OWASP · 2011-10-02 · OWASP The Authors Abraham Kang Achim Hoffmann Chris Schmidt Dave Ferguson...

14
Copyright © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the OWASP License. The OWASP Foundation OWASP http://www.owasp.org Pure AppSec, No Fillers or Preservatives OWASP Cheat Sheet Series Michael Coates - Mozilla September, 2011 Tuesday, September 27, 2011

Transcript of OWASP · 2011-10-02 · OWASP The Authors Abraham Kang Achim Hoffmann Chris Schmidt Dave Ferguson...

Page 1: OWASP · 2011-10-02 · OWASP The Authors Abraham Kang Achim Hoffmann Chris Schmidt Dave Ferguson Dave Wichers David Rook Edwardo Alberto Vela Nava Eoin Keary Eric Sheridan Erlend

Copyright © The OWASP FoundationPermission is granted to copy, distribute and/or modify this document under the terms of the OWASP License.

The OWASP Foundation

OWASP

http://www.owasp.org

Pure AppSec, No Fillers or Preservatives OWASP Cheat Sheet Series

Michael Coates - Mozilla

September, 2011

Tuesday, September 27, 2011

Page 2: OWASP · 2011-10-02 · OWASP The Authors Abraham Kang Achim Hoffmann Chris Schmidt Dave Ferguson Dave Wichers David Rook Edwardo Alberto Vela Nava Eoin Keary Eric Sheridan Erlend

OWASP 2

Compact

http://www.flickr.com/photos/eprater/6043906778

Tuesday, September 27, 2011

Page 3: OWASP · 2011-10-02 · OWASP The Authors Abraham Kang Achim Hoffmann Chris Schmidt Dave Ferguson Dave Wichers David Rook Edwardo Alberto Vela Nava Eoin Keary Eric Sheridan Erlend

OWASP 3

Comprehensive

http://www.flickr.com/photos/southbeachcars/5394835890

Tuesday, September 27, 2011

Page 4: OWASP · 2011-10-02 · OWASP The Authors Abraham Kang Achim Hoffmann Chris Schmidt Dave Ferguson Dave Wichers David Rook Edwardo Alberto Vela Nava Eoin Keary Eric Sheridan Erlend

OWASP 4

Correct

http://www.flickr.com/photos/behdad/526904677

Tuesday, September 27, 2011

Page 5: OWASP · 2011-10-02 · OWASP The Authors Abraham Kang Achim Hoffmann Chris Schmidt Dave Ferguson Dave Wichers David Rook Edwardo Alberto Vela Nava Eoin Keary Eric Sheridan Erlend

OWASP

The Cheat Sheets

5

Tuesday, September 27, 2011

Page 6: OWASP · 2011-10-02 · OWASP The Authors Abraham Kang Achim Hoffmann Chris Schmidt Dave Ferguson Dave Wichers David Rook Edwardo Alberto Vela Nava Eoin Keary Eric Sheridan Erlend

OWASP

The Authors

Abraham KangAchim Hoffmann Chris SchmidtDave Ferguson Dave Wichers David Rook Edwardo Alberto Vela NavaEoin KearyEric Sheridan Erlend OftedalFred Donovan Gareth HeyesJeff Williams Jeremy Long

Jim Manico John StevenKevin Kenan Kevin Wall Lenny ZeltserMario HeiderichMichael Boberski Michael Coates Mike SamuelPaul Petefish Raul Siles Robert HansenStefano Di PaolaTyler Reguly

6

Tuesday, September 27, 2011

Page 7: OWASP · 2011-10-02 · OWASP The Authors Abraham Kang Achim Hoffmann Chris Schmidt Dave Ferguson Dave Wichers David Rook Edwardo Alberto Vela Nava Eoin Keary Eric Sheridan Erlend

OWASP

Most Visited Cheat Sheets

7

XSS  (Cross  Site  Scrip.ng)  Preven.on  Cheat  Sheet  ..........................354,208

SQL  Injec.on  Preven.on  Cheat  Sheet  .............................................180,011

Cross-­‐Site  Request  Forgery  (CSRF)  Preven.on  Cheat  Sheet  .............78,086

Transport  Layer  Protec.on  Cheat  Sheet  ...........................................46,343

Authen.ca.on  Cheat  Sheet  ..............................................................28,074

Total Cheat Sheet Views : 740,000

Tuesday, September 27, 2011

Page 8: OWASP · 2011-10-02 · OWASP The Authors Abraham Kang Achim Hoffmann Chris Schmidt Dave Ferguson Dave Wichers David Rook Edwardo Alberto Vela Nava Eoin Keary Eric Sheridan Erlend

OWASP 8

Tuesday, September 27, 2011

Page 9: OWASP · 2011-10-02 · OWASP The Authors Abraham Kang Achim Hoffmann Chris Schmidt Dave Ferguson Dave Wichers David Rook Edwardo Alberto Vela Nava Eoin Keary Eric Sheridan Erlend

OWASP 9

Tuesday, September 27, 2011

Page 10: OWASP · 2011-10-02 · OWASP The Authors Abraham Kang Achim Hoffmann Chris Schmidt Dave Ferguson Dave Wichers David Rook Edwardo Alberto Vela Nava Eoin Keary Eric Sheridan Erlend

OWASP 10

Tuesday, September 27, 2011

Page 11: OWASP · 2011-10-02 · OWASP The Authors Abraham Kang Achim Hoffmann Chris Schmidt Dave Ferguson Dave Wichers David Rook Edwardo Alberto Vela Nava Eoin Keary Eric Sheridan Erlend

OWASP 11

Tuesday, September 27, 2011

Page 12: OWASP · 2011-10-02 · OWASP The Authors Abraham Kang Achim Hoffmann Chris Schmidt Dave Ferguson Dave Wichers David Rook Edwardo Alberto Vela Nava Eoin Keary Eric Sheridan Erlend

OWASP 12

Tuesday, September 27, 2011

Page 13: OWASP · 2011-10-02 · OWASP The Authors Abraham Kang Achim Hoffmann Chris Schmidt Dave Ferguson Dave Wichers David Rook Edwardo Alberto Vela Nava Eoin Keary Eric Sheridan Erlend

OWASP

What’s Next?

Cheat sheet updatesSingle cheat sheet downloadCheat sheet book

13

Tuesday, September 27, 2011

Page 14: OWASP · 2011-10-02 · OWASP The Authors Abraham Kang Achim Hoffmann Chris Schmidt Dave Ferguson Dave Wichers David Rook Edwardo Alberto Vela Nava Eoin Keary Eric Sheridan Erlend

OWASP

Questions?

14

Tuesday, September 27, 2011