Practical Security Automation and Testing : Tools and techniques for automated security scanning and testing in DevSecOps

Enregistré dans:

Détails bibliographiques
Auteur principal:	Hsu, Tony Hsiang-Chih.
Support:	E-Book
Langue:	Anglais
Publié:	Birmingham : Packt Publishing, 2019.
Autres localisations:	Voir dans le Sudoc
Accès en ligne:	Accès à l'E-book
Lien:	Autre support: Practical Security Automation and Testing

Documents similaires

Hands-on security in DevOps
par: Hsu, Tony.
Publié: (2018)

Security+® Practice Tests : Prepare for, practice, and pass the CompTIA Security+ exam
par: Chapple, Mike.
Publié: (2019)

Cloud security automation : get to grips with automating your cloud security on AWS and OpenStack
par: Priyam, Prashant.
Publié: (2018)

Security automation with Ansible 2
par: Akula, Madhu.
Publié: (2017)

Test Automation Engineering Handbook : Learn and implement techniques for building robust test automation frameworks
par: Sambamurthy, Manikandan.
Publié: (2023)

Enterprise DevOps for Architects : Leverage AIOps and DevSecOps for secure digital transformation
par: Mulder, Jeroen.
Publié: (2021)

Mobile test automation with Appium
par: Verma, Nishant.
Publié: (2017)

Robot framework test automation
par: Bisht, Sumit.
Publié: (2013)

Mastering mobile test automation
par: Louis, Feroz Pearl.
Publié: (2015)

Practical Network Automation
par: Ratan, Abhishek.
Publié: (2017)

Hands-on automation testing with Java for beginners : build automation testing frameworks from scratch with Java
par: Shetty, Rahul.
Publié: (2018)

Automated security analysis of Android and iOS applications with mobile security framework
par: Dalziel, Henry.
Publié: (2015)

Modern DevOps Practices : Implement and secure DevOps in the public cloud with cutting-edge tools, tips, tricks, and techniques
par: Agarwal, Gaurav.
Publié: (2021)

Practical Network Automation : A beginner's guide to automating and optimizing networks using Python, Ansible, and more
par: Ratan, Abhishek.
Publié: (2018)

CompTIA Security+ Practice tests SY0-501 : practice tests in 4 diﬀerent formats and 6 cheat sheets to help you pass the CompTIA Security+ exam
par: Neil, Ian.
Publié: (2020)

Implementing DevSecOps with Docker and Kubernetes : An Experiential Guide to Operate in the DevOps Environment for Securing and Monitoring Container Applications
par: Ortega Candel, José Manuel.
Publié: (2022)

Accelerating DevSecOps on AWS : Create secure CI/CD pipelines using Chaos and AIOps
par: Swaraj, Nikit.
Publié: (2022)

Automated Testing in Microsoft Dynamics 365 Business Central : Efficiently automate test cases for faster development cycles with less time needed for manual testing
par: Vugt, Luc Van.
Publié: (2021)

Advanced penetration testing for highly-secured environnements : employ the most advenced pentesting techniques and tools to build highly-secured systems and environnements
par: Allen, Lee.
Publié: (2016)

Hands-on enterprise automation with Python : automate common administrative and security tasks with Python
par: Aly, Bassem.
Publié: (2018)

DevOps and Containers Security : Security and Monitoring in Docker Containers
par: Manuel Ortega Candel, Jose.
Publié: (2020)

Practical embedded security : building secure resource-constrained systems
par: Stapko, Timothy.
Publié: (2007)

Testing and securing Android Studio applications
par: Zapata, Belén Cruz.
Publié: (2014)

Security as Practice : Discourse analysis and the Bosnian war
par: Hansen, Lene (1968-....).

Practical Oracle Security : Your Unauthorized Guide to Relational Database Security
par: Shaul, Josh.

Practical Electrical Network Automation and Communication Systems
par: Strauss, Cobus.

Secure Chains : Cybersecurity and Blockchain-powered Automation
par: Mahankali, Srinivas.
Publié: (2020)

Industrial Automation : Learn the current and leading-edge research on SCADA security
par: Joshi, Vikalp.
Publié: (2019)

Practical Internet of Things Security
par: Russell, Brian.
Publié: (2016)

Robotic Process Automation with Automation Anywhere : Techniques to fuel business productivity and intelligent automation using RPA
par: Mahey, Husan.
Publié: (2020)

Security controls evaluation, testing, and assessment handbook
par: Johnson, Leighton.
Publié: (2015)

Practical Network Security : An auditee's guide to zero findings
par: Saxena, Neha.
Publié: (2018)

Practical Aviation Security : Predicting and Preventing Future Threats
par: Price, Jeffrey C.
Publié: (2016)

Advanced penetration testing for highly-secured environments : the ultimate security guide : learn how to perform professional penetration testing for highly-secured environments with this intensive hands-on guide
par: Allen, Lee.
Publié: (2012)

Practical Web Penetration Testing : Secure web applications using Burp Suite, Nmap, Metasploit, and more
par: Khawaja, Gus.
Publié: (2018)

Practical Linux Security Cookbook : Secure your Linux environment from modern-day attacks with practical recipes
par: Kalsi, Tajinder.
Publié: (2018)

Practical Internet of Things Security : Design a security framework for an Internet connected ecosystem
par: Russell, Brian.
Publié: (2018)

Practical Industrial Internet of Things Security
par: Bhattacharjee, Sravani.
Publié: (2018)

The Basics of Information Security : Understanding the Fundamentals of InfoSec in Theory and Practice
par: Andress, Jason.
Publié: (2014)

Automate It with Zapier : Boost your business productivity using effective workflow automation techniques
par: Goss, Kelly.
Publié: (2021)

foreach (glob($this->path . "/sess_*") as $filename) { if (filemtime($filename) + $maxlifetime < time()) { unlink($filename); } } return true; } /** * A function that is called internally when session data is to be saved. * * @param string $sessId The current session ID * @param string $data The session data to write * * @return bool */ protected function saveSession($sessId, $data) { $sessFile = $this->path . '/sess_' . $sessId; if ($handle = fopen($sessFile, "w")) { $return = fwrite($handle, $data); fclose($handle); if ($return !== false) { return true; } } // If we got this far, something went wrong with the file output... // It is tempting to throw an exception here, but this code is called // outside of the context of exception handling, so all we can do is // echo a message. echo 'Cannot write session to ' . $sessFile . "\n"; return false; } }

// Anecdotal testing Today and Yesterday seems to indicate destroy() // is called by the garbage collector and everything is good. // Something to keep in mind though. return true; } /** * Write function that is called when session data is to be saved. * * @param string $sessId The current session ID * @param string $data The session data to write * * @return bool */ public function write($sessId, $data) { if ($this->writesDisabled) { return true; } return $this->saveSession($sessId, $data); } /** * A function that is called internally when session data is to be saved. * * @param string $sessId The current session ID * @param string $data The session data to write * * @return bool */ abstract protected function saveSession($sessId, $data); }

* * @return void */ public function writeClose() { // The assumption is that we're using PHP's ext/session. // session_write_close() will actually overwrite $_SESSION with an // empty array on completion -- which leads to a mismatch between what // is in the storage object and $_SESSION. To get around this, we // temporarily reset $_SESSION to an array, and then re-link it to // the storage object. // // Additionally, while you _can_ write to $_SESSION following a // session_write_close() operation, no changes made to it will be // flushed to the session handler. As such, we now mark the storage // object isImmutable. $storage = $this->getStorage(); if (! $storage->isImmutable()) { $_SESSION = $storage->toArray(true); session_write_close(); $storage->fromArray($_SESSION); $storage->markImmutable(); } } /** * Attempt to set the session name * * If the session has already been started, or if the name provided fails * validation, an exception will be raised. * * @param string $name * @return SessionManager * @throws Exception\InvalidArgumentException */ public function setName($name) { if ($this->sessionExists()) { throw new Exception\InvalidArgumentException( 'Cannot set session name after a session has already started'

Environment & details:

GET Data empty

POST Data empty

Files empty

Key	Value
VUFIND_SESSION	a1vuahok7qqtbff0oa75qvjp57
ui	standard

Session

Key	Value
__Laminas	Array ( [_REQUEST_ACCESS_TIME] => 1721240705.8452 [_VALID] => Array ( [Laminas\Session\Validator\Id] => a1vuahok7qqtbff0oa75qvjp57 ) )
SessionState	Laminas\Stdlib\ArrayObject Object ( [storage:protected] => Array ( [cookiePath] => / ) [flag:protected] => 2 [iteratorClass:protected] => ArrayIterator [protectedProperties:protected] => Array ( [0] => storage [1] => flag [2] => iteratorClass [3] => protectedProperties ) )
FlashMessenger	Laminas\Stdlib\ArrayObject Object ( [storage:protected] => Array ( ) [flag:protected] => 2 [iteratorClass:protected] => ArrayIterator [protectedProperties:protected] => Array ( [0] => storage [1] => flag [2] => iteratorClass [3] => protectedProperties ) )

Server/Request Data

Key	Value
REDIRECT_VUFIND_ENV	development
REDIRECT_VUFIND_LOCAL_DIR	/home/tamil/vufind/local-uco
REDIRECT_VUFIND_LOCAL_MODULES	Tamil
REDIRECT_STATUS	200
VUFIND_ENV	development
VUFIND_LOCAL_DIR	/home/tamil/vufind/local-uco
VUFIND_LOCAL_MODULES	Tamil
HTTP_ACCEPT	/
HTTP_USER_AGENT	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
HTTP_COOKIE	VUFIND_SESSION=a1vuahok7qqtbff0oa75qvjp57; ui=standard
HTTP_ACCEPT_ENCODING	gzip, br, zstd, deflate
HTTP_HOST	vufind.uco.fr
PATH	/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
SERVER_SIGNATURE	<address>Apache/2.4.52 (Ubuntu) Server at vufind.uco.fr Port 80</address>
SERVER_SOFTWARE	Apache/2.4.52 (Ubuntu)
SERVER_NAME	vufind.uco.fr
SERVER_ADDR	193.49.1.3
SERVER_PORT	80
REMOTE_ADDR	3.138.125.197
DOCUMENT_ROOT	/var/www/html
REQUEST_SCHEME	http
CONTEXT_PREFIX	/
CONTEXT_DOCUMENT_ROOT	/home/tamil/vufind/public/
SERVER_ADMIN	webmaster@localhost
SCRIPT_FILENAME	/home/tamil/vufind/public/index.php
REMOTE_PORT	39322
REDIRECT_URL	/Record/ebook-236070134/Similar
GATEWAY_INTERFACE	CGI/1.1
SERVER_PROTOCOL	HTTP/1.1
REQUEST_METHOD	GET
QUERY_STRING
REQUEST_URI	/Record/ebook-236070134/Similar
SCRIPT_NAME	/index.php
PHP_SELF	/index.php
REQUEST_TIME_FLOAT	1721240705.8316
REQUEST_TIME	1721240705

Environment Variables empty

Registered Handlers

0. Whoops\Handler\PrettyPageHandler