 10:50am PDT

This blog entry is also available as a TechRepublic download in PDF form. In this final installment of the revised Open Web Application Security Project (OWASP) Top 10 series, the final three...

Downloads

Use the revised OWASP Top Ten to secure your Web applications -- Part 8

June 13, 2007 12:00am PDT

In this final installment in the revised Open Web Application Security Project (OWASP) Top 10 series, the final three vulnerabilities are explored -- insecure cryptographic storage, insecure...

Provided by: Tom Olzak

Discussion Threads

Use the revised OWASP Top Ten to secure your Web applications -- Part 4

June 8, 2007 12:23am PDT

Use the revised OWASP Top Ten to secure your Web applications -- Part 4 article root Consider using constants ... I like this series of articles regarding the OWASP Top 10 2007. I have one...

1 Started by achpostma@...  | 

Blog Post

Use the revised OWASP Top Ten to secure your Web applications -- part 7

June 6, 2007 12:33pm PDT

This article is also available as a TechRepublic download. The seventh installment in the 2007 OWASP Top 10 series takes a look at broken authentication and session management...