Improving Web Application Security: Threats and - CGISecurity

Chapter 5: Architecture and Design Review for Security 125If your application has already been created, the architecture and design review isstill an important part of the security assessment process that helps you fixvulnerabilities and improve future designs.Additional ResourcesFor more information, see the following resources:●●For more information on designing, building and configuring authentication,authorization and secure communications across the tiers of a distributedWeb application, see “Microsoft patterns & practices Volume I, Building SecureASP.NET Applications: Authentication, Authorization, and Secure Communication”at http://msdn.microsoft.com/library/en-us/dnnetsec/html/secnetlpMSDN.asp.For a printable checklist, see “Checklist: Architecture and Design Review forSecurity,” in the “Checklists” section of this guide.