 |
|
|
|
Web Application Security
Best Practices for Secure Web Development
By Razvan Peteanu, razvan.peteanu@home.com
Rev 3.0 November 3rd, 2000
Homepage for document no longer exists/
Local mirror of document:secure_webdev-3.0.pdf (211kb /pdf)
Read this document. It is one of the best documents
I have read regarding web development and security. It discusses application
security with the developer in mind. Here's the introductory paragraph:
The following document is intended as a guideline for developing secure
web-based applications. It is not about how to configure firewalls, intrusion
detection, DMZ or how to resist DDoS attacks. This is a task best addressed
at system and network level. However, there is little material available today
intended for developers. We have entered the dotcom age in which a web site
is no longer an isolated site, but an extension of the internal business
systems, yet there isnāt much about how to create this extension securely.
If the guys who developed the Major League All-Star balloting read the
document, then maybe the ballot could not have been stuffed.
|
