{"parse":{"title":"OWASP Israel 2008 Conference Adi Sharabani","pageid":6831,"revid":38335,"text":{"*":"<h2><span class=\"mw-headline\" id=\"Black_Box_vs._White_Box_-_pros_and_cons\">Black Box vs. White Box - pros and cons</span><span class=\"mw-editsection\"><span class=\"mw-editsection-bracket\">[</span><a href=\"/index.php?title=OWASP_Israel_2008_Conference_Adi_Sharabani&amp;veaction=edit&amp;vesection=1\" title=\"Edit section: Black Box vs. White Box - pros and cons\" class=\"mw-editsection-visualeditor\">edit</a><span class=\"mw-editsection-divider\"> | </span><a href=\"/index.php?title=OWASP_Israel_2008_Conference_Adi_Sharabani&amp;action=edit&amp;section=1\" title=\"Edit section: Black Box vs. White Box - pros and cons\">edit source</a><span class=\"mw-editsection-bracket\">]</span></span></h2>\n<p>In recent years two main technologies have emerged to detect security vulnerabilities in web applications. Black-box and white-box approach the problem in fundamentally different ways, each with its own strengths and weaknesses. In this presentation we cover the main aspects of each technology, listing their pros and cons. We discuss the coverage issues with each technology. We explain which approach works better in different scenarios, and why.\n</p>\n<h2><span class=\"mw-headline\" id=\"Bios\">Bios</span><span class=\"mw-editsection\"><span class=\"mw-editsection-bracket\">[</span><a href=\"/index.php?title=OWASP_Israel_2008_Conference_Adi_Sharabani&amp;veaction=edit&amp;vesection=2\" title=\"Edit section: Bios\" class=\"mw-editsection-visualeditor\">edit</a><span class=\"mw-editsection-divider\"> | </span><a href=\"/index.php?title=OWASP_Israel_2008_Conference_Adi_Sharabani&amp;action=edit&amp;section=2\" title=\"Edit section: Bios\">edit source</a><span class=\"mw-editsection-bracket\">]</span></span></h2>\n<p>Adi Sharabani manages the IBM Rational Application Security Research Group, responsible for product and industry research activities that pertain to Web application security. Adi joined IBM through the acquisition of Watchfire, a market leader in web application security testing. Prior to security research, Adi was a senior software developer on the AppScan team responsible for the invention and development of many of its key features. \n</p><p>Yinnon Haviv completed his Ph.D. in Computer Science in 2006 (Distributed system, Fault tolerance, Self-Stabilization, Language semantics). Before joining the static analysis group at IBM/Watchfire, Yinnon was a key contributor in the research, design and implementation of impact analysis algorithms over large programs (&gt;1M lines of code).\n</p>\n<!-- \nNewPP limit report\nCached time: 20261104064856\nCache expiry: 86400\nDynamic content: false\nCPU time usage: 0.003 seconds\nReal time usage: 0.003 seconds\nPreprocessor visited node count: 6/1000000\nPreprocessor generated node count: 12/1000000\nPost\u2010expand include size: 0/2097152 bytes\nTemplate argument size: 0/2097152 bytes\nHighest expansion depth: 2/40\nExpensive parser function count: 0/100\n-->\n\n<!-- \nTransclusion expansion time report (%,ms,calls,template)\n100.00%    0.000      1 - -total\n-->\n\n<!-- Saved in parser cache with key wiki:pcache:idhash:6831-0!*!*!!*!*!* and timestamp 20261104064856 and revision id 38335\n -->\n"},"langlinks":[],"categories":[],"links":[],"templates":[],"images":[],"externallinks":[],"sections":[{"toclevel":1,"level":"2","line":"Black Box vs. White Box - pros and cons","number":"1","index":"1","fromtitle":"OWASP_Israel_2008_Conference_Adi_Sharabani","byteoffset":0,"anchor":"Black_Box_vs._White_Box_-_pros_and_cons"},{"toclevel":1,"level":"2","line":"Bios","number":"2","index":"2","fromtitle":"OWASP_Israel_2008_Conference_Adi_Sharabani","byteoffset":497,"anchor":"Bios"}],"displaytitle":"OWASP Israel 2008 Conference Adi Sharabani","iwlinks":[],"properties":[]}}