What are the common security requirements for Web applications? As one would expect, these would depend upon the nature of the Web application and whether it is available over the Internet or a behind-the-firewall intranet. The security requirements of a Web application providing weather information or news is likely to be much less stringent than a Web application that provides an online banking service.
A practical approach is to understand different security requirements in isolation and then decide which ones are relevant for a particular deployment of a Web application.
User Identification and Authentication
Though it makes sense for a number of Web applications, like the ones that furnish weather information or stock ...