Developer's Guide to Web Application Security

Introduction

As more and more applications find their way to the World Wide Web, security con-

cerns have increased. Web applications are by nature somewhat public and therefore

vulnerable to attack.Today, it is the norm to visit Web sites where logins and pass-

words are required to navigate from one section of the site to another.This is much

more required in a Web application where data is being manipulated between secure

internal networks and the Internet. Web applications, no matter their functions,

should not exchange data over the Internet unless it is encrypted or at least digitally

signed. Security should be extended to the private-public netw ...