Improving Web Application Security: Threats and Countermeasures

This chapter gives you the questions to ask when performing a thorough review of your architecture design. The following are recommendations on how to use this chapter:

• Integrate a security review into your architecture design process . Start early on, and as your design changes, review those changes with the steps given in this chapter.

• Evolve your security review . This chapter provides questions that you can ask to improve the security of your design. To complete the review process, you might also need to add specific questions that are unique to your application.

• Know the threats you are reviewing against . Chapter 2, "Threats and Countermeasures," lists the threats that affect the various components and layers that make up your application. Knowing these threats is essential to improving the results of your review process.