Blog

8 -Feb 2017

Izindawo ze-OWASP eziphezulu ze-10 zokuphepha kohlelo lokusebenza

/
Posted By

I-OWASP - noma i-Open Web Application Security Project - yiqembu elingenayo inzuzo eligunyazayo elihlela imikhuba engcono nemithetho yokuhlela, yokwenza, ukudala, nokugcina izinhlelo zokusebenza zewebhu ezivikelekile. I-OWASP I-Top 10 iphrojekthi ephindaphindiwe, ikhulula i-rundown yezinto eziphezulu ze-10 okumelwe zibhekane nayo, phakathi komkhiqizo wokuthuthukiswa komkhiqizo wokuqinisekisa ukuthi izinhlelo zokusebenza zewebhu zivikelekile kusukela ekuqaleni kokuqala.

I-OWASP Top Ten Proactive Controls I-2016 iphakamisa i-Rundown yezindawo eziphezulu ze-Top 10 ze-Security Application okufanele zicatshangelwe ngazo zonke izinhlelo zokuthuthukisa umkhiqizo. Izinhlelo zokuhlela ezingavikelekile azikwazi ukuhlaselwa ngaphandle. Ukwenza ukuphepha kwesicelo sewebhu kuyisidingo esikhulu kunazo zonke zamaphrojekthi okuthuthukiswa komkhiqizo, futhi iqembu leqembu le-OWASP lisiza onjiniyela ukuba bazuze emaphutha abanye, ngakho kufanele bazi ngezingozi ezinamandla kanye nokukhubazeka.

Nansi i-rundown ehlongozwe ngokufaka isicelo sokubaluleka kwengxenye yeziphakamiso okumele zicatshangwe yizinjiniyela ngenkathi kwenziwa izicelo:

  1. Izinhlelo zokuThungathwa kwe-Intrusion nokuGwala
  2. Qinisekisa ukuvikeleka ngokushesha futhi kaningi ngangokunokwenzeka
  3. Ukuqinisekiswa kwazo zonke izinzuzo
  4. Imibuzo ye-Parameterize
  5. Izilawuli zokufinyelela
  6. Ukubhaliswa kwedatha
  7. Ukuvikelwa kwedatha
  8. Ukuqaliswa kokuQinisekisa kanye nokuLawula i-Identity
  9. Sebenzisa ama-Libraries Security kanye nama-Frameworks
  10. Ukuphathwa kokungabikho kanye nokuphutha

Uma sicabanga ngalokhu okucatshangelwayo, onjiniyela bewebhu kumele bahole ukuhlola okuqaphayo bese beqhubeka nokuqhubeka nokwakha izicelo zabo zomkhiqizo. I-OWASP Certification kusukela kokucatshangwa ukuthi ukulungiselela ukugxila kungabangela indlela yabanjiniyela ukwenza isinqumo esingcono kakhulu sokuqinisekisa ukuvikeleka kwemibonakaliso yabo yomkhiqizo

GTranslate Your license is inactive or expired, please subscribe again!