Improving Web Application Security: Threats and - CGISecurity

lviImproving Web Application Security: Threats and CountermeasuresPartsThis guide is divided into five parts:● Part I, Introduction to Threats and Countermeasures● Part II, Designing Secure Web Applications● Part III, Building Secure Web Applications● Part IV, Securing Your Network, Host, and Application● Part V, Assessing Your SecurityPart I, Introduction to Threats and CountermeasuresThis part identifies and illustrates the various threats facing the network, host, andapplication layers. By using the threat modeling process, you can identify the threatsthat are relevant to your application. This sets the stage for identifying effectivecountermeasures. This part includes:● Chapter 1, “Web Application Security Fundamentals”● Chapter 2, “Threats and Countermeasures”● Chapter 3, “Threat Modeling”Part II, Designing Secure Web ApplicationsThis part provides the guidance you need to design your Web applications securely.Even if you have an existing application, you should review this section and thenrevisit the concepts, principles, and techniques that you used during your applicationdesign. This part includes:● Chapter 4, “Design Guidelines for Secure Web Applications”● Chapter 5, “Architecture and Design Review for Security”Part III, Building Secure Web ApplicationsThis part helps you to apply the secure design practices and principles covered inthe previous part to create a solid and secure implementation. You’ll learn defensivecoding techniques that make your code and application resilient to attack. Chapter 6presents an overview of the .NET Framework security landscape so that you areaware of the numerous defensive options and tools that are at your disposal. Part IIIincludes:● Chapter 6, “.NET Security Fundamentals”● Chapter 7, “Building Secure Assemblies”● Chapter 8, “Code Access Security in Practice”● Chapter 9, “Using Code Access Security with ASP.NET”● Chapter 10, “Building Secure ASP.NET Pages and Controls”● Chapter 11, “Building Secure Serviced Components”