OWASP - AppSec USA2011.appsecusa.org/p/cheatsheets.pdf · Permission is granted to copy, distribute...

14
Copyright © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the OWASP License. The OWASP Foundation OWASP http://www.owasp.org Pure AppSec, No Fillers or Preservatives OWASP Cheat Sheet Series Michael Coates - Mozilla September, 2011 Tuesday, September 27, 2011

Transcript of OWASP - AppSec USA2011.appsecusa.org/p/cheatsheets.pdf · Permission is granted to copy, distribute...

Copyright © The OWASP FoundationPermission is granted to copy, distribute and/or modify this document under the terms of the OWASP License.

The OWASP Foundation

OWASP

http://www.owasp.org

Pure AppSec, No Fillers or Preservatives OWASP Cheat Sheet Series

Michael Coates - Mozilla

September, 2011

Tuesday, September 27, 2011

OWASP 2

Compact

http://www.flickr.com/photos/eprater/6043906778

Tuesday, September 27, 2011

OWASP 3

Comprehensive

http://www.flickr.com/photos/southbeachcars/5394835890

Tuesday, September 27, 2011

OWASP 4

Correct

http://www.flickr.com/photos/behdad/526904677

Tuesday, September 27, 2011

OWASP

The Cheat Sheets

5

Tuesday, September 27, 2011

OWASP

The Authors

Abraham KangAchim Hoffmann Chris SchmidtDave Ferguson Dave Wichers David Rook Edwardo Alberto Vela NavaEoin KearyEric Sheridan Erlend OftedalFred Donovan Gareth HeyesJeff Williams Jeremy Long

Jim Manico John StevenKevin Kenan Kevin Wall Lenny ZeltserMario HeiderichMichael Boberski Michael Coates Mike SamuelPaul Petefish Raul Siles Robert HansenStefano Di PaolaTyler Reguly

6

Tuesday, September 27, 2011

OWASP

Most Visited Cheat Sheets

7

XSS  (Cross  Site  Scrip.ng)  Preven.on  Cheat  Sheet  ..........................354,208

SQL  Injec.on  Preven.on  Cheat  Sheet  .............................................180,011

Cross-­‐Site  Request  Forgery  (CSRF)  Preven.on  Cheat  Sheet  .............78,086

Transport  Layer  Protec.on  Cheat  Sheet  ...........................................46,343

Authen.ca.on  Cheat  Sheet  ..............................................................28,074

Total Cheat Sheet Views : 740,000

Tuesday, September 27, 2011

OWASP 8

Tuesday, September 27, 2011

OWASP 9

Tuesday, September 27, 2011

OWASP 10

Tuesday, September 27, 2011

OWASP 11

Tuesday, September 27, 2011

OWASP 12

Tuesday, September 27, 2011

OWASP

What’s Next?

Cheat sheet updatesSingle cheat sheet downloadCheat sheet book

13

Tuesday, September 27, 2011

OWASP

Questions?

14

Tuesday, September 27, 2011