Web Application Security - owasp top 10 vulnerabilities
summary
Covers practical web application security using the OWASP ecosystem, including OWASP ASVS and the OWASP Testing Guide, and contrasts functional vs security testing. Describes a secure-by-design strategy tied to the SDLC (mentioning Microsoft’s secure development lifecycle), test types (black/white/grey box), common tools like Nmap/Zenmap, Burp Suite and Cookie Manager+, and a testing workflow from recon through exploitation with possible demos of injection and cross-site scripting.
AI-written summary · about
chapters (9)
- 0:00Start
- 0:52Securing your web application
- 1:47Strategy: Securing at the Source
- 2:39Microsoft secure development lifecycle
- 3:20OWASP (Open Web Application Security Project)
- 4:47OWASP ASVS
- 6:01Application Security Verification Levels
- 8:44OWASP Testing Guide
- 9:13testing tool
related talks
48mWeb Application Security
43mFrom OWASP top 10 to Secure Applications
01h 30mCommon Webapp Vulnerabilities and What to Do About Them
45mOWASP for Developers
37mDeploying Security Testing Practice in Your Team and Company
01h 00mWeb Application Security Risks: A Look at OWASP Top Ten 2017
52mAppSec: From the OWASP Top Ten(s) to the OWASP ASVS
46mHow to perform security testing of a Web application