OWASP China Security Technology Forum Review | How Security Validation Verifies Web Security

On December 17, the 2022 OWASP China Security Technology Forum was successfully held in Shenzhen, with dozens of industry experts and security directors participating in this forum. Wang Jingpu, CTO of Security Validation (Saison), was invited to deliver a keynote speech on "How Security Validation Validates Web Security" at this forum, discussing the importance of CTEM to enterprises, what Web security includes, and how Security Validation validates Web security.

CTEM, or Continuous Threat Exposure Management, is a more pragmatic and effective systematic threat management methodology according to Gartner, which can significantly reduce the likelihood of organizations suffering from security breach events.

By 2026, organizations prioritizing their security investments based on a continuous exposure management program will be three times less likely to suffer from a breach.

Gartner divides CTEM into five steps, which are scoping, discovery, prioritization, validation, and mobilization.

The detection and protection of Web attacks and security validation exist in each link.

Web security includes Web server security, API security, CDN security, etc. Security Validation can provide you with WAF policy protection validation, attack simulation validation of website Web vulnerability exploitation patterns, and more accurate Web validation, accurately determining which defensive measure detected or blocked the attack, and accurately determining whether the attack was correctly identified. In addition, Security Validation can also provide API security validation and browser-related validation.

For enterprises, Web validation alone is far from enough. Today's rigid passive security policies put enterprises' competitiveness, financial standing, and market growth at risk at all times. We recommend that enterprises adopt proactive security strategies or even predictive cybersecurity operations, and conduct comprehensive security effectiveness validation from an attacker's perspective. Security Validation has an attack library covering different attack stages of the complete kill chain, and the attack library also covers all ATT&CK techniques and tactics, providing strategic and technical support for enterprise security construction, and continuously validating the effectiveness of the defensive system.

Add the Security Validation Official Customer Service to obtain the Presentation PPT materials!