Self-protected web applications
Software vulnerabilities come in two basic flavors: security bugs and design flaws. Security bugs, such as the popular SQL Injection... View Article
At least in my personal experience it’s very common to have conversations with software developers that are familiar and aware... View Article
Are we really secure developing applications in ASP.NET MVC? Almost all applications are vulnerable to attack. According to Gartner, applications... View Article
Do you need to build security into your apps but you are not a security expert? As part of Hdiv... View Article
The number of applications that are based on a client side MVC architecture, such as mobile native applications (iOS or... View Article
What are business logic vulnerabilities? Business logic vulnerabilities are the result of faulty application logic. These vulnerabilities are specific... View Article
HDIV Enterprise is a commercial version of HDIV open-source product that includes exclusive functionalities and enterprise level support services. It is offered as part of a HDIV Enterprise Subscription and improves the security, scalability and usability of previous versions.
HDIV has announced today the release of Developer Edition (HDIV DE). This makes a step forward detecting these vulnerable points, SQL Injection and XSS, within the source code in runtime, just browsing your web site.
In order to understand more deeply the differences between HDIV and ESAPI we will try to compare the features to cover OWASP top 10 web risks with both frameworks
We have used Acunetix Web Vulnerability Scanner to test our Spring MVC and HDIV example application to protect from OWASP Top Ten web risks.