Re: External Security testing of websites

2011-03-15 Thread David Connors 
On Tue, Mar 15, 2011 at 5:47 PM, Rob Andrew rand...@voyageconnect.comwrote:

 On a related note, does anyone have a cheatsheet/checklist of common web
 checks to perform with respect to securing a website against common
 attacks?


http://www.owasp.org/index.php/Main_Page is more or less the bible, though
sometimes quite misguided as to threat severity.

In reality you only need to check for a few defects to make your web apps
secure.

David.


-- 
*David Connors* | da...@codify.com | www.codify.com
Software Engineer
Codify Pty Ltd
Phone: +61 (7) 3210 6268 | Facsimile: +61 (7) 3210 6269 | Mobile: +61 417
189 363
V-Card: https://www.codify.com/cards/davidconnors
Address Info: https://www.codify.com/contact

RE: External Security testing of websites

2011-03-15 Thread Chris Walsh 
Isn't there an MSFT tool that you can use?  I remember hearing something at 
teched 2010.

Sent from my Windows Phone

-Original Message-
From: Rob Andrew
Sent: Tuesday, 15 March 2011 18:48
To: 'ozDotNet'
Subject: RE: External Security testing of websites


On a related note, does anyone have a cheatsheet/checklist of common web
checks to perform with respect to securing a website against common attacks?

Thanks
Rob

-Original Message-
From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com]
On Behalf Of Simon Haigh
Sent: Tuesday, 15 March 2011 4:04 PM
To: ozDotNet
Subject: OT: External Security testing of websites

How do people get their websites tested by 3rd party security firms
without publishing them to a live environment and running the risk of
the site being hacked and/or internal networks being compromised.

Do people have a 2nd 'sandbox' environment which is totally isolated
(airgapped) from your main business networks or do you just take the
risk.

Thanks
Simon

On 3/15/11, mike smith meski...@gmail.com wrote:
 On Tue, Mar 15, 2011 at 3:12 PM, David Connors da...@codify.com wrote:
 [Window Title]
 Windows Internet Explorer 9
 [Main Instruction]
 Internet Explorer 9 is now installed
 [Content]
 Some Internet Explorer files were in use during setup. Restart your
 computer
 to use Internet Explorer 9.
 [Restart now] [Restart later]
 Fail.

 Yes, you still can't close IE completely...

 and


http://www.itnews.com.au/News/251183,non-microsoft-hypervisors-miss-ie9-acce
leration.aspx

 VMware, and I don't know which others.


 --
 Meski

 Going to Starbucks for coffee is like going to prison for sex. Sure,
 you'll get it, but it's going to be rough - Adam Hills


--
Sent from my mobile device