Terminology
Brute force – Application brute force DDoS – Application layer DDoS, floods with distbueted Vul hunting – any vulenrabilties rlated. XSS, SQLi, Full CAV bundle – includes all the main…
Web Security evaluation
Evaluations:Evaluation provide a way to measure the hard work you invest in securing your web application asses by reflecting the security level that indicated the your ability to overcome security…
Part 0 intro – Web economy
Web applications are the ultimate free market to sell any goods, it is also open 24/7/365 for hacking The web application ecosystem Web applications change the world and create the…
Application Common Attack Vectors (A-CAV)
Server Side Attacks – RequestHTTP Response SplittingInformation LeakageError messages dispalySession and cookiesCredential/Session PredictionNon-HttpOnly Session CookieUnsecured Session CookieInsufficient Session ExpirationSession FixationPersistent Session CookieServer Side Attacks – ResponseHTTP Response SplittingInformation LeakageError messages…
WAF Vendor List
•According to Gartner, it is predicted that 80% of enterprises will have migrated away from traditional data centers and into the cloud within the next five years. With the ever-increasing…
WAF Workshop FAQ
WAF have many considerations throughout its life cycle. Getting your WAF to good enough security requires a solid review of Assents, Implementations and Response (AIR model) Workshops are small chunks…