Improving Web Application Security: Threats and - CGISecurity

Chapter 2: Threats and Countermeasures 43This chapter has shown you the top threats that have the potential to compromiseyour network, host infrastructure, and applications. Knowledge of these threats,together with the appropriate countermeasures, provides essential information forthe threat modeling process It enables you to identify the threats that are specific toyour particular scenario and prioritize them based on the degree of risk they pose toyour system. This structured process for identifying and prioritizing threats isreferred to as threat modeling. For more information, see Chapter 3, “ThreatModeling.”Additional ResourcesFor further related reading, see the following resources:● For more information about network threats and countermeasures, see Chapter 15,“Securing Your Network.”● For more information about host threats and countermeasures, see Chapter 16,“Securing Your Web Server,” Chapter 17, “Securing Your Application Server,”Chapter 18, “Securing Your Database Server,” and Chapter 19, “Securing YourASP.NET Application.”● For more information about addressing the application level threats presentedin this chapter, see the Building chapters in Part III, “Building Secure WebApplications” of this guide.● Michael Howard and David LeBlanc, Writing Secure Code 2nd Edition.Microsoft Press, Redmond, WA, 2002● For more information about tracking and fixing buffer overruns, see theMSDN article, “Fix Those Buffer Overruns,” at http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dncode/html/secure05202002.asp