Blog

8 Feb 2017

I-OWASP Iindawo eziphambili ze-10 zeSicelo soKhuseleko

Iprojekthi ye-OWASP-okanye i-Open Web Application Application Security - liqela elingenalo inzuzo elizimeleyo elenza izikhokelo ezifanelekileyo kunye nemithetho yokucwangcisa, ukwenza, ukudala nokugcina izicelo ezikhuselekileyo zewebhu. I-OWASP I-10 ephezulu yiprojekthi ephindaphindiweyo, ikhupha i-rundown yezinto eziphezulu ze-10 zokujongana nayo, phakathi kweprojekthi yokuqhubela phambili kwemveliso ukuqinisekisa ukuba izicelo zewebhu zikhuselekile ukusuka kwindawo yokuqala yokuqala.

Ulawulo lwe-OWASP oluPhakamileyo oluPhambili lwe-2016 luphakamisa i-Rundown yee-Top 10 eziPhambili kwiiNdawo zoKhuseleko lweZicelo ezimele zicatshangelwe malunga neseprojekthi yokuphucula imveliso. Izicelo zeProgram ezingakhuselekanga azizincedi ukuhlaselwa kwangaphandle. Ukwenza ukhuseleko lwe-web application kuyona mfuneko ephambili yeeprojekthi ezithile zokuphuhliswa kwemveliso, kwaye iqela labantu labantu base-OWASP lunceda iinjineli zizuza kwiiphoso zabanye, ngoko kufuneka bazi malunga neengozi ezinobungozi kunye nobungozi.

Nantsi ingqungquthela ehlongozwayo ngesicelo sokubaluleka kwesahlulo seengcaciso ezimele ziqwalaselwe ngabanjineli ngelixa zenza izicelo:

  1. Iinkqubo zokuThungathwa kwe-Intrusion kunye nokuGcina
  2. Qinisekisa uKhuseleko kwangaphambili kwaye kaninzi kangangoko kunokwenzeka
  3. Ukuqinisekiswa kwazo zonke iziphumo
  4. Imibuzo yeParameterize
  5. Ulawulo lokufikelela
  6. Idatha yokubhala
  7. Ukukhuselwa kwedatha
  8. Ukuphunyezwa koQinisekiso kunye noLawulo lweZizisi
  9. Sebenzisa iiLibrari zoKhuseleko kunye neziKhokelo
  10. Ukungabikho kokuPhathwa kunye nokuPhathwa kweMpazamo

Ukuqwalasela nganye yezinto ezicatshangelwayo, iinjineli zewebhu kufuneka zikhokele uviwo oluqaphele kwaye emva koko ziqhubeke ngokuqhubekayo nokwakha izicelo zabo zemveliso. I-OWASP Certification ukusuka ekucingeni ukulungiselela ukugxila kunokukhanyisa indlela yokuba oonjiniyela benze ukhetho oluhle lokuqinisekisa ukukhuselwa kwemveliso yabo

&bsp

GTranslate Your license is inactive or expired, please subscribe again!