Improving Web Application Security: Threats and Countermeasures

Identify the assets that you need to protect. This could range from confidential data, such as your customer or orders database, to your Web pages or Web site availability.