Blog

8 Feb 2017

OWASP Saum 10 Critical Cheeb Tsam rau Daim Ntawv Thov Kev Ruaj Ntseg

/
Muab tso rau By

OWASP - lossis Open Web Application Security Project - yog ib pawg neeg tsis muaj txiaj ntsig zoo uas yog cov kev coj ua zoo tshaj plaws thiab cov cai rau kev npaj, tsim, tsim, thiab khaws cov kev siv web site zoo. OWASP Saum 10 yog ib qhov project uas tam sim no, tso tawm ib qho teeb meem ntawm 10 khoom rau sab nraud, nrog rau cov khoom siv hauv kev lag luam ua ke kom paub meej tias cov kev siv web site yog qhov ruaj ntseg ntawm qhov kev pib ntxov tshaj plaws.

OWASP Top Ten Proactive Controls 2016 tawm tswv yim tawm tsam ntawm 10 Critical Cheeb Tsam rau Daim Ntawv Thov Kev Ruaj Ntseg uas yuav tsum tau xav txog rau txhua qhov kev txhim kho cov khoom. Cov kev siv programming uas tsis ruaj ntseg yog tsis muaj teeb meem rau sab nraud. Kev ua kom muaj kev ruaj ntseg hauv web site yog qhov kev xav tau rau qee cov khoom tsim tawm, thiab pab pawg neeg OWASP pab cov neeg tsim khoom los ntawm lwm tus neeg, yog li lawv yuav tsum paub txog cov teeb meem loj tshaj plaws thiab muaj peev xwm.

Ntawm no yog qhov kev txheeb cais tawm los ntawm kev thov qhov tseem ceeb ntawm ib feem ntawm cov pointers uas yuav tsum tau muab xam los ntawm engineers thaum ua daim ntawv thov:

  1. Intrusion Detection Systems thiab Logging
  2. Tshawb xyuas kev ruaj ntseg li ntxov thiab ntau li ntau tau
  3. Kev paub tseeb ntawm txhua Inputs
  4. Parameterize Queries
  5. Kev Tswj Cov Kev Siv
  6. Cov ntaub ntawv Encoding
  7. Cov Ntaub Ntawv Tiv Thaiv
  8. Kev siv cov cuab yeej tseeb thiab kev tswj tus kheej
  9. Siv Cov Ntawv Cej Luaj Ruaj Ntseg thiab Cov Nruab Nrab
  10. Zam thiab yuam kev

Xav txog txhua yam ntawm cov contemplations, cov kws tsim txuj ci web site yuav tsum ua cov kev ntsuam xyuas ceev faj thiab tom qab ntxiv mus txuas ntxiv rau lawv cov khoom siv khoom. OWASP Daim Ntawv Pom Zoo los ntawm ib qho kev npaj ua kom pom tseeb tuaj yeem pom txoj kev rau engineers ua qhov kev xaiv zoo tshaj plaws los lav txog kev ruaj ntseg ntawm lawv cov khoom muag

Sau ntawv cia Ncua

GTranslate Please upgrade your plan for SSL support!
GTranslate Your license is inactive or expired, please subscribe again!