Access member only content, take part in discussions with comments on blogs, news and reviews and receive all the latest security industry news directly to your inbox. Join now for free.
A confirmation email has been sent to your email address - SUPPLIED EMAIL HERE. Please click on the link in the email to verify your email address. You need to verify your email before you can start posting.
If you do not receive your confirmation email within the next few minutes, it may be because the email has been captured by a junk mail filter. Please ensure you add the domain @scmagazine.com.au to your white-listed senders.
Vulnerabilities in web applications made up 80 percent of all web-related flaws in the second half of 2008 and rose in prevalence by about eight percent from the first half of the year, according to a report released by Cenzic. The report was based on the published vulnerability disclosures for various commercial off-the-shelf and open-source software. The web application vulnerabilities, for example, were in Adobe, SAP, Microsoft, Mozilla, Sun, Apache, and Oracle products. Not securing your web applications is like locking all the doors to your house and leaving the key under a see-through mat, Mandeep Khera, chief marketing officer at Cenzic, which specialises in web application security, told SCMagazineUS.com.“Hackers are picking up the key and walking right in,” he said. "Most of the web applications out there are vulnerable and that's why the attacks are happening." Of the popular browsers, Internet Explorer had the highest percentage of vulnerabilities, with 43 percent. Firefox was second with 29 percent of total web browser vulnerabilities, followed by Safari with 10 percent and Opera with eight percent. Sergey Gordeychik, a contributor for the international standards group Web Application Security Consortium (WASC), told SCMagazineUS.com in an email Tuesday that there has been steady growth of web application security problems and agreed that most web applications are vulnerable. “The number of detected vulnerabilities and web attacks is growing too,” Gordeychik said.He said security requirements often are not considered in the system design of web applications, making it hard to eliminate vulnerabilities. And attackers can easily detect these bugs, using tools such as automated scanners.Web application security came into greater focus last year when the Payment Card Industry (PCI) Security Standards Council added a new provision, mandating the use of either an in-depth application code review or a web application firewall. Educational resources for securing web applications are available, including the Open Web Application Security Project and the SANS Institute. See original article on scmagazineus.com
To begin commenting right away, you can log in below or register an account if you don't yet have one. Please read our guidelines on commenting. Offending posts will be removed and your access may be suspended. Abusive or obscene language will not be tolerated. The comments below do not necessarily reflect the views or opinions of SC Magazine, Haymarket Media or its employees.