English 中文(简体)
垂直编码测试、发现和固定缺陷
原标题:Veracode testing , Detecting and fixing flaws

am working on a web application, which is getting deployed , tested and go live on client side. Now appl. is in testing mode. Client has used Veracode Testing tool for Checking vulnarabilities. We have found so many issue. Before that I would like to tell every one, I am new to this Veracode flaws fixing, I dont know much about these issues.I searched on the net but found very few information for some of these flaws. Can u please drag me out of these flaws listed below.

1)Cryptographic Issues:Insufficient Entropy. 2)Cryptographic Issues:Use of Hard-coded Cryptographic Key. 3)Trust Boundary Violation

第一例 档案中Im

在RandomPwdGenerator.java档案中,我们正在撰写密码。

Can u suggest me what exaclty expected here is. Any help appriciated.Thanx in Advance.

最佳回答

I m The Veracode Products Manager. 如果在座各位遇到挑战,请问。 如果您的客户给你贴上了Veracode平台的标识,那么你就可以利用Triage Flaws来解释每一缺陷,同时与点人一道,宣传CWE、OWASP和WASC项目中存在的缺陷类型。

如果只有人民抵抗力量的报告,则报告每一部分都有一些关于弥补缺陷的基本指导。

您还可以直接联系Veracode对更多援助的支持。

问题回答

暂无回答




相关问题
Signed executables under Linux

For security reasons, it is desirable to check the integrity of code before execution, avoiding tampered software by an attacker. So, my question is How to sign executable code and run only trusted ...

MALICIOUS_CODE EI_EXPOSE_REP Medium

I run findbugs against all of my code and only tackle the top stuff. I finally got the top stuff resolved and now am looking at the details. I have a simple entity, say a user: public class User ...

XSS on jsbin.com

Anyone know if jsbin.com implements any protection for XSS or other javascript attacks? I see jsbin links used fairly regularly on sites like this one and I can t find any indication from the site ...

Make md5 strong

Im making a website that will intergrate with game that only support md5 hashing metod (atm). Which ofc is not especially safe anymore. But how could i make it stronger? Should I just generate long ...

Why running a service as Local System is bad on windows?

I am trying to find out the difference between difference service account types. I tumbled upon this question. The answer was because it has powerful access to local resources, and Network Service ...

Brute-force/DoS prevention in PHP [closed]

I am trying to write a script to prevent brute-force login attempts in a website I m building. The logic goes something like this: User sends login information. Check if username and password is ...

热门标签