榜单
服务器优惠
AI论文
-
Index Proactive Controls
Table of contents Objective 1. Define Security Requirements 2. Leverage Security Frameworks and Libraries 3. Secure Database Access 4. Encode and Escape Data 5. Validate All ... -
Table of contents
Table of contents Objective 1. Define Security Requirements 2. Leverage Security Frameworks and Libraries 3. Secure Database Access 4. Encode and Escape Data 5. Validate All ... -
Introduction
Introduction Primary Defenses Defense Option 1: Avoid calling OS commands directly Defense option 2: Escape values added to OS commands specific to each OS Defense option 3: Par... -
OS Command Injection Defense
Introduction Primary Defenses Defense Option 1: Avoid calling OS commands directly Defense option 2: Escape values added to OS commands specific to each OS Defense option 3: Par... -
Introduction
Introduction Communication APIs Web Messaging Cross Origin Resource Sharing WebSockets Server-Sent Events Storage APIs Local Storage Client-side databases Geolocation Web... -
Rancher Security Best Practices
Rancher Security Best Practices Restrict Public Access to /version and /rancherversion Path Session Management Rancher Security Best Practices Restrict Public Access to /vers... -
Rancher Security Best Practices
Rancher Security Best Practices Restrict Public Access to /version and /rancherversion Path Session Management Rancher Security Best Practices Restrict Public Access to /vers... -
第五章 自动化扫描
第五章 自动化扫描 简介 5.1 使用 Nikto 扫描 操作步骤 工作原理 5.2 使用 Wapiti 发现漏洞 操作步骤 工作原理 5.3 使用 OWASP ZAP 扫描漏洞 准备 操作步骤 工作原理 更多 5.4 使用 w3af 扫描 操作步骤 工作原理 更多 5.5 使用 Vega 扫描器 操作步骤 工作原理 5... -
Transport Layer Protection
Introduction SSL vs TLS Server Configuration Only Support Strong Protocols Only Support Strong Ciphers Use Strong Diffie-Hellman Parameters Disable Compression Patch Cryptogr... -
3.5 限制使用UUID
限制使用UUID 详细描述 建议 参考 CWE/OWASP 限制使用UUID 详细描述 大多数移动设备具有在制造时为了识别目的而分配的唯一ID（也称为通用唯一标识符（UUID））。 例如，iOS设备分配了所谓的唯一设备标识符（UDID）。 唯一标识设备的能力对于获取，管理和保护数据通常很重要。 开发人员迅速采用UUID和UDID进行设备识...