Improving Web Application Security: Threats and - CGISecurity

Introduction lxiClientsAuthentication, Authorization and Secure CommunicationWeb ServerIISASP. NETWebServicesIISASP. NETEnterpriseServices(COM+)IISASP. NET.NETRemotingSQL ServerDatabaseServerFigure 5Scope of Volume I, Building Secure ASP.NET ApplicationsVolume II, Improving Web Application SecurityThis guide helps you build and maintain hack-resilient applications. It takes abroader look at security across the tiers, focusing on threats and countermeasures atthe network, host, and application levels. The intended audience is broader and theguidance can be applied throughout the product life cycle.For additional related work, see the “Resources” chapter provided at the end of theguide.