OWASP Hands-on

OWASP testing guide is a particular test suite to cover OWASP Top 10

• True

• False

How many vulnerabilities does OWASP cover?

• 10

• 50

• 70

• over 100

Which one is a free & open-source SAST tool?

• 42Crunch

• .NET Security Guard

• Aikido Security

• Arnica

How many aspects does OWASP testing guide cover?

• 11

• 12

• 14

• 17

Which one is a free & open-source DAST tool?

• Zed Attack Proxy

• Codename SCNR

• StackHawk

• CodeSweep

Which Code Quality tool support multi-language & multi platform?

• SpotBugs

• SonarQube

• DeepScan

• UniversalScan

Defensive programming is …..

• A form of design

• A model

• A language

• A framework

GitLab CI pipelines leverage open-source security tools

• True

• False

SAST effectively detects vulnerabilities related to authentication and authorization

• True

• False

How should defensive programming deal with 3^rd party lib?

• Do not use 3^rd party libs

• Wrap 3^rd  party libs with your own gateways

• Keep 3^rd party libs up-to-date

• Refer well-known 3^rd party libs list