Home > Security Tips > Threat Monitor > An enterprise strategy for Web application security threats
Security Tips:
EMAIL THIS
 TIPS & NEWSLETTERS TOPICS 

THREAT MONITOR

An enterprise strategy for Web application security threats


Hugh Thompson, founder, People Security
10.01.2009
Rating: --- (out of 5)


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


Application vulnerabilities present a very real, significant threat to business, and even if a network is secure, your applications may not be. So why have enterprises been slow to invest in application security, and what particular attacks should security professionals be focusing in on? And what tools and technologies should be used to fight common threats like buffer overflows and cross-site scripting?

Hugh Thompson, founde...



r of People Security, looks beyond the OWASP Top Ten and reveals the essentials of any enterprise application security strategy. Thompson talks about the role of Web application firewalls, security assessments and the development team itself in the creation of secure software.

View more videos in our Security Video Library.

Rate this Tip
To rate tips, you must be a member of SearchSecurity.com.
Register now to start rating these tips. Log in if you are already a member.




BROWSE BY TAG
Threat Monitor,   Application and Platform Security,   Web Security Tools and Best Practices,   Web Application Security,   Web Application and Web 2.0 Threats,   VIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED CONTENT
Threat Monitor
How to detect software tampering
How to prevent phishing attacks with social engineering tests
How SSL-encrypted Web connections are intercepted
How a corporate Twitter policy can combat social network threats
Cyberwarfare and the enterprise: Is the threat real?
Software security threats and employee awareness training
Newest malware threats
How to defend against rogue DHCP server malware
When BIOS updates become malware attacks
Mac OS memory flaws pose challenges for enterprise endpoint protection

Web Application Security
Web application vulnerability assessment shows patching progress
Preventing SQL injection attacks: A network admin's perspective
Cisco acquires SaaS security vendor ScanSafe
Web application firewall use goes beyond compliance, company finds
Gumblar Trojan drive-by exploits spike following Adobe update
Some Facebook applications lead to Russian attack sites
Barracuda acquires Purewire expanding Web security reach
Scanning with N-Stalker offers basic Web application security assessment
Attackers target PDF, DirectShow flaws with malicious banner ads
New Bahama botnet evades search engines, fuels click fraud

Web Application and Web 2.0 Threats
Web security firm ranks Firefox, Safari browsers as flaw prone
Web application vulnerability assessment shows patching progress
Layoffs prompt insider threat fears, cybersecurity survey finds
Botnet masters turn to Google, social networks to avoid detection
Computer worm infections up, scareware antivirus down, Microsoft says
Web-based attacks skyrocket, pirating sites surge, security firms say
Kaspersky system analyzes malicious URLs on Twitter for malware
Pushdo botnet uses Facebook to spread malicious email attachment
Do Facebook URL security concerns justify blocking social networks?
Gumblar Trojan drive-by exploits spike following Adobe update

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
anonymous Web surfing  (SearchSecurity.com)
buffer overflow  (SearchSecurity.com)
cache cramming  (SearchSecurity.com)
cookie poisoning  (SearchSecurity.com)
dictionary attack  (SearchSecurity.com)
distributed denial-of-service attack  (SearchSecurity.com)
JavaScript hijacking  (SearchSecurity.com)
National Computer Security Center  (SearchSecurity.com)
threat modeling  (SearchSecurity.com)
trigraph  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary

DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.



Research Solutions for Network Security, Access Control and Security Threats
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts