Application Security

Application Security

1. Testing technique providing unexpected values as input to make application crash

2. Secure coding is best method to prevent attacks

   • Fail-secure design : Error occurs application fails back to secure state
   • Input Validation
     • Client Side: Check input received before processing it OWASP & CERT (Java, Perl, C ,C++)
     • Server side

3. XSS - maintain patching firewall, audit activities

4. XSRF - randomized string/key, check http header for spoofing, closing browser/tab, clearing temp cache

5. Baseline : Ensure compliance with policy

6. Patch management: stay up-to-date with vendor patches

7. NoSQL - non rational database