Improving Web Application Security: Threats and - CGISecurity

6 Part I: Introduction to Threats and CountermeasuresSecure Your Network, Host, and Application“A vulnerability in a network will allow a malicious user to exploit a host or an application.A vulnerability in a host will allow a malicious user to exploit a network or an application.A vulnerability in an application will allow a malicious user to exploit a network or a host.”— Carlos Lyons, Corporate Security, MicrosoftTo build secure Web applications, a holistic approach to application security isrequired and security must be applied at all three layers. This approach is shown inFigure 1.1.Secure the NetworkSecure the HostSecure the ApplicationPresentationLogicBusinessLogicData AccessLogicRuntime Services and ComponentsPlatform Services and ComponentsOperating SystemFigure 1.1A holistic approach to security