Why Web Application Security?
With ever increasing need for business to open its doors to business, web application is perhaps the first face that an organisation has. This first face is also perhaps the first place to get attacked in our internet world. With ease of availability of tools and resources, and absence of secure development processes, the need for protecting you web applications is even higher than ever before.
Security testing, by itself, isn't a particularly good measure of how secure an application is, because there are an infinite number of ways that an attacker might be able to make an application break, and it simply isn't possible to test them all. However, security testing has the unique power to absolutely convince naysayer that there is a problem. Security testing has proven itself as a key ingredient in any organization that needs to trust the software it produces or uses.
OWASP Top 10
A1 - Cross Site Scripting (XSS)
A2 - Injection Flaws
A3 - Malicious File Execution
A4 - Insecure Direct Object Reference
A5 - Cross Site Request Forgery (CSRF)
A6 - Information Leakage and Improper Error Handling
A7 - Broken Authentication and Session Management
A8 - Insecure Cryptographic Storage
A9 - Insecure Communications
A10 - Failure to Restrict URL Access
|
| How Coral can help? |
Coral shall conduct security audit using the best practice methodology as per Open Web application security project (OWASP). The audit shall consist of the following range of assessment.
- Process Review
- Black Box testing
- White box testing
- Code Review
Note: The total number of attack vectors is 43 and the top 10 list is only to consider areas with higher vulnerabilities in the recent past. Coral’s assessment methodology takes into consideration a process of applicable threats which considers all 43 attack vectors as a part of the risk assessment process before initiating the testing process. |
Coral eSecure is an authorized empanelled CERT-IN Auditing organisation! |
ISO 27001 