Improving Web Application Security: Threats and - CGISecurity

4Design Guidelines for Secure WebApplicationsIn This Chapter●●●●●●●●●●OverviewDesigning input validation strategiesPartitioning Web sites into open and restricted areasImplementing effective account management practicesDeveloping effective authentication and authorization strategiesProtecting sensitive dataProtecting user sessionsPreventing parameter manipulationHandling exceptions securelySecuring an application’s configuration management featuresListing audit and logging considerationsWeb applications present a complex set of security issues for architects, designers,and developers. The most secure and hack-resilient Web applications are those thathave been built from the ground up with security in mind.In addition to applying sound architectural and design practices, incorporatedeployment considerations and corporate security policies during the early designphases. Failure to do so can result in applications that cannot be deployed on anexisting infrastructure without compromising security.