Bounds Checking - Revision history

Paco at 17:44, 28 July 2016

2016-07-28T17:44:01Z

Johanna Curiel at 02:00, 28 July 2016

2016-07-28T02:00:33Z

KirstenS at 23:55, 7 April 2009

2009-04-07T23:55:39Z

KirstenS at 19:02, 27 October 2008

2008-10-27T19:02:20Z

KirstenS at 18:38, 27 October 2008

2008-10-27T18:38:45Z

KirstenS at 18:57, 23 October 2008

2008-10-23T18:57:46Z

KirstenS at 16:53, 23 October 2008

2008-10-23T16:53:23Z

KirstenS: New page: {{Template:Control}}
Category:OWASP ASDR Project ASDR Table of ContentsTOC Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}''' ==Descript...

2008-09-20T11:34:53Z

New page: {{Template:Control}} <br> Category:OWASP ASDR Project ASDR Table of Contents__TOC__ Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}''' ==Descript...

New page

{{Template:Control}}
<br>
[[Category:OWASP ASDR Project]]
[[ASDR Table of Contents]]__TOC__

Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''

==Description==

A control (countermeasure or security control) is a protection mechanism that prevents, deters, or detects attacks, or prevents or reduces vulnerabilities.

# Start with a one-sentence description of the control
# How does the countermeasure work?
# What are some examples of implementations of the control (steer clear of specific products)

==Risk Factors==

* Talk about the [[OWASP Risk Rating Methodology|factors]] that this control affects
* What effect does this countermeasure have on the attack or vulnerability?
* Does this control reduce the technical or business impact?

==Difficulty to Implement==

* Discuss the typical difficulty of implementing this control, emphasizing the factors that make it easier or harder
* Steer clear of language/platform specific information here

==Examples==

===Short example name===
: A short example description, small picture, or sample code with [http://www.site.com links]

===Short example name===
: A short example description, small picture, or sample code with [http://www.site.com links]

==Related [[Attacks]]==

* [[Attack 1]]
* [[Attack 2]]

==Related [[Vulnerabilities]]==

* [[Vulnerability 1]]
* [[Vulnerabiltiy 2]]

Note: the contents of "Related Problems" sections should be placed here

==Related [[Controls]]==

* [[Control 1]]
* [[Control 2]]

Note: contents of "Avoidance and Mitigation" and "Countermeasure" related Sections should be placed here

==References==

* http://www.link1.com
* [http://www.link2.com Title for the link2]

In addition, one should classify control based on the following subcategories: Ex:<nowiki>[[Category:Error Handling Control]]</nowiki>

Availability Control

Authorization Control

Authentication Control

Concurrency Control

Configuration Control

Cryptographic Control

Encoding Control

Error Handling Control

Input Validation Control

Logging and Auditing Control

Session Management Control

__NOTOC__

← Older revision		Revision as of 17:44, 28 July 2016
Line 65:		Line 65:
	TBD		TBD

−	[[Category:FIXME\|	+	[[Category:FIXME/delete\|

← Older revision		Revision as of 18:57, 23 October 2008
Line 1:		Line 1:
		+	{{Template:Stub}}
		+
	{{Template:Control}}		{{Template:Control}}
	<br>		<br>

@@ Line 2: / Line 2: @@
 {{Template:Control}}
 <br>
 [[Category:OWASP ASDR Project]]

@@ Line 4: / Line 4: @@
 <br>
 [[Category:OWASP ASDR Project]]
 Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''

@@ Line 49: / Line 49: @@
 * [[Vulnerability 1]]
 * [[Vulnerabiltiy 2]]
@@ Line 58: / Line 56: @@
 * [[Control 2]]
 ==References==

@@ Line 62: / Line 62: @@
 ==References==
-* http://www.link1.com
+TBD
-* [http://www.link2.com Title for the link2]
@@ Line 88: / Line 89: @@
 Logging and Auditing Control
-Session Management Control
+Session Management Control]]
 __NOTOC__
 [[Category:Control]]