Improving Web Application Security: Threats and - CGISecurity

Checklist:Securing Enterprise ServicesHow to Use This ChecklistThis checklist is a companion to Chapter 11, “Building Secure Serviced Components”and Chapter 17, “Securing Your Application Server.” Use it to help you secureEnterprise Services and the server it runs on, or as a quick evaluation snapshot of thecorresponding chapters.This checklist should evolve with steps that you discover to secure EnterpriseServices.Developer ChecksUse the following checks if you build serviced components.AuthenticationCheck DescriptionCall-level authentication is used at minimum to prevent anonymous access. Servicedcomponent assemblies include:[assembly: ApplicationAccessControl(Authentication = AuthenticationOption.Call)]AuthorizationCheck DescriptionRole-based security is enabled. Serviced component assemblies include: [assembly:ApplicationAccessControl(true)]Component-level access checks are enabled to support component-level, interface-level, andmethod-level role checks. Serviced component assemblies include:[assembly: ApplicationAccessControl(AccessChecksLevel=AccessChecksLevelOption.ApplicationComponent)](continued)