Web application security testing checklist

While there have been numerous web applications raised for various creative use, the use of web application becomes more important. From static HTML page, to traditional client-server page, and it now comes with Web 2.0 Rich Internet Application (RIA). Features, performance and user friendliness have taken a major focus of web development nowadays. However, there has been increasingly concern on security issue on internet applications.

There have been outbreaks of web application exploit due to lack on security consideration in the system design and implementation. There are well-known issues like SQL injection, cross site scripting, HTTP request splitting, and etc. While the technologies are frequently updated, the type of security issues fellow the pace of the update. How should we do web development, taking security concern in account, in a more systematic way? This page would introduce you a systematic process to protect your application from security problem, throughout the development process.

From setting expectations, looking for tools, making use of the tools, evaluation of the result and making modification accordingly, there are guidelines for each step. With these guidelines, we can get prepare for and execute the development of a secure web application.

http://searchsoftwarequality.techtarget.com/tip/0,289483,sid92_gci1247920,00.html