Improving Web Application Security: Threats and - CGISecurity

Contents xxxvIndex of Checklists 687Overview ................................................................................................................ 687Designing Checklist................................................................................................. 687Building Checklists.................................................................................................. 687Securing Checklists................................................................................................. 688Assessing Checklist ................................................................................................ 688Checklist:Architecture and Design Review 689How to Use This Checklist ....................................................................................... 689Deployment and Infrastructure Considerations .......................................................... 689Application Architecture and Design Considerations................................................... 690Input Validation................................................................................................... 690Authentication .................................................................................................... 690Authorization ...................................................................................................... 691Configuration Management.................................................................................. 692Sensitive Data .................................................................................................... 692Session Management ......................................................................................... 692Cryptography ...................................................................................................... 693Parameter Manipulation ...................................................................................... 693Exception Management ....................................................................................... 693Auditing and Logging ........................................................................................... 694ChecklistSecuring ASP.NET 695How to Use This Checklist ....................................................................................... 695Design Considerations ............................................................................................ 695Application Categories Considerations...................................................................... 696Input Validation................................................................................................... 696Authentication .................................................................................................... 696Authorization ...................................................................................................... 697Configuration Management.................................................................................. 697Sensitive Data .................................................................................................... 698Session Management ......................................................................................... 698Parameter Manipulation ...................................................................................... 698Exception Management ....................................................................................... 699Auditing and Logging ........................................................................................... 699Configuration File Settings....................................................................................... 699Web Farm Considerations .................................................................................... 702Hosting Multiple Applications............................................................................... 703ACLs and Permissions......................................................................................... 703Application Bin Directory...................................................................................... 704