Home 
Capabilities Application Security
Application Security
In the present hi-tech world, the best and the most effective business development strategy is to bring your business to online platform. This attracts more users but more and more sensitive data is being displayed on the web which raises the question of application security and information confidentiality.
Complex Approach to Securing Web Applications
eDeveloper Network specialists keep in mind the security factor while developing the web applications and its the only way to create the most secure web applications. We follow a holistic approach to designing, building and supporting secure web applications. The security issues are being addressed on web server, application server and database.
Depending on application scenario and technologies used, an analysis of vulnerability categories and potential threats (external or internal) are conducted while developing secure web applications. The analysis assists developers to deliver effective security architecture and keep a record of proper counter-measures.
| Vulnerabilities and Potential Threats | Securing Practices and Countermeasures |
Authentication
Network eavesdropping
Brute force attacks
Dictionary attacks
Cookie replays
Credentials theft
|
Partition of public and restricted areas
Account disablement policies
Proper credentials verification and storage
Proper password handling
Authentication data protection
Communication channels securing using SSL
| |
Input Validation
Buffer overflow
Cross-site scripting
SQL injection
|
Thorough input validation
Proper input filtration
Centralized validation strategy
Proper database access
| |
|
Authorization
Privilege elevation
Confidential information disclosure
Data tampering |
Multiple gatekeepers
Authorization granularity
Role-based security
Strong access controls
System level protection
|
|
Configuration Management
Unauthorized access to application administration
Hacking of configuration data |
Role-based administration with strong authentication.
Secure communication channels for remote administration (SSL, VPN)
Restricted access to configuration data
Least privilege approach |
|
Sensitive Data
Sensitive data discloser
Network eavesdropping
Data tampering |
Role-based access to sensitive data
Sensitive data on demand approach
Data encryption
Proper information storage and secure communication |
Some of the vulnerabilities have been discussed in the above mentioned list. All development applications including Internet, intranet or extranet have their own specific security issues and challenges which needs to be analyzed and addressed by software vendors.
Securing Applications through Development Life Cycle
eDeveloper Network specialists take into account all possible security implications since inception stages of the software development cycle. This allows professionals to demarcate potential risks early and implement effective counter-measures.
| Securing Categories and Practices | Development Life Cycle Phase | Roles Distribution |
| Threat Modeling | Architecture Design | Architect(R), Developer(I), Tester(I) |
| Security Design Practices | Architecture Design | Architect(R), Developer(I) |
| Security Architecture | Architecture Design | Architect(R) |
| Code Development and Review | Implementation | Developer(R), Tester(I) |
| Technology Related Threats | Implementation | Developer(R) |
| Security Testing | Testing and Stabilization | Tester(R), Architect (C), Developer (I) |
| Deployment Review | Deployment and Maintenance | System Administrator (R), Architect(C), Developer(I), Tester(I) |
Legend: R – Responsible, C – Consulted, I - Informed
Request For Quote
Thank you for your interest in eDeveloper Network. Please kindly fill in our Request For Quote form and we will get back to you promptly regarding your request.
