Difference between revisions of "OWASP/Training/OWASP ESAPI"

Revision as of 22:37, 14 April 2010

MODULE
OWASP Enterprise Security API
Overview & Goal
ESAPI is Enterprise security api’s for remediation of OWASP Top 10 vulnerabilities. It has generic api's for each of these vulnerability. This is a great source where application developers can see how specific issues can be remediated. The ESAPI libraries are designed to make it easier for programmers to retrofit security into existing applications. The ESAPI libraries also serve as a solid foundation for new development.
Contents	Materials
ESAPI is a collection security building blocks. All ESAPI language versions have the same basic design: There is a set of security control interfaces. They define for example types of parameters that are passed to types of security controls. There is a reference implementation for each security control. The logic is not organization‐specific and the logic is not application‐specific. An example: string‐based input validation. There are optionally your own implementations for each security control. There may be application logic contained in these classes which may be developed by or for your organization. An example: enterprise authentication.	ESAPI Project presentation ( PowerPoint ) ESAPI Video presentation ( YouTube ) ESAPI Data sheet ( PDF, Word )

@@ Line 6: / Line 6: @@
 | Content =
 &nbsp;
-ESAPI is a collection security building blocks. All OWASP ESAPI language versions have the same basic design:
+ESAPI is a collection security building blocks. All ESAPI language versions have the same basic design:
 * '''There is a set of security control interfaces.''' They define for example types of parameters that are passed to types of security controls.