Re: testing web app security

[Ivan Ristic <ivanr () webkreator com>]

> Are there any training courses or documents/books you can
> suggest that would help me learn the skills I need to
> make this happen? Does anyone have a site that lists tools
> (open source preferred) That I could use to help me test these
> applications?

  There's a resource/link database on the ModSecurity web
  site:

    http://www.modsecurity.org/db/resources/

  I am still adding content to it but there are many
  useful links already. In time, the resource database
  will be enhanced to allow any registered user to
  contribute.

  One paper will be of special interest to you:

  Application Assessment Questioning
  http://www.technicalinfo.net/papers/AssessmentQuestions.html

  And this book, very useful:

  HackNotes Web Security Pocket Reference
  http://www.amazon.com/exec/obidos/tg/detail/-/0072227842/

-- 
ModSecurity (http://www.modsecurity.org)
[ Open source IDS for Web applications ]