Developer's Guide to Web Application Security

Q: Is protecting my Web applications important if network security is a primary

focus at my company?

A: Yes, thinking about Web application security within your company is very

important. Malicious hackers are not just attacking at the network level; they are

using attack methods such as cross-site scripting and buffer overflows to attack at

the application level.You can’t protect against that type of attack from the net-

work level.

Q: A co-worker has learned how to hack into someone else’s Web application and

gained access to a lot of personal information, such as customer logins, pass-

words, and even some credit card information. He says he is a white ...