Home > Ask the Software Quality Experts > Application Security Questions & Answers > Ajax's effect on Web services security
Ask The Software Quality Expert: Questions & Answers
EMAIL THIS

Ajax's effect on Web services security

Caleb Sima EXPERT RESPONSE FROM: Caleb Sima

Pose a Question
Other Software Quality Categories
Meet all Software Quality Experts
Become an Expert for this site


Software quality news and advice
Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google


>
QUESTION POSED ON: 01 February 2006
How does Ajax affect the security of Web services?

>
EXPERT RESPONSE
Ajax has made an explosion on to the Web application scene and will fundamentally change the way Web applications are made and will definitely have an overall impact on Web security. The technology promotes huge growth of the use of Web services, since Ajax has made Web services easy to consume using the browser. That means Web applications will open up their back end and treat the browser like a thick client.

Did I just say open up their back end? Yes, that is what Ajax will promote -- the ability to call directly to functions in the code via XML. It's so convenient! Think about this, if today's biggest security issue is developers not validating input just on the front end, what kind of problems will we have when developers have inputs on the front end and back end! This opens up a whole new attack surface.

More information:
* Ajax alert raises security, scalability issues
* Why do Web services impact security?


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google


RELATED CONTENT
Web services security
Web security: Web services an overlooked entry point for attacks
Why are Web services more vulnerable than Web apps?
XML security: Preventing XML bombs

Software security testing and techniques
How to learn white box testing
Security vulnerabilities found in open source Java projects
Fuzzing for Software Security Testing and Quality Assurance: Chapter 3, Testing for Quality
Ajax security -- Is anyone listening?
Critical security issues found in the Spring Framework
Web application security and the PCI DSS
PCI DSS compliance: Web application firewalls (WAFs)
PCI DSS compliance: Code review
PCI DSS compliance: The basics
PCI DSS compliance: WAF, code review or both?

Application Security
PCI DSS compliance: WAF, code review or both?
Application security careers have bright future
How to prevent anti-DNS pinning attacks
Open source application security testing tools
Java application security features and measures
Web application security testing basics
Password recovery with .NET 2.O using C#
Free load and performance testing tools
The most effective time to do security testing
Finding backdoor threats within applications

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




All Rights Reserved, Copyright 2006 - 2008, TechTarget | Read our Privacy Policy 		  TechTarget - The IT Media ROI Experts