Narain exploring web vulnerabilities
0 likes365 views
This presentation discusses software quality and security. It provides an overview of common vulnerabilities in websites, demonstrating vulnerability scanning tools. Key points include that nearly 11,000 attack sites and 150,000 infected sites are discovered monthly. After scanning a site, the presenter will analyze the lengthy report generated to identify true vulnerabilities and prioritize fixes. The presentation emphasizes that web security depends on the entire ecosystem and encourages continuing to learn more about the topic.
Narain exploring web vulnerabilities
- 2. Purpose Of This Presentation For Awareness in Software Quality Strictly not for wrong use, not to damage or harm any one’s intellectual property
- 3. Vote of thanks • ITS Nepal • BRAINDIGIT IT Solution • OWASP • OWASP Nepal • SQA Professionals
- 4. Overview • Introduction • Stats on attack site • Top Tools • Demo vulnerability scanning • Analysis of report
- 6. Nearly 11K Attack sites are discovered monthly
- 7. • Nearly 150 K Infected sites are • Discovered Monthly • I.e. nearly 5000 sites are infected daily • I.e. nearly 3 sites are infected per minute
- 9. After all • No software is 100% bug free, so is the web. • Difference is in level of security maintained.
- 10. Lock Demonstration 1st lock is the simplest lock that can be broken easily and by huge mass of people(x). 2nd lock is bit more complex and can be broken by(x-10,000) no of people. 3rd lock is most complex and can be broken by few people on earth lets say 2 people
- 11. Familiar words
- 12. Tools
- 13. Demo • With joomscan Check “narain-joomscan.pptx” for slides related to joomscan. • With Acunetix Check “narain- acunetix.pptx” for slides related to acunetix
- 14. LET’S ANALYSIS THE REOPRT WE HAVE NOW
- 15. The Hard Part Analysing the report of Automation (15-500 pgs) Analysing False Positives and Negatives (everything seems true) N Fixing The Holes
- 16. Web security Doesn't only depend on Security of servers Or Security of Application But to Whole Echo System of WEB Let’s Try More with our little knowledge
- 17. Thanking You