Submit an article about your scariest tech experience—and the solution—and you’ll be automatically entered to win one of 4 fantastic tech gadgets.
Solved
I need to use OWASP top 10 functionality in my application in full fleged , can anybody guide me for that
Posted on 2013-01-03
i am implementing OWASP top 10 in my application, would be highly appreciable to give proper guideline to implement it.
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
2
2
6 Comments
you mean you want to build a secure application?
https://www.owasp.org/index.php/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide
https://www.owasp.org/index.php/Secure_Coding_Principles
https://www.owasp.org/index.php/Category:Cheatsheets
https://www.owasp.org/index.php/Esapi
https://www.owasp.org/index.php/ESAPI_Secure_Coding_Guideline
https://www.owasp.org/index.php/Category:OWASP_Guide_Project
https://www.owasp.org/index.php/OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide
https://www.owasp.org/index.php/Secure_Coding_Principles
https://www.owasp.org/index.php/Category:Cheatsheets
https://www.owasp.org/index.php/Esapi
https://www.owasp.org/index.php/ESAPI_Secure_Coding_Guideline
https://www.owasp.org/index.php/Category:OWASP_Guide_Project
Active today
OWASP cheatsheet is a good and quick glimpse on what you need but importantly decide on the programming language and explore the ESAPI which has a wide list of support for that. If you into .NET, suggest you catch this eBook
http://www.troyhunt.com/2011/12/free-ebook-owasp-top-10-for-net.html
This is another quick view of overall that I liked espe for sharing with other developer (single page for each vulnerability). Note also the reference that has further more links to tap on for testing as well
https://www.owasp.org/images/0/0f/OWASP_T10_-_2010_rc1.pdf
Coming back it is not just coding, testing is critical be it Static code and Dynamic test. Like this as quick check where you are in stages of testing.
http://resources.infosecinstitute.com/owasp-top-10-tools-and-tactics/
Of course the various scanner is available out there which I recommend you see this blog
http://sectooladdict.blogspot.sg/2012/07/2012-web-application-scanner-benchmark.html
http://www.troyhunt.com/2011/12/free-ebook-owasp-top-10-for-net.html
This is another quick view of overall that I liked espe for sharing with other developer (single page for each vulnerability). Note also the reference that has further more links to tap on for testing as well
https://www.owasp.org/images/0/0f/OWASP_T10_-_2010_rc1.pdf
Coming back it is not just coding, testing is critical be it Static code and Dynamic test. Like this as quick check where you are in stages of testing.
http://resources.infosecinstitute.com/owasp-top-10-tools-and-tactics/
Of course the various scanner is available out there which I recommend you see this blog
http://sectooladdict.blogspot.sg/2012/07/2012-web-application-scanner-benchmark.html
> http://resources.infosecinstitute.com/owasp-top-10-tools-and-tactics/
please don't read
*OWASP Top 10 Tools* and tactics
but
*OWASP Top 10*: (some) tools and tactics
these tools a just for beginners to get an idea what web application security is about; depending on the goal to achieve there're more and better tools (not meaning that the listed tools are insufficient, and no offence meant)
another incomplete list
https://www.owasp.org/index.php/Phoenix/Tools
anyway, thanks for the link
please don't read
*OWASP Top 10 Tools* and tactics
but
*OWASP Top 10*: (some) tools and tactics
these tools a just for beginners to get an idea what web application security is about; depending on the goal to achieve there're more and better tools (not meaning that the listed tools are insufficient, and no offence meant)
another incomplete list
https://www.owasp.org/index.php/Phoenix/Tools
anyway, thanks for the link
Featured Post
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
Originally, this post was published on Monitis Blog, you can check it
here
.
It goes without saying that technology has transformed society and the very nature of how we live, work, and communicate in ways that would’ve been incomprehensible 5 ye…
- Web Development
- Networking
- Web Development Software
- Monitis
- IT Administration
- *Automation, *DevOps
Although a lot of people devote their energy toward marketing for specific industries, there are some basic principles that can be applied to any sector imaginable. We’ll look at four steps to take and examine how those steps were put into action fo…
The viewer will learn how to count occurrences of each item in an array.
Learn how to create flexible layouts using relative units in CSS. New relative units added in CSS3 include vw(viewports width), vh(viewports height), vmin(minimum of viewports height and width), and vmax (maximum of viewports height and width).
Suggested Courses
Course of the Month8 days, 5 hours left to enroll
610 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.