Web Application Security: Business and Risk Considerations (ISACA)

The use of web applications in the enterprise has grown exponentially in the last decade. While businesses are benefitting in many ways from the new capabilities of these applications, the prevalence of inherent security vulnerabilities in web applications is creating significant exposure for many enterprises. This paper explores the root causes of these vulnerabilities, examines the associated risks and impacts, and provides guidance as to how enterprises can alter their practices to mitigate this risk.

While this document focuses specifically on web application security, the guidance presented applies to all types of software development activities.

Download (636K; Registration Required)