Saturday, March 31, 2012

OWASP iGoat v1.2 Released

iGoat is a learning tool for iOS developers (iPhone, iPad, etc.). It was inspired by the WebGoat project, and has a similar conceptual flow to it.
As such, iGoat is a safe environment where iOS developers can learn about the major security pitfalls they face as well as how to avoid them. It is made up of a series of lessons that each teach a single (but vital) security lesson.

The lessons are laid out in the following steps:

1 - Brief introduction to the problem.
2 - Verify the problem by exploiting it.
3 - Brief description of available remediations to the problem.
4 - Fix the problem by correcting and rebuilding the iGoat program.

Step 4 is optional, but highly recommended for all iOS developers.

Download: http://code.google.com

No comments: