Security Controls Assessment (SCA) WAF is the ultimate security solution for Detecting and Mitigating attacks against web application. With proper configuration and solid process most Web Application Attacks can be prevented. How good is your security ? Security Production Life Cycle (SPLC) WAF Security Testing Visibility – Feedback loop Plan 1Visibility – triggering test, sending…

Evaluations – Web Application Use cases TMA – Thread model assessment SDLC – software development life cycle SPLC – software Production life cycle Web Application Security Testing Testing Web Application Security ability to detect and prevent common attack vectors web application security testing use cases includes: before deploying a WAF – web app with out…

Brute force – Application brute force DDoS – Application layer DDoS, floods with distbueted Vul hunting – any vulenrabilties rlated. XSS, SQLi, Full CAV bundle – includes all the main families above.

Server Side Attacks – RequestHTTP Response SplittingInformation LeakageError messages dispalySession and cookiesCredential/Session PredictionNon-HttpOnly Session CookieUnsecured Session CookieInsufficient Session ExpirationSession FixationPersistent Session CookieServer Side Attacks – ResponseHTTP Response SplittingInformation LeakageError messages dispalySession and cookiesCredential/Session PredictionNon-HttpOnly Session CookieUnsecured Session CookieInsufficient Session ExpirationSession FixationPersistent Session CookieWeb Expolit – Request Directory TraversalPath TraversalBuffer OverflowSQL InjectionImproper Input HandlingServer MisconfigurationOS Command…

 Evaluations:Evaluation provide a way to measure the hard work you invest in securing your web application asses  by reflecting the security level that indicated the your ability to overcome security incidents 

Web applications are the ultimate free market to sell any goods, it is also open 24/7/365 for hacking The web application ecosystem  Web applications change the world and create the web application economy revolution where any one with a good idea can build a web application to provides products or services and monetize with end…