Publisher's Synopsis
Web applications of today's world are facing many threats that makes the job of the security analyst a challenging one. The zero day vulnerabilities faced by the websites are one another great threat towards the protections engines. The portrait display vulnerability of software makes HP, Fujitsu and Philips notebooks is the one which was recently explored in the security world. To defend these latest and zero day attacks we need strong and round the clock mechanism that enables protection. The objective of this research is to design and develop an Application level security architecture for securing web applications against the vulnerabilities mentioned in OWASP and CVE. To illustrate the research, an event management website for Student Welfare Office of Vellore Institute of Technology Chennai Campus is developed and tested. The deployment is done using WAMP architecture, Java Script, HTML3 and CSS3 with database support enabled. This research addresses vulnerabilities mentioned in OWASP and CVE such as SQL Injection, Cross-Site Scripting, Cross-Site Request Forgery, Unvalidated Redirects and Forwards, File Upload Vulnerability and Missing Functional Level Access Control. Detection and prevention mechanism is developed for the removing the vulnerabilities and their influences in all the aspects of the web application. This Books will be useful for all, for creating secured website.
