Four Out of Five Applications Written in Web Scripting Languages Fail OWASP Top 10

首页> 外文期刊>Software world >Four Out of Five Applications Written in Web Scripting Languages Fail OWASP Top 10

【24h】

Four Out of Five Applications Written in Web Scripting Languages Fail OWASP Top 10

机译：用Web脚本语言编写的五分之四的应用程序失败OWASP排名前10位

获取原文

获取原文并翻译 | 示例

掌桥外文数据库（机构版） >>

开具论文收录证明 >>

文献代查 >>

页面导航

摘要
著录项
相似文献
相关主题

摘要

Veracode's Supplement to the 2015 State of Software Security: Focus on Application Development report benchmarks application risk profiles by type of programming language. Veracode have released a supplement to the 2015 State of Software Security: Focus on Application Development a report based on benchmarking analytics from its cloud-based platform. The report shows that four out of five applications written in PHP, Classic ASP and ColdFusion that were assessed by Veracode during the period covered by the report failed at least one of the OWASP Top 10, an industry-standard security benchmark. Given the volume of PHP applications developed for the top three content management systems (CMS) -WordPress, Drupal and Joomla, which represent more than 70 percent[i] of all CMSs in use today - these findings raise concern over potential security vulnerabilities in millions of websites.

机译：Veracode的2015年软件安全状况补充：专注于应用程序开发报告按编程语言类型对应用程序风险简介进行基准测试。 Veracode发布了《 2015年软件安全状况：针对应用程序开发的补充》，该报告基于其基于云平台的基准分析得出的报告。该报告显示，在报告所涵盖的时期内，由Veracode评估的用PHP，Classic ASP和ColdFusion编写的五个应用程序中，有四个失败了至少一个行业标准安全性基准OWASP Top 10。鉴于为前三个内容管理系统（CMS）开发的PHP应用程序数量众多，WordPress，Drupal和Joomla占当今使用的所有CMS的70％[i]以上，这些发现引起了人们对数以百万计的潜在安全漏洞的担忧网站。

著录项

来源
《Software world》 |2016年第1期|6-7|共2页
作者

展开▼
作者单位

展开▼
收录信息
原文格式 PDF
正文语种 eng
中图分类
关键词

相似文献

外文文献
中文文献
专利

1. Removing Cross-Site Scripting Vulnerabilities from Web Applications using the OWASP ESAPI Security Guidelines [J] . Isatou Hydara, Abu Bakar Md Sultan, Hazura Zulzalil, Indian Journal of Science and Technology . 2015,第30期

机译：使用OWASP ESAPI安全准则从Web应用程序中删除跨站点脚本漏洞
2. Removing Cross-Site Scripting Vulnerabilities from Web Applications using the OWASP ESAPI Security Guidelines [J] . Isatou Hydara, Abu Bakar Md Sultan, Hazura Zulzalil, Indian Journal of Science and Technology . 2015,第30期

机译：使用OWASP ESAPI安全准则从Web应用程序中删除跨站点脚本漏洞
3. SQL Injection and Cross Site Scripting Prevention using OWASP ModSecurity Web Application Firewall [J] . - Robinson, Memen Akbar, Muhammad Arif Fadhly Ridha International Journal on Informatics Visualization: JOIV . 2018,第4期

机译：使用OWASP ModSecurity Web应用程序防火墙的SQL注入和跨站点脚本防护
4. An OWASP Top Ten Driven Survey on Web Application Protection Methods [C] . Ouissem Ben Fredj, Omar Cheikhrouhou, Moez Krichen, International Conference on Risks and Security of Internet and Systems . 2020

机译：Web应用程序保护方法的OWASP十大驱动调查
5. Spoken and written language development of 8- to 10-year-old children with language impairment: Four case studies. [D] . Miller, Judith Coleman. 1998

机译：8至10岁语言障碍儿童的口语和书面语言发展：四个案例研究。
6. Automatic classification of written descriptions by healthy adults:An overview of the application of natural language processing and machinelearning techniques to clinical discourse analysis [O] . Cíntia Matsuda Toledo, Andre Cunha, Carolina Scarton, 2014

机译：健康成年人对书面描述的自动分类：自然语言处理和机器应用概述临床话语分析的学习技巧
7. On Combining Static, Dynamic and Interactive Analysis Security Testing Tools to Improve OWASP Top Ten Security Vulnerability Detection in Web Applications [O] . Francesc Mateo Tudela, Juan-Ramón Bermejo Higuera, Javier Bermejo Higuera, 2020

机译：组合静态，动态和交互式分析安全测试工具在Web应用程序中提高OWASP十大安全漏洞检测

Four Out of Five Applications Written in Web Scripting Languages Fail OWASP Top 10

摘要

著录项

相似文献

相关主题

期刊订阅