Blog

8 -Feb 2017

Izindawo ze-OWASP eziphezulu ze-10 zokuphepha kohlelo lokusebenza

/
Posted By

I-OWASP - noma i-Open Web Application Security Project - yiqembu elingenayo inzuzo eligunyazayo elihlela imikhuba engcono nemithetho yokuhlela, yokwenza, ukudala, nokugcina izinhlelo zokusebenza zewebhu ezivikelekile. I-OWASP I-Top 10 iphrojekthi ephindaphindiwe, ikhulula i-rundown yezinto eziphezulu ze-10 okumelwe zibhekane nayo, phakathi komkhiqizo wokuthuthukiswa komkhiqizo wokuqinisekisa ukuthi izinhlelo zokusebenza zewebhu zivikelekile kusukela ekuqaleni kokuqala.

I-OWASP Top Ten Proactive Controls I-2016 iphakamisa i-Rundown yezindawo eziphezulu ze-Top 10 ze-Security Application okufanele zicatshangelwe ngazo zonke izinhlelo zokuthuthukisa umkhiqizo. Izinhlelo zokuhlela ezingavikelekile azikwazi ukuhlaselwa ngaphandle. Ukwenza ukuphepha kwesicelo sewebhu kuyisidingo esikhulu kunazo zonke zamaphrojekthi okuthuthukiswa komkhiqizo, futhi iqembu leqembu le-OWASP lisiza onjiniyela ukuba bazuze emaphutha abanye, ngakho kufanele bazi ngezingozi ezinamandla kanye nokukhubazeka.

Nansi i-rundown ehlongozwe ngokufaka isicelo sokubaluleka kwengxenye yeziphakamiso okumele zicatshangwe yizinjiniyela ngenkathi kwenziwa izicelo:

  1. Izinhlelo zokuThungathwa kwe-Intrusion nokuGwala
  2. Qinisekisa ukuvikeleka ngokushesha futhi kaningi ngangokunokwenzeka
  3. Ukuqinisekiswa kwazo zonke izinzuzo
  4. Imibuzo ye-Parameterize
  5. Izilawuli zokufinyelela
  6. Ukubhaliswa kwedatha
  7. Ukuvikelwa kwedatha
  8. Ukuqaliswa kokuQinisekisa kanye nokuLawula i-Identity
  9. Sebenzisa ama-Libraries Security kanye nama-Frameworks
  10. Ukuphathwa kokungabikho kanye nokuphutha

Uma sicabanga ngalokhu okucatshangelwayo, onjiniyela bewebhu kumele bahole ukuhlola okuqaphayo bese beqhubeka nokuqhubeka nokwakha izicelo zabo zomkhiqizo. I-OWASP Certification kusukela kokucatshangwa ukuthi ukulungiselela ukugxila kungabangela indlela yabanjiniyela ukwenza isinqumo esingcono kakhulu sokuqinisekisa ukuvikeleka kwemibonakaliso yabo yomkhiqizo

shiya impendulo

 
GTranslate Please upgrade your plan for SSL support!
GTranslate Your license is inactive or expired, please subscribe again!