The first time you sign into developerWorks, a profile is created for you. Select information in your profile (name, country/region, and company) is displayed to the public and will accompany any content you post. You may update your IBM account at any time.

All information submitted is secure.

The first time you sign in to developerWorks, a profile is created for you, so you need to choose a display name. Your display name accompanies the content you post on developerworks.

Please choose a display name between 3-31 characters. Your display name must be unique in the developerWorks community and should not be your email address for privacy reasons.

All information submitted is secure.

My developerWorks:

My notifications:

Sign out

Select a language:

Web application security fundamentals

Date: 07 Oct 2011 (Published 14 Jun 2011) |Level: Intermediate |

Sign in to save your progress (Learn more)

Saving your progress (Learn more)

1. Application security concepts

It's a good idea to go through the basic terminology related to security before digging deeper into the complex risks that you face on the web. When it comes to security it's much better to be proactive than reactive. Learn the concepts and then build upon them by planning a security strategy.

Read: App Security 101 Item marked not complete - Click to mark complete

Read: Planning a security strategy: Three core questions to ask Item marked not complete - Click to mark complete

Read: Understanding web application security challenges Item marked not complete - Click to mark complete

Read: Open web application security project top ten 2010 Item marked not complete - Click to mark complete

2. Common vulnerabilities and attacks

Time to dig into the most common types of app-level attacks. In this section, learn how these attacks are performed and how to prevent them.

Read: Preventing common application-level hack attacks Item marked not complete - Click to mark complete

Watch: SQL injection - simply explained Item marked not complete - Click to mark complete

Read: Locking down your PHP applications: Four security rules you can't violate Item marked not complete - Click to mark complete

Read: Cross-site scripting explained Item marked not complete - Click to mark complete

3. Developing secure applications

Now it's time to apply all the knowledge covered in security to existing and future applications from a development point of view. Vulnerabilities aren't easy to spot sometimes, so it's always best to keep security in mind when you begin writing your application.

Read: Secure programmer: Developing secure programs Item marked not complete - Click to mark complete

Read: Web application security: Testing for vulnerabilities Item marked not complete - Click to mark complete

Rate this content

Give us feedback

Submission failed. Please try again.

Please complete one of the following questions before submitting.

Next steps

Close [x]

developerWorks: Sign in

The first time you sign into developerWorks, a profile is created for you. Select information in your developerWorks profile is displayed to the public, but you may edit the information at any time. Your first name, last name (unless you choose to hide them), and display name will accompany the content that you post.

All information submitted is secure.

Close [x]

Choose your display name

The first time you sign in to developerWorks, a profile is created for you, so you need to choose a display name. Your display name accompanies the content you post on developerWorks.

Please choose a display name between 3-31 characters. Your display name must be unique in the developerWorks community and should not be your email address for privacy reasons.

All information submitted is secure.

Close [x]

Save your progress

When you sign in, we will save this item to your developerWorks community home page and track your progress so you know what you've completed and where to resume when you return.

For a list of your saved items, see your My Home > My saved items page.

Sign in

Close [x]

Thank you for your feedback. We appreciate your sharing your opinion with us.

Close [x]

Do you want to save your progress?

Close [x]

Save your progress

Sorry. Our server is not available, and we cannot display your saved progress at this time.

Your progress will be displayed when the server is available again. Any previous progress is retained, and additional progress is being tracked.

If your most recent progress is not displayed within 24 hours, you can click the checkmark to indicate completion.

About this knowledge path

Web security is a discipline that is commonly overlooked. It has a reputation of being attended to in a reactive manner partially because of the lack of knowledge about common risks as well as lazy programming. Get introduced to common information security terminology as well as common attacks and vulnerabilities found on websites and applications. This knowledge path is for anyone interested in learning the basics of web application security and the risks involved in running a website from development to deployment.

My developerWorks:

My notifications:

Select a language:

Technical topics

Evaluation software

Community

Events

Web application security fundamentals

1. Application security concepts

2. Common vulnerabilities and attacks

3. Developing secure applications

Rate this content

Give us feedback

Next steps

developerWorks: Sign in

Choose your display name

Save your progress

Do you want to save your progress?

Save your progress

About this knowledge path

Activities in this path

Related resources

Share this page:

Follow developerWorks: