Improving Web Application Security: Threats and - CGISecurity

viImproving Web Application Security: Threats and CountermeasuresSolutions at a GlanceArchitecture and Design Solutions...............................................................................lxvDevelopment Solutions ............................................................................................. lxviAdministration Solutions.............................................................................................lxxFast Track — How To Implement the GuidancelxvlxxvGoal and Scope ....................................................................................................... lxxvThe Holistic Approach...............................................................................................lxxviSecuring Your Network.............................................................................................lxxviiSecuring Your Host..................................................................................................lxxviiSecuring Your Application .......................................................................................lxxviiiIdentify Threats........................................................................................................lxxixApplying the Guidance to Your Product Life Cycle ........................................................lxxxiImplementing the Guidance .....................................................................................lxxxiiWho Does What? ...................................................................................................lxxxiiiRACI Chart ........................................................................................................lxxxiiiSummary .............................................................................................................. lxxxivPart IIntroduction to Threats and Countermeasures 1Chapter 1Web Application Security Fundamentals 3We Are Secure — We Have a Firewall ............................................................................ 3What Do We Mean By Security? ................................................................................... 4The Foundations of Security..................................................................................... 4Threats, Vulnerabilities, and Attacks Defined................................................................. 5How Do You Build a Secure Web Application?................................................................ 5Secure Your Network, Host, and Application .................................................................. 6Securing Your Network................................................................................................. 7Network Component Categories ............................................................................... 7Securing Your Host...................................................................................................... 7Host Configuration Categories.................................................................................. 8Securing Your Application ............................................................................................ 9Application Vulnerability Categories .......................................................................... 9Security Principles..................................................................................................... 11Summary ................................................................................................................. 12Additional Resources ................................................................................................ 12Chapter 2Threats and Countermeasures 13In This Chapter ......................................................................................................... 13Overview .................................................................................................................. 13