Interactive Analysis Security Testing

Good Article to explain IAST


Static and Dynamic Scanner to detect, in development

Use tools to attack in operations. 





Comments

Post a Comment

Popular posts from this blog

My review of EuroSTAR 2015 - Maastrict

Image
There are lot of great talks in EuroSTAR 2015.  I was really enjoy it, as well as the city Maastricht. Tidy, charming city with history, gourmet and exclusive shopping :) There are a few hot words into my ears. Autonomous management , self steer group.  DevOps is all about communication, collaboration, transparency.   Always start with WHY, follow with WHAT then HOW Continuous learning is the way to survival for tester.   Dedicate team, Automation in Agile.  Small team with B ig goal, leads to -> disruptive .  ************************************************************************** DevOps: My feel of DevOps is Collabration and Communcation.  To achieve efficiency, TA should be communication with different parities, get the needs from them ,and make the things happen. Open mind and fearless. [TU4].  Continuous Delivery means Continuous  Testing , but not means Continuous  Deployment  [TU4]. Communication ...
Read more

The trend in Test

Highlights: The programming skill of programmer are in general better than before.  Modern programming languages and frameworks make programmer potentially make less error.  Legacy system still lack of proper test, but the situation in many newly built system are better. Unit test and Integration test are paid more attentions, and in place.  The continuous integration and continuous deployment make the team the correct the error more fast and more often.  So if the team are confident can correct the defect within a short time, the formal manual test for the non-core function could be reduced.  But this is not true for safety or business critical product, which however only a very small part in the whole software industry.  The test need deeper domain knowledge and user knowledge to setup complex testcase.  Better architecture make the automation could be focus on the functional level, while the nature of frontend may not suitable for auto test ...
Read more

Docker Container mount to a mysteric folder which I don't know where is it.

Env:  Ubuntu 20.04  When install too many versions of docker on the same machine,  it could have a weird mount behavior. I have a folder called /media/xxx/uuid/prod/db, hereafter, "local db folder".   and I mount this folder to the /db folder inside container, hereafter "container db folder".    I start container like this:  docker run --rm --mount type=bind,source=/media/xxx/uuid/prod/db,target=/db image:latest As you can expected, something happened. the container was  up and running.  the mount seemed not right. If I add a new file to the local db folder , the new file was not available in container db folder ,  and vice versa,  if I add a new file to the container db folder ,  the file wasn't available in the local db folder either.   Looks like the local db folder and container db folder wasn't mapped.   Run docker inspect, I could see the mount configure was correct, from  /media/xxx/uuid/pr...
Read more