Application security experts address application vulnerabilities, how to include security in the SDLC, and threats and countermeasures in these tips and columns.
Getting started with Web application misuse cases
Submitted By: SearchSoftwareQuality.com | 17 Apr 2008 TIP - When developing applications it isn't enough to think about how they will be used. You must also consider how they will be misused -- or abused -- so that you can prevent attacks.
The essentials of Web application threat modeling
Submitted By: SearchSoftwareQuality.com | 24 Mar 2008 TIP - A critical part of Web application security is mapping out what's at risk -- or threat modeling. Kevin Beaver outlines the essential steps to get you started.
How to prevent XPath injection
Submitted By: SearchSoftwareQuality.com | 11 Feb 2008 TIP - Parameterization and input validation are invaluable to application security. Which method is best for preventing XPath injection attacks? Expert Chris Eng explains.
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.