This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Enterprise Business Application Vulnerability Statistics 2009"
(Created page with '== Objective == This document is the firs ststistics report which will be repeated annually with showing tendencies and changes in EBA security area. == Purpose == This do…') |
|||
| Line 1: | Line 1: | ||
== Objective == | == Objective == | ||
| − | This document is the | + | This document is the first statistics report which will be repeated annually with showing tendencies and changes in Enterprise Business Application Security area. |
== Purpose == | == Purpose == | ||
| − | This document we will show a result of statistical research in the Business Application security area made by DSECRG and OWASP-EAS project. The purpose of this document is to raise awareness about Enterprise Business Application security by showing the current number of vulnerabilities found in those applications | + | This document we will show a result of statistical research in the Business Application security area made by DSECRG and OWASP-EAS project. The purpose of this document is to raise awareness about Enterprise Business Application security by showing the current number of vulnerabilities found in those applications, how critical are those and what tendences we see. |
== Intro == | == Intro == | ||
| Line 16: | Line 16: | ||
• Front-end security | • Front-end security | ||
| − | Every described layer may have their own vulnerabilities that can give attacker full access to business data even if other layers are fully secured. The purpose of this document to Increase awareness of Business Application security. | + | Every described layer may have their own vulnerabilities that can give attacker full access to business data even if other layers are fully secured. |
| + | In this document all the popular applications from described levels and their vulnerabilities vill be shown. The purpose of this document to Increase awareness of Business Application security. | ||
== Links == | == Links == | ||
| − | |||
| − | + | [http://dsecrg.com Business applications vulnerability statistics 2009 and future trends] - Presentation by Dmitry Evdokimov and Dmityy Chastuhin | |
| − | + | [http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a SAP SDN page with latest vulnerabilities] | |
| − | [http://www. | + | [http://www.oracle.com/security/critical-patch-update.html Oracle Secalert CPU page with latest vulnerabilities] |
| + | Annual report comming soon... | ||
== Authors== | == Authors== | ||
| − | Alexander Polyakov | + | Alexander Polyakov (DSecRG) |
| − | Dmitriy Chastuhin ( | + | Dmitriy Chastuhin (DSecRG) |
| − | Dmitriy Evdokimov ( | + | Dmitriy Evdokimov (DSecRG) |
Revision as of 11:16, 12 October 2010
Objective
This document is the first statistics report which will be repeated annually with showing tendencies and changes in Enterprise Business Application Security area.
Purpose
This document we will show a result of statistical research in the Business Application security area made by DSECRG and OWASP-EAS project. The purpose of this document is to raise awareness about Enterprise Business Application security by showing the current number of vulnerabilities found in those applications, how critical are those and what tendences we see.
Intro
Business applications like ERP, CRM, SRM and others are one of the major topics within the field of computer security as these applications store business data and any vulnerability in these applications will cause a significant monetary loss. Nonetheless people still don’t pay much attention to Enterprise Business Application area as we see during our and our collegues research and audit data. Business applications are very large and complex systems that consists of different components such as Database server, Front-end, Web server, Application server and other parts. Also those systems lay on different Hardware and software that can have their own vulnerabilities. Overall security of Enterprise Business Application consists of different layers such as: • Network architecture security • Os security • Database security • Application security • Front-end security
Every described layer may have their own vulnerabilities that can give attacker full access to business data even if other layers are fully secured. In this document all the popular applications from described levels and their vulnerabilities vill be shown. The purpose of this document to Increase awareness of Business Application security.
Links
Business applications vulnerability statistics 2009 and future trends - Presentation by Dmitry Evdokimov and Dmityy Chastuhin
SAP SDN page with latest vulnerabilities
Oracle Secalert CPU page with latest vulnerabilities
Annual report comming soon...
Authors
Alexander Polyakov (DSecRG) Dmitriy Chastuhin (DSecRG) Dmitriy Evdokimov (DSecRG)
Contributors
Leodid Kats (dsec.ru) Olga Yurova (dsec.ru)
