Improving Web Application Security

“Improving Web Application Security: Threats and Countermeasures” gives you a solid foundation for designing, building, and configuring secure ASP.NET Web applications. This guide helps you build hack-resilient applications. A hack-resilient application is one that reduces the likelihood of a successful attack and mitigates the extent of damage if an attack occurs. A hack-resilient application resides on a secure host (server) in a secure network and is developed using secure design and development guidelines.

Book Description

Web application security must be addressed across the tiers and at multiple layers. A weakness in any tier or layer makes your application vulnerable to attack. Figure 1 shows the scope of the guide and the three-layered approach that it uses: securing the network, securing the host, and securing the application. It also shows the process called threat modeling, which provides a structure and rationale for the security process and allows you to evaluate security threats and identify appropriate countermeasures. If you do not know your threats, how can you secure your system?

Table of Contents

• Web Application Security Fundamentals
• Threats and Countermeasures
• Threat Modeling
• Design Guidelines for Secure Web Applications
• Architecture and Design Review for Security
• .NET Security Overview
• Building Secure Assemblies
• Code Access Security in Practice
• Using Code Access Security with ASP.NET
• Building Secure ASP.NET Pages and Controls
• Building Secure Serviced Components
• Building Secure Web Services
• Building Secure Remoted Components
• Building Secure Data Access
• Securing Your Network
• Securing Your Web Server
• Securing Your Application Server
• Securing Your Database Server
• Securing Your ASP.NET Applications and Web Services
• Hosting Multiple ASP.NET Applications
• Code Review
• Deployment Review

Download Free PDF / Read Online