OWASP Web Services Project

Slides:

Advertisements

Similar presentations

Web Service Composition Prepared by Robert Ma February 5, 2007.

Advertisements

Don’t get Stung (An introduction to the OWASP Top Ten Project) Barry Dorrans Microsoft Information Security Tools NEW AND IMPROVED!

Copyright © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the OWASP License. The OWASP.

Hands on Demonstration for Testing Security in Web Applications

0 Web Service Security JongSu Bae. 1  Introduction 2. Web Service Security 3. Web Service Security Mechanism 4. Tool Support 5. Q&A  Contents.

E-Business Risks Chapter Seven. E-Business Models EDI Web pages The online environment Distributed e-business and intranets Supply chain linkage Collaborative.

Copyright © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the OWASP License. The OWASP.

WS-Security TC Christopher Kaler Kelvin Lawrence.

Copyright © The OWASP Foundation This work is available under the Creative Commons SA 3.0 license The OWASP Foundation OWASP

Secure Web Services Akylbek Zhumabayev Rochester Institute of Technologies.

Web services security I

What is OWASP OWASP Live CD Live Demo Omar Sherin-OWASP Egypt.

Is Your Website Hackable? Check with Acunetix Web Vulnerability Scanner. Acunetix Web Vulnerability Scanner V9.

OWASP Website Workshop 5 th November OBJECTIVES Brainstorming, outlining high-level goals for the site. Defining the audience, setting the "tone"

Copyright © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the OWASP License. The OWASP.

The OWASP Foundation OWASP The Open Web Application Security Project Join the application security community for free, unbiased, open.

Ryan Dewhurst - 20th March 2012 Web Application (PHP) Security.

Copyright © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation.

WS-Security: SOAP Message Security Web-enhanced Information Management (WHIM) Justin R. Wang Professor Kaiser.

Copyright © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the OWASP License. The OWASP.

Material being covered 3/9 Remainder of Text Chapter 6 (Q5, 6) Text Chapter 6A Material Posted 3/9 Midterm Information Introduction to Text Chapter 7.

Copyright © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the OWASP License. The OWASP.

Copyright © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation.

WS-Security Protocol Ramkumar Chandrasekharan CS 265.

Copyright © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation.

Dr. Rebhi S. Baraka Advanced Topics in Information Technology (SICT 4310) Department of Computer Science Faculty of Information Technology.

Copyright 2009 © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the OWASP License. The OWASP.

Copyright © The OWASP Foundation This work is available under the Creative Commons SA 2.5 license The OWASP Foundation OWASP AppSec India Aug 2008.

Copyright © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation.

Kemal Baykal Rasim Ismayilov

SECURITY ON THE WEB SITE Miguel Angel Vazquez Gonzalez.

Gridshell Security Master Project Akylbek Zhumabayev Rochester Institute of Technology.

Web Services Security Patterns Alex Mackman CM Group Ltd

Copyright © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike.

Copyright © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation.

OWASP 1 Industry Committee – Recently Completed  InfraGard Presentation to Denver chapter of InfraGard (US critical national infrastructure)  DPC BS.

Copyright © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation.

Secure Web Services Akylbek Zhumabayev Rochester Institute of Technologies.

SnowFROC Front Range OWASP Conference February 18 th, 2016.

VIRTUAL SERVERS Chapter 7. 2 OVERVIEW Exchange Server 2003 virtual servers Virtual servers in a clustering environment Creating additional virtual servers.

A BRIEF HISTORY OF THE INTERNET, WEB, AND HTML. Internet vs. World Wide Web What is The Internet? The Internet is a massive network of networks, a networking.

7 Adding Signatures to s Step 1 Click on ‘Tools’ option in the toolbar at the top of the page. Click on ‘Options’

Intro to Ethical Hacking

Access Policy - Federation March 23, 2016

Web Application Vulnerabilities

Canberra OWASP Chapter meeting

Application Layer Functionality and Protocols

OWASP Ireland Limerick Chapter Meeting

OWASP Site Generator Refresh

OWASP WebGoat v5 16 April 2010.

Application Layer Functionality and Protocols

Application Layer Functionality and Protocols

OWASP in favor of a more secure world

Tour of OWASP’s projects

OWASP Charlotte What, Why, Where and How

Application Layer Functionality and Protocols

Sebastien Deleersnyder CISSP May, 2006

Bangalore OWASP Chapter 2006 First Chapter Meeting

Tim Bornholtz Director of Technology Services

CS/IS 196 Final Exam Review

Agenda About OWASP Upcoming Events

Application Layer Functionality and Protocols

Application Layer Functionality and Protocols

Application Layer Functionality and Protocols

Application Layer Functionality and Protocols

Application Layer Functionality and Protocols

Presentation transcript:

OWASP Web Services Project How OWASP can become the leading destination for “Web Service Application Security” Alex Smolen OWASP So Cal Chapter

What are web services? Web applications vs. web services Examples of web services Why web services?

Web Service Security Transport Layer Message Layer Application Layer SSL Message Layer WS-Security XML Encryption, XML Signature, SAML,… WS-* Application Layer OWASP Top Ten +

Additional Application Threats to Web Services Parser Attacks XML Bombs External Entities Backend Attacks XPath, XQuery XML Injection Logical Attacks

Web Service Security Resources OASIS Microsoft, IBM, Sun, etc… Books, blogs, articles Why OWASP?

Current Projects WebGoat 3.7 OWASP Guide OWASP Testing Guide

Additional Ideas WebScarab Web service security landing page FAQ Tools for web service developers (?)

How You Can Help Learn about Web Service Security Join OWASP Web Services Mailing List Work on OWASP Web Services Project Charter Contribute to OWASP Web Services Projects Contact me (asmolen@parasoft.com, alex.smolen@owasp.org)