The Web is a dangerous place. Attackers come at your sites constantly from all sides, wielding powerful weapons in attempts to degrade, defile, compromise, shut down, or simply take advantage of your Web presence. You fight back with security patches, input validation checks, encryption, running with least privilege, reducing possible attack surface, and a myriad of other secure coding techniques such as those outlined in Michael Howard and David LeBlanc's excellent treatise on the subject, Writing Secure Code (Microsoft Press, 2003). But there are always new attacks and new angles, so the defenses must evolve as well.
|