|
Learn how to beef up Web application security |
|
|
|
Source: TechRepublic.com - Posted by Benjamin D. Thomas
|
When embracing a defense-in-depth strategy for your organization's systems, setting up a secure network boundary and applying best business practices to your internal clients is a great start. But the work doesn't stop there.
One area that organizations often overlook is application security for Web-enabled applications. In fact, some of the recent, highly publicized thefts of private information occurred due to poor application design and implementation.
Nearly all Web applications serve remote user information stored on a backend server. Consider a financial application: It's transactional in nature, and it supplies the user with accounting information. If the server exposes the information natively to the user, the user can then manipulate the information to process an unauthorized transaction.
For example, let's say you're using an application that references actual sequenced account numbers to debit accounts for purchases. A user could alter the account number used in the transaction to make a purchase that debits another account.
Read this full article at TechRepublic.com
Powered by AkoComment! |
