The need for a web app standard

摘要

When I hear the word "hacker," it makes me cringe. Hackers search with enthusiasm for problems with an application's construction. Enthusiasm does not equal engineering, however, as an application's security is as reliant on its design as its construction. Design and construction both need to be examined to measure the amount of trust that can be placed in a web application or web service.rnThe realization that trust in a web app or web service needs to be measured before placing any confidence in its security is both good and bad news. The good news is that there are all sorts of tools and techniques already available in the marketplace.