Websites and web applications are frequently targeted environments for security attacks since they are the prime places that users are accustomed to accessing and utilizing. Given the constant user access to websites over the public Internet, the largest amount of security liabilities is the result of a by-product of these accesses. The following explores the components of web application management and the most common website vulnerabilities.
We have already discussed a number of these vulnerabilities that occur with website access. Among these are
■ XSS: Cross-site scripting
■ SQLi: Structured query language injection
■ CSRF: Cross-site request forgery
■ SSL: ...