【從評估檢測必要性到事後風險評估的流程全解密】樂天市場揭露產品資安檢測方法
支付動態 · 2024-07-12
制度化檢測需求及流程細節，注重開發與資安團隊間的溝通
特色1 樂天產品檢查以請求為單位，而非以URL或IP為單位。例如，這個簡單的登入頁面就有高達8個請求，需要各自做一輪資安檢查。攝影／郭又華
特色2 提交檢查需求時，開發團隊需要給資安團隊詳細的產品資訊，包括HTTP請求方法HTTP Method、目標URL，以及各種其他細項參數。攝影／郭又華
特色3 進行資安檢測時，樂天資安工程師會拿到一份詳細的檢查表，以Web產品來說，會有超過100個項目。工程師測試完，還須在檢查表上逐一標註完成。攝影／郭又華
特色4 開發團隊評估漏洞無法在產品上線前修補時，便須由開發和資安團隊主管共同決定是否承擔此風險，並擬定長短期應對計畫。CVSS分數越高，所需簽核主管等級越高。攝影／郭又華
熱門文章
PropellerAds Shared a New iGaming Case Study: 97,674 Installs and 12,701 Deposits in 3 Months
Marketing
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
PropellerAds Positions Itself as a Go-To Traffic Source for iGaming Advertisers Ahead of a High-Demand Season
Marketing
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
GAT Expo CDMX 2026 Kicks Off Today in Mexico with a Sold-Out Opening Reception at Big Bola Casino Santa Fe
Marketing
GAT CDMX 2025 Institutional Academy: Leaders and Experts Analyze the Present and Future of the Gaming Industry in Mexico and Lat
Sports Game
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
What’s on the SBC Summit Conference Agenda in 2026?
Marketing
Full House at GAT Expo Cartagena 2026 Academic Agenda
Online Game
Kazakhstan plans to penalise online casino promotions
Regulation
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
B2B Tech Infrastructure Gains Momentum in Philippine Gaming Sector
Southeast Asia
Indiana online casino bill stalls in House committee
Regulation
