• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>2011 International Conference on Information Society >Web application security: Improving critical web-based applications quality through in-depth security analysis
【24h】

Web application security: Improving critical web-based applications quality through in-depth security analysis

机译：Web应用程序安全性：通过深入的安全性分析提高关键的基于Web的应用程序的质量

获取原文
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

The Internet, and in particular the World Wide Web, have become one of the most common communication mediums in the World. Millions of users connect everyday to different web-based applications to search for information, exchange messages, interact with each other, conduct business, pay taxes, perform financial operations and many more. Some of these critical web-based services are targeted by several malicious users intending to exploit possible weaknesses and vulnerabilities, which could cause not only the disruption of the service, but also compromise the users and organizations information. Most of the times, these malicious users succeed in exploiting different types of vulnerabilities and the consequences can be disastrous. Most of these vulnerabilities are directly related with the web-based applications lack of quality as a result from a poorly implemented software development life cycle (SDLC). This paper will discuss the direct implication of the lack of security and the importance of quality on the SDLC, and the major factors that influence them. On the other hand the authors propose a set of security automated tools and methodologies that can be used throughout the SDLC as a mean to improve critical web-based applications security and quality.
机译：互联网，尤其是万维网，已经成为世界上最常见的通信媒介之一。每天都有数百万用户连接到不同的基于Web的应用程序，以搜索信息，交换消息，彼此交互，开展业务，缴税，进行财务运营等等。这些关键的基于Web的服务中有一些是恶意用户针对的，这些恶意用户打算利用可能的弱点和漏洞，这些弱点和漏洞不仅可能导致服务中断，还可能损害用户和组织信息。在大多数情况下，这些恶意用户成功利用各种类型的漏洞，其后果可能是灾难性的。这些漏洞中的大多数直接与由于实施不良的软件开发生命周期（SDLC）导致的基于Web的应用程序质量不足有关。本文将讨论缺乏安全性的直接含义以及质量对SDLC的重要性，以及影响它们的主要因素。另一方面，作者提出了一套安全自动化工具和方法，可在整个SDLC中使用，以提高关键的基于Web的应用程序的安全性和质量。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号