Welcome to Scribd, the world's digital library. Read, publish, and share books and documents. See more
Download
Standard view
Full view
of .
Look up keyword or section
Like this
4Activity

Table Of Contents

FOREWORD BY JEFF WILLIAMS, OWASP CHAIR
WELCOME TO THE OWASP CODE REVIEW GUIDE 1.1
ABOUT THE OPEN WEB APPLICATION SECURITY PROJECT
CODE REVIEW GUIDE HISTORY
INTRODUCTION
PREPARATION
SECURITY CODE REVIEW IN THE SDLC
SECURITY CODE REVIEW COVERAGE
APPLICATION THREAT MODELING
CODE REVIEW METRICS
CRAWLING CODE
SEARCHING FOR CODE IN J2EE/JAVA
SEARCHING FOR CODE IN CLASSIC ASP
JAVASCRIPT / WEB 2.0 KEYWORDS AND POINTERS
CODE REVIEW AND PCI DSS
REVIEWING BY TECHNICAL CONTROL: AUTHENTICATION
REVIEWING BY TECHNICAL CONTROL: AUTHORIZATION
REVIEWING BY TECHNICAL CONTROL: SESSION MANAGEMENT
REVIEWING BY TECHNICAL CONTROL: INPUT VALIDATION
REVIEWING BY TECHNICAL CONTROL: ERROR HANDLING
REVIEWING BY TECHNICAL CONTROL SECURE APPLICATION DEPLOYMENT
REVIEWING BY TECHNICAL CONTROL CRYPTOGRAPHIC CONTROLS
REVIEWING CODE FOR BUFFER OVERRUNS AND OVERFLOWS
REVIEWING CODE FOR OS INJECTION
REVIEWING CODE FOR SQL INJECTION
REVIEWING CODE FOR DATA VALIDATION
REVIEWING CODE FOR CROSS-SITE SCRIPTING
REVIEWING CODE FOR CROSS-SITE REQUEST FORGERY ISSUES
REVIEWING CODE FOR LOGGING ISSUES
REVIEWING CODE FOR SESSION INTEGRITY ISSUES
REVIEWING CODE FOR RACE CONDITIONS
ADDITIONAL SECURITY CONSIDERATIONS:
JAVA GOTCHAS
JAVA LEADING SECURITY PRACTICE
CLASSIC ASP DESIGN MISTAKES
PHP SECURITY LEADING PRACTICE
STRINGS AND INTEGERS
REVIEWING MYSQL SECURITY
REVIEWING FLASH APPLICATIONS
REVIEWING WEB SERVICES
HOW TO WRITE AN APPLICATION CODE REVIEW FINDING
AUTOMATED CODE REVIEW
TOOL DEPLOYMENT MODEL
THE OWASP ORIZON FRAMEWORK
THE OWASP CODE REVIEW TOP 9
GUIDE REFERENCES
0 of .
Results for:
No results containing your search query
P. 1
code review

code review

Ratings: (0)|Views: 414|Likes:
Published by Thiago Stuckert

More info:

Published by: Thiago Stuckert on Apr 07, 2011
Copyright:Attribution Non-commercial

Availability:

Read on Scribd mobile: iPhone, iPad and Android.
download as PDF, TXT or read online from Scribd
See more
See less

05/15/2013

pdf

text

original

You're Reading a Free Preview
Pages 5 to 72 are not shown in this preview.
You're Reading a Free Preview
Pages 77 to 163 are not shown in this preview.
You're Reading a Free Preview
Pages 168 to 189 are not shown in this preview.
You're Reading a Free Preview
Pages 194 to 204 are not shown in this preview.
You're Reading a Free Preview
Pages 209 to 234 are not shown in this preview.

Activity (4)

You've already reviewed this. Edit your review.
1 hundred reads
1 thousand reads
Yulian Sani liked this
Yulian Sani liked this

You're Reading a Free Preview

Download
scribd
/*********** DO NOT ALTER ANYTHING BELOW THIS LINE ! ************/ var s_code=s.t();if(s_code)document.write(s_code)//-->