Penetration Testing for Web Services.

Web services are often deployed with critical software security faults that open them to malicious attack. Penetration testing using commercially available automated tools can help avoid such faults, but new analysis of several popular testing tools reveals significant failings in their performance....

Descripción completa

Detalles Bibliográficos
Publicado en:	Computer (00189162) Vol. 47; no. 2; pp. 30 - 37
Autores principales:	Antunes, Nuno, Vieira, Marco
Formato:	Artículo
Publicado:	IEEE Feb2014
Materias:	Penetration testing (Computer security) Web services Computer software security Malware prevention Data security failures Security systems
Acceso en línea:	Ver este registro en EBSCOhost

Descripción
Sumario:	Web services are often deployed with critical software security faults that open them to malicious attack. Penetration testing using commercially available automated tools can help avoid such faults, but new analysis of several popular testing tools reveals significant failings in their performance. The Web extra at http://youtu.be/COgKs9e679o is an audio interview in which authors Nuno Antunes and Marco Vieira describe how their analysis of popular testing tools revealed significant performance failures and provided important insights for future improvement.