A Half-Dozen Rules for Securing Your Web Application

Abstract

As more and more Web pages are created for fun and profit, more and more Web pages are being hacked for fun and profit. CIA officials were red-faced when their new-sprung Web page was found doctored with pornographic images and Nazi propaganda. The Social Security Administration put up a Web site that trivially could be coaxed to provide private information on any United States taxpayer. What about corporate America? Many corporate sites have been hacked, but companies try to keep these things quiet. As a computer security consultant for a Big Five Accounting firm, the author has seen plenty of corporate Web site missteps.