Finding SQL Injection with Scrawlr

communities.hp.com — Microsoft worked with the HP Web Security Research group to release the Scrawlr tool. The tool will crawl a website, simultaneously analyzing the parameters of each individual web page for SQL Injection vulnerabilities. This will allow an IT/DB admin to easily find vulnerabilities similar to the ones that have been used to compromise sites in recent attacks. No source code is required to run this tool. From a starting URL, the tool recursively crawls that URL in order to build up a site tree that will be then analyzed for SQL injection vulnerabilities. read more...

add a comment | category: Security | Views: 15

Static Code Analysis Failures

portal.spidynamics.com — Static code analysis failures are costing enterprises money and reputation. White-box security testing is inherently a flawed proposition for many reasons -but it all comes down to a very simple concept: Machines do not execute source code, they execute machine code (compiled code). read more...

add a comment | category: Security | Views: 5

OWASP Enterprise Security API

code.google.com — The purpose of the ESAPI is to provide a simple interface that provides all the ordinary security functions a developer is likely to need in a clear, consistent, and easy to use way. The ESAPI architecture is very simple, just a collection of classes that encapsulate the key security operations most applications need. read more...

add a comment | category: Security | Views: 2

"Security Vulnerability" != "Defect" ; why?

portal.spidynamics.com — What is an application defect? How is that different from a security vulnerability? Historically, security vulnerabilities have been in a class all their own. In an attempt to put some urgency to the matter, security professionals have labeled defects in the security of their projects as an entirely different thing than a functional defect. read more...

add a comment | category: Security | Views: 0

The WaterHobo

waterhobo.com — Guy built a motion sensing water gun to scare rabbits out of his garden. AForge.NET used. Awesome! read more...

6 comments | category: Other | Views: 19

Top 10 Security Vulnerabilities in Web.config Files Part 2

spidynamics.com — Some of the most common and dangerous application security vulnerabilities that exist in ASP.NET Web-based applications come not from the C# or VB.NET code that make up its pages and service methods, but instead from the XML code that makes up its Web.config files. read more...

add a comment | category: Security | Views: 1

Home Automation with Windows Workflow

blogs.msdn.com — There are some pretty good Home Automation packages out there on the market. Some of these are made for installers and are thus closed to easy customization by the end user. Then there are packages that are made for hobbyists. These have good core automation systems, and provide some add-in points for customization. read more...

add a comment | category: Windows Workflow Foundation | Views: 8