Security

Today was the last day of a three-day course on Web Application Security (given at Business Training by Ascure).  I was familiar with most of the content presented (then why did I go? boss' orders). It was a nice overview for developers who are not security-aware. Amazingly, "Web Application Security" is still oriented very much towards network security (SSL, HTTP, TCP, IP, Firewall, IDS, ...) and infrastructure (Servers, DMZ, topology).  A product I wasn't very much aware of is Sanctum's Appshield, which allows you to define which HTTP requests go through (it even has a learning mode) based on HTTP headers, HTTP POST or GET parameters and their possible values, and a lot more.
Published 22 October 2003 11:32 PM by yreynhout
Filed under: ,

Comments

No Comments

Leave a Comment

(required) 
(required) 
(optional)
(required)