WASC-Articles: "The 80/20 Rule for Web Application Security"

robert_at_WEBAPPSEC.ORG
Date: 01/31/05

  • Next message: Danny: "13 MS Security Bulletins Due Feb. 8" 
    Date:         Mon, 31 Jan 2005 12:49:51 -0500
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

    The Web Application Security Consortium is proud to present our first 'Guest Article'
    written by Jeremiah Grossman, CTO of WhiteHat Security. The article is entitled
    "The 80/20 Rule for Web Application Security: Increase your security without
    touching the source code" . In this article Jeremiah discusses ways to make
    your website more difficult to exploit with little effort. This document can
    be found at http://www.webappsec.org/articles/013105.html .

    Regards,

    - Robert Auger

    articles@webappsec.org
    http://www.webappsec.org

    ------------------------------------------------------------------------------------
    Are you interested in writing a 'Guest Article' for the WASC? Additional information
    on article guidelines may be found at http://www.webappsec.org/articles/. Inquires
    can be sent to articles@webappsec.org

    "Contributed articles may include industry best practices, technical information about
    current issues, innovative defense techniques, etc. NO VENDOR PITCHES OR MARKETING
    GIMMICKS PLEASE. We are only soliciting concrete information from the experts on the
    front lines of the web application security field."
    <a href="http://www.webappsec.org">http://www.webappsec.org>
    ------------------------------------------------------------------------------------ 

    --
NTBugtraq Editor's Note:
Most viruses these days use spoofed email addresses. As such, using an Anti-Virus product which automatically notifies the perceived sender of a message it believes is infected may well cause more harm than good. Someone who did not actually send you a virus may receive the notification and scramble their support staff to find an infection which never existed in the first place. Suggest such notifications be disabled by whomever is responsible for your AV, or at least that the idea is considered.
--
  • Next message: Danny: "13 MS Security Bulletins Due Feb. 8"

    Relevant Pages