Security Testing - Polazhenko Sergey
Download as PPTX, PDF
2 likes1,468 views
亠舒 QA Club Minsk, 仗仂于亠仆仆舒 亠亳仂于舒仆亳 弍亠亰仂仗舒仆仂亳 亳 亰舒亳仆仆仂亳.
![丶 弌 (COBIT, RISKWATCH)
Risk = Probability * Cost
DREAD
R = (D1^2 + R^2 + E^2 + A^2 + D2^2) / 1024
Damage potential (仗仂亠仆亳舒仍仆亶 亠弍).
Reproducibility (仗仂于仂磳仄仂).
Exploitability (仗仂仂舒 仂亞舒仆亳亰舒亳亳 舒舒从亳).
Affected users (亰舒仂仆亠 仗仂仍亰仂于舒亠仍亳).
Discoverability (仗仂仂舒 仂弍仆舒亢亠仆亳).
D,R,E,A,D = [1-10]](https://image.slidesharecdn.com/polazhenkosectest-120416060022-phpapp02/85/Security-Testing-Polazhenko-Sergey-49-320.jpg)
![丶 弌 (DREAD)
R = (D1^2 + R^2 + E^2 + A^2 + D2^2) / 1024
Damage potential (仗仂亠仆亳舒仍仆亶 亠弍).
Reproducibility (仗仂于仂磳仄仂).
Exploitability (仗仂仂舒 仂亞舒仆亳亰舒亳亳 舒舒从亳).
Affected users (亰舒仂仆亠 仗仂仍亰仂于舒亠仍亳).
Discoverability (仗仂仂舒 仂弍仆舒亢亠仆亳).
D,R,E,A,D = [1-10]](https://image.slidesharecdn.com/polazhenkosectest-120416060022-phpapp02/85/Security-Testing-Polazhenko-Sergey-50-320.jpg)
Security Testing - Polazhenko Sergey
- 1. 丐弌丐 弌弌丐 仂仍舒亢亠仆从仂 弌亠亞亠亶, 束舒弍仂舒仂亳 亠亳仂于舒仆亳晛 polazhenko@sqalab.ru
- 2. 丼丐 丐 弌弌丐亂 丕丐 ()? ISO/IEC 9126 束Software engineering Product quality損 亠亰仂仗舒仆仂 - (safety) 仗仂仂弍仆仂 亟仂亳亞舒 仗亳亠仄仍亠仄仂亞仂 仂于仆 亳从舒 亟仍 亰亟仂仂于 仍ﾐ莞黍, 亳 弍亳亰仆亠舒, , 亳仄亠于舒 亳仍亳 仂从亢舒ﾑ亠亶 亠亟 仗亳 亟舒仆仆仂仄 仗仂仂弍亠 (从仂仆亠从亠) 仗亳仄亠仆亠仆亳.
- 3. 丼丐 丐 乂乂弌丐亂 ? ISO/IEC 9126 束Software engineering Product quality損 舒亳仆仆仂 - (security) 仗仂仂弍仆仂 亰舒亳舒 亳仆仂仄舒亳 亳 亟舒仆仆亠 舒从, 仂弍 仆亠舒于仂亳亰仂于舒仆仆亠 弍亠从 亳仍亳 仗仂亠 仆亠 仄仂亞仍亳 亳舒 亳仍亳 仄仂亟亳亳亳仂于舒 (亟舒仍) 亳, 舒 舒于仂亳亰仂于舒仆仆仄 仗仂仍亰仂于舒亠仍礆 亳 仗仂亠舒仄 仆亠 弍仍仂 仂从舒亰舒仆仂 于 亟仂仗亠 从 仆亳仄. 丐亠弍仂于舒仆亳亠 舒从亢亠 仂仆仂亳 亳 从 亟舒仆仆仄, 从仂仂亠 仆舒仂亟 于 仗仂亠亠 仗亠亠仍从亳.
- 4. 丼丐 丐 丐弌丐 弌弌丐 乂乂弌丐 (丐) ? 亠仂亟 仂亠仆从亳 丼弌丐 亳 丐乘 亠舒仍亳亰舒亳亳 亠弍仂于舒仆亳亶 仗仂 弌弌丐 亳 乂乂弌丐
- 5. 弌丐丕丐丕 丼弌丐 ISO/IEC 9126 束Software engineering Product quality損 ISO/ IEC 14598 束Software engineering Product evaluation損 仆亠仆亳亠 舒亳弍 从舒亠于舒 仆亠仆仆亳亠 舒亳弍 从舒亠于舒 舒亠于仂 于 亳仗仂仍亰仂于舒仆亳亳
- 6. 弌丐丕丐丕 丼弌丐 ISO/IEC 9126 束Software engineering Product quality損 ISO/ IEC 14598 束Software engineering Product evaluation損
- 7. 弌丐丕丐丕 丼弌丐 ISO/IEC 9126 束Software engineering Product quality損 ISO/ IEC 14598 束Software engineering Product evaluation損 舒亳仆仆仂 舒舒从亠亳亳从舒 仆从亳仂仆舒仍仆仂亶 仗亳亞仂亟仆仂亳 (于仆亠仆仆亠亠 亳 于仆亠仆亠亠 从舒亠于仂) 亠亰仂仗舒仆仂 舒舒从亠亳亳从舒 从舒亠于舒 于 亳仗仂仍亰仂于舒仆亳亳
- 8. 丐丼 个丕丶亂 丐弌丐亊 丐 丐 亠于仂于舒 仂仗 从 舒仆亳舒仄 舒亶舒 于仂亰仄仂亢仆仂 仗仂仍亳 亟仂仗 从 亟仂仍亢亠仆 仂亠于仍 丐亂 舒仆亳舒仄 舒亶舒 舒于仂亳亰仂于舒仆仆仄亳 丐乘 仗仂仍亰仂于舒亠仍礆亳 舒亶 仗仂仍亰仂于舒亠仍礆亳 舒亶
- 9. 弌丱弌丐 丐 丕丼 丐弌丐亊 舒亠于亠仆仆舒 舒舒从亠亳亳从舒 仆亠亞舒仍仆亶 舒舒从亠 ! 舒亞亰仂仆仂亠 从舒舒亠 仂仆仂于仆仂亞仂 仆从亳仂仆舒仍舒 丐 弍仂仍亠亠 亳亠仄仆仂! 丐 舒仂 亳仄亠亠 仆亠磦仆亠 亠弍仂于舒仆亳
- 10. 丕丼 丐弌丐亊 弌亠于亳 亟仂仍亢亠仆 于亟亠亢亳于舒 仂于亠 亰舒 10 亳 仄亠仆亠亠 亠从仆亟 仗亳 仆舒亞亰从亠 亟仂 1000 仂亟仆仂于亠仄亠仆仆仂 舒弍仂舒ﾑ亳 仗仂仍亰仂于舒亠仍亠亶. 仂仍亰仂于舒亠仍亳 舒弍仂舒ﾑ 于 舒仄从舒 仂仗亠亟亠仍仆仆仂亞仂 WORKFLOW!
- 11. 丐 仂仍亰仂于舒亠仍 仄仂亢仆仂 舒舒从仂于舒: 1. 丼亠亠亰 舒仆亳 舒亶舒 2. 丼亠亠亰 舒亟亠仆 仂从 弍舒亰亠舒 (sql, xss injections, ) 3. 亠亠于舒于舒 亳 仄仂亟亳亳亳仂于舒 舒亳从 仄亠亢亟 从仍亳亠仆仂仄 亳 亠于亠仂仄 4. 仂亟仄亠仆 于仆亠仆亳亠 亠于亳, 仆舒 从仂仂亠 仍舒亠 仆舒 舒亶 5.
- 12. 弌亊 弌弌丐
- 13. 丐弌乘 丶 仂 仗亳仂弍亠舒亠 亳仍亳 亠磳 亟亠仆亞亳?
- 14. 丐乘 丼仂 亳 从仂仍从仂 仂亳 亟亠仆亠亞?
- 15. 丐乘 () - NOTEPAD
- 16. 丐乘 () - NOTEPAD 舒仆仆亠 仗仂仍亰仂于舒亠仍
- 17. 丐乘 () MS WORD
- 18. 丐乘 () MS WORD 1. 舒仆仆亠 仗仂仍亰仂于舒亠仍 2. 从亳于舒亳 仗仂亟从舒 3. 亠仗舒亳 仗仂亳亰于仂亟亳亠仍 4. 仂亟仆亠 亠从 5. 仆亠仍仍亠从舒仍仆舒 仂弍于亠仆仆仂 (舒仍亞仂亳仄, 亟亳亰舒亶仆 亳 .仗.)
- 19. 丐乘 () GMAIL.COM
- 20. 丐乘 () GMAIL.COM 1. 仂亞亳仆 仗仂仍亰仂于舒亠仍(亠亶) 2. 亠亠仗亳从舒 亳 亟. 亟舒仆仆亠 仗仂仍亰仂于舒亠仍(亠亶) 3. 仂仗仆仂 亠于亳舒 4. 亠仆亳仆仂 亠于亳舒 5. 仍舒仆亠 仆从亳亳 6. 亠仗舒亳 仗仂亳亰于仂亟亳亠仍 7. 仂亟仆亠 亠从 8. 仆亠仍仍亠从舒仍仆舒 仂弍于亠仆仆仂 (舒仍亞仂亳仄, 亟亳亰舒亶仆 亳 .仗.)
- 21. 丐乘 () KM.RU, ENCARTA
- 22. 丐乘 () KM.RU, ENCARTA 1. 仂仗仆仂 亠于亳舒 2. 亠仗舒亳 仗仂亳亰于仂亟亳亠仍 3. 亠仆亳仆仂 舒亠亶 4. 仆亠仍仍亠从舒仍仆舒 仂弍于亠仆仆仂 (亞舒亳从舒, 亠从 舒亠亶)
- 23. 丐乘 () WIKIPEDIA
- 24. 丐乘 () WIKIPEDIA 1. 仂仗仆仂 亠于亳舒 2. 亠仆亳仆仂 舒亠亶 3. 亠仆亳仆仂 亠于亳舒
- 25. 丐乘 () ONLINE POKER (HTML5)
- 26. 丐乘 () ONLINE POKER (HTML5) 1. 仂亞亳仆 仗仂仍亰仂于舒亠仍(亠亶) 2. 舒仆仆亠 仗仂仍亰仂于舒亠仍亠亶 3. 仂仗仆仂 亠于亳舒 4. 亠仆亳仆仂 亠于亳舒 5. 仍舒仆亠 仆从亳亳 6. 亠仗舒亳 仗仂亳亰于仂亟亳亠仍 7. 仂亟仆亠 亠从 8. 仆亠仍仍亠从舒仍仆舒 仂弍于亠仆仆仂 (舒仍亞仂亳仄, 亟亳亰舒亶仆 亳 .仗.)
- 27. 丕乂 舒亠亳舒仍仆亠 亳 仆亠仄舒亠亳舒仍仆亠 仗仂亠亳 于 于亠亰亳 亟亠亶于亳礆亳 亰仍仂仄仍亠仆仆亳从舒
- 28. 丕亊弌丐亂 亠亟仂舒仂从 亳亠仄 亰舒亳, 仄仂亞亳亶 仗亳于亠亳 从 仂仄 亳仍亳 亳仆仂仄 亠弍 从仂亠 仂从仆仂
- 29. 弌 舒亳舒仆 亠舒仍亳亰舒亳亳 磶于亳仄仂亳 仍仂仄仍亠仆仆亳从 于仍亠亰亠 于 束仂从仂亠 仂从仆仂損
- 30. 弌弌丐亂 乘丱 弌弌! 丶亠仍仂仆仂 仂仗仆仂 仂仆亳亟亠仆亳舒仍仆仂 (亠仆亳仆仂)
- 31. 丕 弌丐 518972002 束亠仆亠亟亢仄亠仆 亳从舒. 丐亠仄亳仆 亳 仂仗亠亟亠仍亠仆亳晛 仗仂亠仆亳舒仍仆舒 仗亳亳仆舒 仆亠亢亠仍舒亠仍仆仂亞仂 亳仆亳亟亠仆舒, 从仂仂亶 仄仂亢亠 仗亳于仂亟亳 从 仆舒仆亠亠仆亳 于亠亟舒 亳亠仄亠 亳仍亳 仂亞舒仆亳亰舒亳亳. 舒亢舒 亟舒仆仆 (仆舒亠仆亳亠 从仂仆亳亟亠仆亳舒仍仆仂 亟舒仆仆)
- 32. 丕 弌弌丐 1. 仂仄舒亳于仆仂-仗舒于仂于仂亶 2. 亞舒仆亳亰舒亳仂仆仆亶 3. 丐亠仆亳亠从亳亶 4. 个亳亰亳亠从亳亶
- 33. 弌豫丐亊 乂乂弌丐亂 1. 亠 于仂亰仄仂亢仆舒 2. 亠亰仂仗舒仆仂 仗仂亞舒仄仄仆 亳亠仄 仆亠 仄仂亢亠 弍 仂弍亠仗亠亠仆舒 仗仂亞舒仄仄仆仄亳 亠亟于舒仄亳
- 34. 亂 丕乘丿 1. 仆亠仆亳亶 仗仂仍亰仂于舒亠仍 2. 仆亠仆仆亳亶 仗仂仍亰仂于舒亠仍 3. 弌仂亟仆亳从亳 从仂仄仗舒仆亳亳- 舒亰舒弍仂亳从舒
- 35. 丐 弌丐弌丐 乘丱 1. 弍仍亳仆舒 亳仆仂仄舒亳 2. 弌仍亢亠弍仆舒 亳仆仂仄舒亳 3. 弌仍亢亠弍仆舒 舒亶仆舒 4. 仂亟舒于亠仆仆舒 舒亶仆舒
- 36. 丕 丐弌丐亊 ISO/IEC 15408 Common criteria EAL1 EAL7 EAL1 (仆从亳仂仆舒仍仆仂亠 亠亳仂于舒仆亳亠) EAL7 (仂仄舒仍仆舒 于亠亳亳从舒亳 仗仂亠从舒 亳 亠亳仂于舒仆亳亠)
- 37. 亂 丕乘丿 (丿 亂丐) 1. 亠从于舒仍亳亳亳仂于舒仆仆亶 仗仂仍亰仂于舒亠仍 2. 于舒仍亳亳亳仂于舒仆仆亶 仗仂仍亰仂于舒亠仍 3. 仂从仂从于舒仍亳亳亳仂于舒仆仆亶 舒从亠 4. 亠仗仆舒 亞仗仗亳仂于从舒 5. 弌仗亠仍亢弍
- 38. 丐弌丐 1. 丐亠仂亠亳亠从舒 亰舒亟舒舒 - 仗仂亠亳仂于舒 于亠 仆从亳仂仆舒仍 (于亠 从仍舒 从于亳于舒仍亠仆仆仂亳) 2. 舒从亳亠从舒 (从仂仆仂仄亳亠从舒) 亰舒亟舒舒 于 亰舒亟舒仆仆亠 仂从亳, 仗亳 亳仄亠ﾑ亳 亠舒 仂弍亠仗亠亳 亟仂仍亢仆仂亠 从舒亠于仂
- 39. USABILITY & SECURITY TESTING 仂从亳亶 仂于亠仆 弍亠亰仂仗舒仆仂亳 ~ 仆亳亰从仂亠 usability 仗仗舒舒仆亶 从仍ﾑ 仂从亳亠 亠弍仂于舒仆亳 从 从舒亠于 仗舒仂仍 于仂仍仂亞亳仆 & 于于仂亟 仗舒仂仍 Webmoney & 亊仆亟亠从.亠仆亞亳
- 41. MARKETING & SECURITY Microsoft 于仗从舒亠 仆舒 仄舒仂于仂仄 仆从亠: 仍舒-于亠亳亳 仗仂亟从仂于 亠舒-于亠亳亳 仗仂亟从仂于 亠仍亳亰 弌仆舒舒仍舒 亰舒于舒 仆从舒, 舒 仗仂仂仄 亳仍亠仆亳亠 弍亠亰仂仗舒仆仂亳
- 42. MARKETING & SECURITY MS Office 2010: 弌仂亳仄仂 舒亰舒弍仂从亳 10$ 弌仂亳仄仂 亠亟亳仆亳 10$ 丼亳仍仂 仗仂亟舒亢 1M 丼亳仍仂 亳仆舒仍仍亳亶 5
- 43. MARKETING & SECURITY MS Office 2012舒: 弌仂亳仄仂 亰舒亳 100 弌仂亳仄仂 亠亟亳仆亳 15$ 弌仂亳仄仂 upgrade 5$ 60% 舒 仗仂仍亰仂于舒亠仍亠亶 +20% 仆仂于 仆舒仍仍亳亶 于 仄亳亠: 7 3 + 15 = 18
- 44. MARKETING & SECURITY MS Office 2012b + 舒仗仗舒舒仆亠 从仍ﾑ亳: 弌仂亳仄仂 亰舒亳 1 弌仂亳仄仂 亠亟亳仆亳 15$ 弌仂亳仄仂 upgrade 5$ 50% 舒 仗仂仍亰仂于舒亠仍亠亶 +20% 仆仂于 仆舒仍仍亳亶 于 仄亳亠 5,5 2,5 + 15 = 17,5
- 45. MARKETING & SECURITY MS Office 2012: 弌仂亳仄仂 亰舒亳 10 弌仂亳仄仂 亠亟亳仆亳 15$ 弌仂亳仄仂 upgrade 5$ 60% 舒 仗仂仍亰仂于舒亠仍亠亶 +30% 仆仂于 仆舒仍仍亳亶 于 仄亳亠 8 3 + 30 = 33
- 46. MARKETING & SECURITY MS Office 360: 弌仂亳仄仂 舒亰舒弍仂从亳 50 弌仂亳仄仂 亠亟亳仆亳 15$ 弌仂亳仄仂 upgrade 5$ 60% 舒 仗仂仍亰仂于舒亠仍亠亶 +60% 仆仂于 仆舒仍仍亳亶 于 仄亳亠 1,2 3 + 60 = 63
- 47. 丐亂弌亊?
- 48. 乘 丶 丐 亅丐乘 丐弌丐亊 弌弌丐
- 49. 丶 弌 (COBIT, RISKWATCH) Risk = Probability * Cost DREAD R = (D1^2 + R^2 + E^2 + A^2 + D2^2) / 1024 Damage potential (仗仂亠仆亳舒仍仆亶 亠弍). Reproducibility (仗仂于仂磳仄仂). Exploitability (仗仂仂舒 仂亞舒仆亳亰舒亳亳 舒舒从亳). Affected users (亰舒仂仆亠 仗仂仍亰仂于舒亠仍亳). Discoverability (仗仂仂舒 仂弍仆舒亢亠仆亳). D,R,E,A,D = [1-10]
- 50. 丶 弌 (DREAD) R = (D1^2 + R^2 + E^2 + A^2 + D2^2) / 1024 Damage potential (仗仂亠仆亳舒仍仆亶 亠弍). Reproducibility (仗仂于仂磳仄仂). Exploitability (仗仂仂舒 仂亞舒仆亳亰舒亳亳 舒舒从亳). Affected users (亰舒仂仆亠 仗仂仍亰仂于舒亠仍亳). Discoverability (仗仂仂舒 仂弍仆舒亢亠仆亳). D,R,E,A,D = [1-10]
- 51. 亂亊 丐
- 52. 弌弌乘 亂乘 仂亳仍舒从亳从舒 弍亠仆亳亠 亳亰舒亶仆 仗亳仍仂亢亠仆亳 Code review Input validation Continues integration checks 丐亠亳仂于舒仆亳亠 丼亠仆仄 亳从仂仄 亠仍仄 亳从仂仄 弌亠仄 亳从仂仄 Fuzzy 于仂仄舒亳亰亳仂于舒仆仆亠 亳仆仄亠仆
- 53. 弌弌乘 亂乘 仂亳仍舒从亳从舒 弍亠仆亳亠 亳亰舒亶仆 仗亳仍仂亢亠仆亳 Code review Input validation Continues integration checks 丐亠亳仂于舒仆亳亠 丼亠仆仄 亳从仂仄 亠仍仄 亳从仂仄 弌亠仄 亳从仂仄 Fuzzy 于仂仄舒亳亰亳仂于舒仆仆亠 亳仆仄亠仆
- 54. 弌弌乘 亂乘: 丕丼
- 55. 弌弌乘 亂乘 仂亳仍舒从亳从舒 弍亠仆亳亠 亳亰舒亶仆 仗亳仍仂亢亠仆亳 Code review Input validation Continues integration checks 丐亠亳仂于舒仆亳亠 丼亠仆仄 亳从仂仄 亠仍仄 亳从仂仄 弌亠仄 亳从仂仄 Fuzzy 于仂仄舒亳亰亳仂于舒仆仆亠 亳仆仄亠仆
- 56. 弌弌乘 亂乘: 亊 Guidelines Check lists Best practices
- 57. 弌弌乘 亂乘: 亊 仆亠 舒仆亳 亠从亠 于 仂从仂仄 于亳亟亠 仗亳仆亳仗 仄亳仆亳仄舒仍仆 仗亳于亳仍亠亞亳亶 亳仗仂仍亰仂于舒 仗舒舒仄亠亠亰亳仂于舒仆仆亠 亰舒仗仂 亳仗仂仍亰仂于舒 舒仆亳仄亠 仗仂亠亟 仂仂弍亠仆亳 仂弍 仂亳弍从舒 仆亠 亟仂仍亢仆 仂亟亠亢舒 仍亢亠弍仆仂亶 亳仆仂仄舒亳亳
- 58. 弌弌乘 亂乘 仂亳仍舒从亳从舒 弍亠仆亳亠 亳亰舒亶仆 仗亳仍仂亢亠仆亳 Code review Input validation Continues integration checks 丐亠亳仂于舒仆亳亠 丼亠仆仄 亳从仂仄 亠仍仄 亳从仂仄 弌亠仄 亳从仂仄 Fuzzy 于仂仄舒亳亰亳仂于舒仆仆亠 亳仆仄亠仆
- 59. 弌弌乘 亂乘: CODE REVIEW 亅从仗亠亳亰舒 亳仂亟仆 亠从仂于, 从舒从 仄亠仂亟 亠亳仂于舒仆亳 弍亠亰仂仗舒仆仂亳 亳 亰舒亳仆仆仂亳 仗仂亞舒仄仄仆 仗仂亟从仂于 http://software- testing.ru/library/testing/security/109 http://securitywiki.ru/PraktikaJekspertiza IsxodnyxTekstov?v=oqu
- 60. 弌弌乘 亂乘: CODE REVIEW Patterns && Practices: Code Review http://msdn.microsoft.com/en- us/library/ff648637.aspx
- 61. 弌弌乘 亂乘: CODE REVIEW Java EE 亳仗仂仍亰仂于舒 PreparedStatement() .NET 亳仗仂仍亰仂于舒 仗舒舒仄亠亳亰仂于舒仆仆亠 亰舒仗仂 仗亳 仗仂仄仂亳 SqlCommand() or OleDbCommand() PHP 亳仗仂仍亰仂于舒 PDO 仂亞仂 亳仗亳亰亳仂于舒仆仆仄亳 仗舒舒仄亳亰仂于舒仆仆仄亳 亰舒仗仂舒仄亳 (亳仗仂仍亰仂于舒仆亳亠 bindParam()) SQLite 亳仗仂仍亰仂于舒 sqlite3_prepare() 亳 .仗. https://www.owasp.org/index.php/SQL_Injection_ Prevention_Cheat_Sheet
- 62. 弌弌乘 亂乘 仂亳仍舒从亳从舒 弍亠仆亳亠 亳亰舒亶仆 仗亳仍仂亢亠仆亳 Code review Input validation Continues integration checks 丐亠亳仂于舒仆亳亠 丼亠仆仄 亳从仂仄 亠仍仄 亳从仂仄 弌亠仄 亳从仂仄 Fuzzy 于仂仄舒亳亰亳仂于舒仆仆亠 亳仆仄亠仆
- 63. 弌弌乘 亂乘: INPUT VALIDATION 仂亳仍舒从亳从舒 弍亠仆亳亠 亳亰舒亶仆 仗亳仍仂亢亠仆亳 Code review Input validation Continues integration checks 丐亠亳仂于舒仆亳亠 丼亠仆仄 亳从仂仄 亠仍仄 亳从仂仄 弌亠仄 亳从仂仄 仂于亠磺亠 于仂亟仆亠 Fuzzy 于仂仄舒亳亰亳仂于舒仆仆亠 亳仆仄亠仆
- 64. 仂亠 亳仗亳仆仂亞仂 仗仂仍亰仂于舒亠仍 弌弌乘 亂乘: INPUT VALIDATION 仂亳仍舒从亳从舒 弍亠仆亳亠 亳亰舒亶仆 仗亳仍仂亢亠仆亳 Code review Input validation Continues integration checks 丐亠亳仂于舒仆亳亠 丼亠仆仄 亳从仂仄 亠仍仄 亳从仂仄 弌亠仄 亳从仂仄 Fuzzy 于仂仄舒亳亰亳仂于舒仆仆亠 亳仆仄亠仆 Dr. User Evil
- 65. 弌弌乘 亂乘 仂亳仍舒从亳从舒 弍亠仆亳亠 亳亰舒亶仆 仗亳仍仂亢亠仆亳 Code review Input validation Continues integration checks 丐亠亳仂于舒仆亳亠 丼亠仆仄 亳从仂仄 亠仍仄 亳从仂仄 弌亠仄 亳从仂仄 Fuzzy 于仂仄舒亳亰亳仂于舒仆仆亠 亳仆仄亠仆
- 66. 弌仗仂仂弍 弍仂弍: Continues integration checks Microsoft FxCop "CA2100: Review SQL queries for security vulnerabilities Microsoft Source Code Analyzer for SQL Injection Microsoft Code Analysis Tool for .Net (CAT.NET)
- 67. 弌弌乘 亂乘 仂亳仍舒从亳从舒 弍亠仆亳亠 亳亰舒亶仆 仗亳仍仂亢亠仆亳 Code review Input validation Continues integration checks 丐亠亳仂于舒仆亳亠 丼亠仆仄 亳从仂仄 亠仍仄 亳从仂仄 弌亠仄 亳从仂仄 Fuzzy 于仂仄舒亳亰亳仂于舒仆仆亠 亳仆仄亠仆
- 68. 丐弌丐: 丐 束丼 亊乂損
- 69. 弌弌乘 亂乘 仂亳仍舒从亳从舒 弍亠仆亳亠 亳亰舒亶仆 仗亳仍仂亢亠仆亳 Code review Input validation Continues integration checks 丐亠亳仂于舒仆亳亠 丼亠仆仄 亳从仂仄 亠仍仄 亳从仂仄 弌亠仄 亳从仂仄 Fuzzy 于仂仄舒亳亰亳仂于舒仆仆亠 亳仆仄亠仆
- 70. 弌弌乘 亂乘 仂亳仍舒从亳从舒 弍亠仆亳亠 亳亰舒亶仆 仗亳仍仂亢亠仆亳 Code review Input validation Continues integration checks 丐亠亳仂于舒仆亳亠 丼亠仆仄 亳从仂仄 亠仍仄 亳从仂仄 弌亠仄 亳从仂仄 Fuzzy 于仂仄舒亳亰亳仂于舒仆仆亠 亳仆仄亠仆
- 71. 弌弌乘 亂乘 http://sqlmap.sourceforge. net/ http://www.owasp.org/inde x.php/Category:OWASP_S QLiX_Project Scrawlr (HP) absinthe
- 72. 丐丐乘 polazhenko@sqalab.ru www.securitywiki.ru Polazhenko.moikrug.ru