Automatic security testin g tools for web based system
This presentation is the property of its rightful owner.
Sponsored Links
1 / 12

Automatic security testin g tools for web-based system PowerPoint PPT Presentation


  • 85 Views
  • Uploaded on
  • Presentation posted in: General

Automatic security testin g tools for web-based system. CS577b Individual Research Shi- Xuan Zeng 04/23/2012. Outline. Introduce security testing Web application/system security testing Web application/system security risks Security testing tools comparison Summary.

Download Presentation

Automatic security testin g tools for web-based system

An Image/Link below is provided (as is) to download presentation

Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.


- - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - -

Presentation Transcript


Automatic security testin g tools for web based system

Automatic security testingtools for web-based system

CS577b Individual Research

Shi-XuanZeng

04/23/2012


Outline

Outline

  • Introduce security testing

  • Web application/system security testing

  • Web application/system security risks

  • Security testing tools comparison

  • Summary


What is security testing

What is security testing?

  • Providing evidence

  • Fulfilling requirements

  • Fundamental processes

    • Boundary values

    • Equivalence classes

    • Security classes

* Web Security Testing Cookbook (O’Reilly)


Web application security testing

Web application security testing

  • Functional testing V.S. Security testing

  • Use variety tools manually and automatically

  • Simulate and stimulate activities

  • Goal

    • Produce repeatable and consistent tests

* Web Security Testing Cookbook (O’Reilly)


Web application security risks

Web application security risks

*OWASP Top Ten Project (2010)


Top 10 web application security risks

Top 10 Web Application Security Risks

*OWASP Top Ten Project (2010)


Security testing tools comparison 1

Security testing tools comparison 1


Security testing tools comparison 2

Security testing tools comparison 2


Summary

Summary

  • Security testing provides evidence and fulfill requirements.

  • The goal is to produce repeatable and consistent tests.

  • Beware of top 10 web application security risks.

  • Choose free, easy used, and good traceability testing tools.

    • Suggest w3af and N-Stalker Security Scanner Free Edition.


Reference

Reference

  • Web Security Testing Cookbook

    • PacoHope, Ben Walther; O’Reilly Media Inc.; Oct 28 2008

  • OWASP Top Ten Project

    • https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project

    • http://owasptop10.googlecode.com/files/OWASP%20Top%2010%20-%202010.pdf

  • 10+ Free Web Application Security Testing Tools

    • http://www.webresourcesdepot.com/10-free-web-application-security-testing-tools/


Questions

Questions ?


Thank you

Thank You!!


  • Login