Blog

8 Feb 2017

OWASP Top 10 Zvikamu Zvitsva Zvokuchengetedzwa Kwekushandisa

/
Posted By

OWASP - kana Open Web Application Security Project - iboka risingabatsiri rine simba rinogadzirisa tsika dzakanaka uye mitemo yekugadzirira, kugadzira, kusika, nekuchengetedza mapurogiramu ewebhu akachengeteka. OWASP Top 10 chirongwa icho nguva uye zvakare, inodzinga rundown yepamusoro pezvinhu zve 10 zvekugadzirisa nazvo, pakati pehupenyu hwehupenyu hwekufambira mberi kuti uone kuti web applications iri yakachengeteka kubva pakutanga kwekutanga.

IOWASP Top Ten Proactive Controls 2016 inoratidzira rundown ye Top Tops 10 Critical Areas for Applications Security iyo inofanirwa kufungidzirwa pamusoro pemushandi wekugadzirwa kwemagetsi. Zvirongwa zvekushanda zvisingachengetedzwe hazvibatsiri kune kurwisa kunze. Kushandisa webhutete yehutachiona ndiyo inonyanya kukosha kweimwe michina yekufambira mberi kwemiti, uye boka revanhu veOWASP rinobatsira vanjiniya kuti vawane kubva pane zvikanganiso zvevamwe, saka vanofanirwa kuziva nezvenjodzi dzinonyanya kukanganisa nekushaya simba.

Heino rwizi rwakagadzirwa nekukumbira kwekukosha kwechikamu chezvirevo zvinofanirwa kutaridzirwa nevanjiniya pavanenge vachiita zvikumbiro:

  1. Kuongororwa Kuona Maitiro uye Kurongedza
  2. Chengetedza kuchengeteka nekutanga uye kazhinji sezvazvinogona
  3. Kugutsikana kwezvinhu zvose
  4. Parameterize Queries
  5. Access Control
  6. Data Incoding
  7. Data Protection
  8. Kushandiswa kweKutendeseka uye Kuzivikanwa Kwekuzivikanwa
  9. Shandisa Chekuchengetedza Zvinyorwa Zvisungo uye Frameworks
  10. Kusiyanisa uye Kukanganisa Kubata

Tichifunga nezveumwe neumwe wekufungisisa uku, vashandisi vewebhu vanofanirwa kutungamirira kuongororwa kweuchenjeri uye shure kwekunge vachienderera mberi pakuvaka zvigadzirwa zvekushandisa. OWASP Certification kubva kunofungidzirwa kugadzirira kutarisa kunogona kuvhenekera nzira yevanjiniya kuita sarudzo yakanakisisa yekuvimbisa kuchengetedzwa kwezvigadzirwa zvavanoratidza

Leave a Reply

 
GTranslate Please upgrade your plan for SSL support!
GTranslate Your license is inactive or expired, please subscribe again!