Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Enhancing Web Server Security with OWASP and WASC Principles

Calendar Nov 25, 2005 • User Avatar Anthony Pell
1 min read
General Esm H446
Topics%20covered

Topics Covered

application security threat mitigation e-commerce web server security principles OWASP WASC
Web servers are among the most obvious targets for black hats. Whether used for basic e-commerce or more advanced Web services, they give attackers an always-on interface to an IT system and often a shortcut to the parts that handle financial transactions. Even better for the attacker, they increasingly run custom applications developed in-house. These are more likely than the basic Web server software to contain security vulnerabilities, as they haven't been subjected to the rigorous quality control procedures of the open-source community or a commercial vendor.

Two organizations promise to help. The Open Web Application Security Project (OWASP) mainly targets software developers and the application architects who manage them, aiming to stamp out security bugs in the applications themselves. The Web Application Security Consortium (WASC) is broader, focusing on threat classification and all means of mitigation.

The link for this article located at IT Architect is no longer available.