er.
Thanks for sharing! It’s the first time I heard about this project I think... that sounds like a good basic threat model starter kit
Slides from my #NDCLondon talk on the @OWASP Proactive Controls can be found here!https://www.dropbox.com/s/iu81u43rzpbbjzl/OWASP_Top_Ten_Proactive_Controls_v3_LATEST.pptx?dl=0 …
-
-
-
BTW looking on it again, I’m guessing it will be updating soon? It’s been 3 years since last release... I would expect to see “secure DB” with “secure cloud config” maybe
- Još 5 drugih odgovora
Novi razgovor -
-
-
I think the area that needs the most work is Intrusion Detection. libinjection is nice but calling out to C code and back is costly. The master branch of PHPIDS doesn't even work (I recently forked it and updated it so that it actually works). And there aren't good examples ...
-
Yea I highly doubt you’ll ever see WAF in the OWASP proactive control project. We are focusing on programming techniques for web programmers!
- Još 2 druga odgovora
Novi razgovor -
-
-
Nice presentation. I chuckled a little when I saw you mention Spring Security. I remember how much you hate it :)
-
I am just frustrated at how very complex Spring, Spring Security and Spring Boot all are. It’s twisted and error prone!
Kraj razgovora
Novi razgovor -
-
-
@manicode thanks for sharing this and for a great talk. Very useful and enjoyable! -
Thank you kindly!
Kraj razgovora
Novi razgovor -
-
-
Thanks for sharing
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.