پاورپوینت کامل A Framework for Automated Web Application Security Evaluation 36 اسلاید در PowerPoint

توجه : این فایل به صورت فایل power point (پاور پوینت) ارائه میگردد

 پاورپوینت کامل A Framework for Automated Web Application Security Evaluation 36 اسلاید در PowerPoint دارای ۳۶ اسلاید می باشد و دارای تنظیمات کامل در PowerPoint می باشد و آماده ارائه یا چاپ است

شما با استفاده ازاین پاورپوینت میتوانید یک ارائه بسیارعالی و با شکوهی داشته باشید و همه حاضرین با اشتیاق به مطالب شما گوش خواهند داد.

لطفا نگران مطالب داخل پاورپوینت نباشید، مطالب داخل اسلاید ها بسیار ساده و قابل درک برای شما می باشد، ما عالی بودن این فایل رو تضمین می کنیم.

توجه : در صورت  مشاهده  بهم ریختگی احتمالی در متون زیر ،دلیل ان کپی کردن این مطالب از داخل فایل می باشد و در فایل اصلی پاورپوینت کامل A Framework for Automated Web Application Security Evaluation 36 اسلاید در PowerPoint،به هیچ وجه بهم ریختگی وجود ندارد

بخشی از مطالب داخلی اسلاید ها

پاورپوینت کامل A Framework for Automated Web Application Security Evaluation 36 اسلاید در PowerPoint

اسلاید ۴: Security TestingThe Process to determine that an IS (Information System) protects data and maintains functionality as intended.The six basic security concepts that need to be covered by security testing are:ConfidentialityIntegrityAuthenticationAuthorizationAvailabilitynon-repudiation

اسلاید ۵: Why Web ApplicationsBecause of globalization of web and being of internet as the major tool for international information exchange, security of web application is becoming more and more important.Web applications are very much vulnerable to DOS attacks or security and access compromise. Automated testing tools are vital because of growth in web application’s extension and complication.

اسلاید ۶: Types of security testThere are two types for security test:Static:Analyzes the source code for security defectsKnown as white box security testNeeds source codeDynamic:Elicits vulnerabilities by sending malicious requests, and investigating repliesWhen source code is not availableTester looks at the application from the attacker’s perspectiveAnalyzes only applications deployed in test or production environments

اسلاید ۷: Security testing toolsThere is eight security tool categories: source code analyzers, web application (black-box) scanners,database scanners,binary analysis tools,runtime analysis tools,configuration management tools,HTTP proxies,miscellaneous tools.

اسلاید ۸: Web Application (black-box) Scanners

اسلاید ۹: Automated security testing toolIn an automated security test, there are three fundamental steps:Discovering new URLs and forms by crawlingCreating test script with crafted dataSending malicious request to the web applicationAnalyzing response to detecting vulnerabilitiesExploit vulnerabilities

اسلاید ۱۰: Security evaluationIs the process of determining how much a system is secure. Security evaluation needs information gathered from human and testing tools.For evaluation we need security metrics and measures.

اسلاید ۱۱: Related worksWeb application security consortium: Threat Classification (WACS TC)Web Application Security Statistics Project (WASSP)A Metrics Framework to Drive Application Security ImprovementCommon Vulnerability Scoring System (CVSS)ISO/IEC 15408: Evaluation criteria for IT securityISO/IEC 18045: Methodology for IT security evaluation

اسلاید ۱۲: Threat ClassificationIdentify all known web application security classes of attack.Agree on naming for each class of attack.Develop a structured manner to organize the classes of attack.Develop documentation that provides generic descriptions of each class of attack.Web Application Security Consortium: Threat Classification, version 1.00

اسلاید ۱۳: Threat ClassificationSix security classes of attack:Authentication AuthorizationClient-side AttacksCommand ExecutionInformation DisclosureLogical AttacksWeb Application Security Consortium: Threat Classification, version 1.00

اسلاید ۱۴: W