April 2023
Beginner to intermediate
396 pages
8h 23m
Korean
Content preview from 자바 개발자를 위한 데브옵스 툴
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
237
7
장
바이너리 보안
바이너리 스캔을 우선시해야 하는 이유는
7
.
8
.
4
절에서 설명한다.
7.3.2 7.3.2
동적 애플리케이션 보안 테스트동적 애플리케이션 보안 테스트
동적 애플리케이션 보안 테스트동적 애플리케이션 보안 테스트
dynamic
application
security
testing
(
DAST
)는 실행 중인 애플리케이션
(주로 웹 애플리케이션)의 보안을 분석하는 기법이다. 다양한 공격 시나리오를 펼치며 최대한
많은 취약점을 식별하는 것이 기본 원리다. ‘
동적동적
dynamic
’이라는 용어는 실제로 실행되고 있는
애플리케이션에서 테스트를 진행한다는 의미를 담고 있다.
DAST
가 제대로 작동하려면 테스
트 시스템과 프로덕션 환경의 애플리케이션 행동이 일치해야 한다. 환경 설정, 로드 밸런서, 방
화벽 등의 조건이 조금만 변해도 양쪽의 행동은 확연히 달라질 것이다.
DAST
는 외부에서 애플리케이션을 관찰하는 불투명 테스트의 일종이다. 이러한 검사에서 애
플리케이션의 기술적 특성은 크게 중요하지 않다. 오로지 외부에서 애플리케이션에 접근하며
보편적인 접근 방식을 따르기 때문이다. 다시 말해 소스 코드를 통해 얻을 수 있는 모든 정보가
테스트의 시야 밖에 있다는 뜻이다. 따라서 테스트 진행자는 범용적인 툴을 사용해 통상적인
문제점을 찾아내야 한다. 자신의 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.