Developer's Guide to Web Application Security

482 Index

Web application security process,

451–452

security policy, 56

security problems

of ActiveX controls, 94–99, 326

of ColdFusion, 360–365

of JavaScript, 84–88

of VBScript, 74–79, 89–91

security professionals

risks of, 33

working with, 9–10

security testing, 423

Security Zone settings, 333,

334–336

security-enabled applications

benefits of using, 394–395, 429

digital certificates, 408–410

digital signatures, 396–397

man-in-the-middle attacks,

406–407

Outlook/Outlook Express,

400–401

overview of, 394

PKI basics, 410–415

PKI for Web application security,

416

PKI in Web infrastructure,

417–422

Pretty Good Privacy, 397–400

Secure Sockets Layer, 401–403

S/MIME, 401

testing security implementation,

422–424

Transport Layer Security,

403–406, 408

SecurityFocus.com, 226

SecurityManager ...