Hi all today while reading some application security news I came across one application security white paper by HP.Some of the content of this article is as follows. Introduction Historically, application developers and quality assurance (QA) teams have not focused on security. Why? They haven’t focused on security because we have not asked them to. [...]
Continue reading about Application Security: The Missing Pillar of Software Quality
The list includes the following: Unvalidated parameters: In this scenario, information from Web requests isn’t validated before the Web application uses it. Attackers can use these flaws to attack backside components through a Web application. Broken access control: Organizations fail to enforce restrictions on what authenticated users are allowed to do. Attackers can exploit these [...]
Continue reading about A list of the top 10 most critical Web application security problems
