Improving Web Application Security: Threats and - CGISecurity

Related Security Resources 685Common Criteria●Windows 2000 Common Criteria Guide (see Chapter 4) at http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/issues/W2kCCSCG/default.asp.The Windows 2000 Common Criteria Security Target (ST) provides a set ofsecurity requirements taken from the Common Criteria (CC) for InformationTechnology Security Evaluation. The Windows 2000 product was evaluatedagainst the Windows 2000 ST and satisfies the ST requirements.This document is written for those who are responsible for ensuring thatthe installation and configuration process results in a secure configuration.A secure configuration is one that enforces the requirements presented inthe Windows 2000 ST, referred to as the Evaluated Configuration.Reference Hub●Reference hub from Building Secure ASP.NET Applications athttp://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/SecNetAP03.asp?frame=true.Security Knowledge in Practice●CERT Security Improvement Modules at http://www.cert.org/security-improvement/skip.html.Vulnerabilities●●SANs TOP 20 List at http://www.sans.org/top20/.CERT (Computer Emergency Response Team) at http://www.cert.org.World Wide Web Security FAQ●http://www.w3.org/Security/faq/www-security-faq.html.