|
I need the knowledge to build a secure system that will be facing the internet at some point. I'm still in the early phases of development now that I have finished work on the data model and I want to shift focus to security and incorporate it into everything going forward. The book is from Microsoft and totals over 900 pages.
Improving Web Application Security: Threats and Countermeasures
The overall architecture I'm going for is:
Internet/Intranet -> Service Broker -> Database
Internet will be a web site that needs to have login capabilities and secure features
Intranet will most likely end up a mix of internal websites and job specific windows applications
Service Broker will handle all data access to and from the database
Database will be SQL Server
-Edit- Just notice that the book was written in 2003. Are there other resources a little more current?
if (Object.DividedByZero == true) { Universe.Implode(); }
modified 25-Feb-16 13:41pm.
|
|
|
|
|
That's for you to decide.
Read it and let us know
If it's not broken, fix it until it is
|
|
|
|
|
Being that I still consider myself pretty clueless when it comes to implementing a secure system, I wouldn't know good practice if was written right in front of me. I know about how to secure databases, hashing/salting passwords, and the principle of least privilege but there are a myriad of other angles I haven't even seen yet.
if (Object.DividedByZero == true) { Universe.Implode(); }
|
|
|
|
|
Ya. Bu it's always hard to tell if a book is decent until you're into it.
If it's not broken, fix it until it is
|
|
|
|
|
Actually, even though that book is quite old, it seems to be a good starting point for:
Security Architecture
I say it that way, because if you are looking for an overview of how malicious software and people attempt to take over your web site then the book is a valuable resource.
Even the section on Securing Your Web Server is still quite relevant because it offers explanations of how attacks occur and how you an protect from them.
Summary
If nothing else, you'll get a good idea of what you need to do, then it'll be much easier to search for specific ways (software, hardware, etc) which will help you to do that work.
Obviously, the book being older is going to mention outdated resources but the overall plan from the book is good.
Again, it's about Security Architecture.
|
|
|
|
|
That's good. I really don't want a system that I am architecting to end up in the news 
if (Object.DividedByZero == true) { Universe.Implode(); }
|
|
|
|
|
My one, my only, and my last (forever) experience with E-Books convinced me to let that market change before I spend money that way again.
If you can navigate the E-Book minefield better than I can, you have my respect and admiration.
|
|
|
|
|
"A spectacular new image of the Milky Way has been released to mark the completion of the APEX Telescope Large Area Survey of the Galaxy (ATLASGAL). The APEX telescope in Chile has mapped the full area of the Galactic Plane visible from the southern hemisphere at submillimetre wavelengths — between infrared light and radio waves. This is the sharpest such map yet made, and complements those from recent space-based surveys. The pioneering 12-metre APEX telescope allows astronomers to study the cold Universe: gas and dust only a few tens of degrees above absolute zero." [^]
«In art as in science there is no delight without the detail ... Let me repeat that unless these are thoroughly understood and remembered, all “general ideas” (so easily acquired, so profitably resold) must necessarily remain but worn passports allowing their bearers short cuts from one area of ignorance to another.» Vladimir Nabokov, commentary on translation of “Eugene Onegin.”
|
|
|
|
|
Nice 
|
|
|
|
|
Quote: Nice
You said it!
Get me coffee and no one gets hurt!
|
|
|
|
|
|
That thing is just creepy... 
There are two types of people in this world: those that pronounce GIF with a soft G, and those who do not deserve to speak words, ever.
|
|
|
|
|
Can't have that creepy thing as a colleague 
|
|
|
|
|
Impressive! Thanks for posting.
Get me coffee and no one gets hurt!
|
|
|
|
|
I wanted it to hit the guy with the hockey stick - he would have deserved it... 
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
|
|
|
|
|
They just cut out that part of the video.
|
|
|
|
|
They should program it to shovel snow, mow the lawn, and wash the car, you know, useful stuff.
"the debugger doesn't tell me anything because this code compiles just fine" - random QA comment
"Facebook is where you tell lies to your friends. Twitter is where you tell the truth to strangers." - chriselst
"I don't drink any more... then again, I don't drink any less." - Mike Mullikins uncle
|
|
|
|
|
jeron1 wrote: They should program it to shovel snow, mow the lawn, and wash the car bring me a beer, you know, useful stuff
FTFY
If it's not broken, fix it until it is
|
|
|
|
|
Kevin Marois wrote: They should program it to shovel snow, mow the lawn, and wash the car, AND bring me a beer, you know, useful stuff
FTFY
"the debugger doesn't tell me anything because this code compiles just fine" - random QA comment
"Facebook is where you tell lies to your friends. Twitter is where you tell the truth to strangers." - chriselst
"I don't drink any more... then again, I don't drink any less." - Mike Mullikins uncle
|
|
|
|
|
If it's not broken, fix it until it is
|
|
|
|
|
That's what the missus is for. Certainly didn't marry her for her cooking! 
|
|
|
|
|
I we don't hear from you again, we'll know why! 
"the debugger doesn't tell me anything because this code compiles just fine" - random QA comment
"Facebook is where you tell lies to your friends. Twitter is where you tell the truth to strangers." - chriselst
"I don't drink any more... then again, I don't drink any less." - Mike Mullikins uncle
|
|
|
|
|
Piyush K Singh
|
|
|
|
|
very impressive but I can't help feeling we'd be a lot further on if a little less effort was wasted on human-like characteristics (bipedal walking is a really stupid way of getting around, let's face it). All that work on recovering from stumbles that it really doesn't need to make could surely have been better spent?
I am not a number. I am a ... no, wait!
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
