WebApp Sec: Re: Web Application Security Testing Procedures

[Hernán M. Racciatti <hracciatti () gmail com>]

On Tue, 28 Dec 2004 12:05:49 -0500, Lecia McCalla <lmccalla () fsl org jm> wrote:
> Please provide suggestions and/ or guidelines as to what should be
> considered when testing security for web applications.
Hi Lecia,

Check de ISECOM, OWASP and OISSG site. In this, you found much
information of value for begin with your paper.

OSSTMM (ISECOM), OWASP proyect and ISSAF (OISSG) are a great reference!!!

See links:

http://www.isecom.org
http://www.owasp.org
http://www.oissg.org/issaf

See you,

-- 
Hernán Marcelo Racciatti

Core Team Member ISECOM (Institute for Security and Open Methodologies)
Coordinator OISSG, Argentina (Open Information System Security Group)

[mailto:hracciatti () gmail com]
[http://www.hernanracciatti.com.ar]