Here's what you need to know to make yours as secure as possible. Everyone, it seems, has a Web application. Not all applications are created, or implemented, equal, though. The lack of Web application security is quickly becoming a fast and easy way into a company's network.
All Web applications are different, yet they're all the same.
They all run on the same few Web servers and use the same shopping cart software, but they're different because at least part of the application includes homegrown code. Companies often don't have the time or resources to properly harden a Web server and perform a thorough review of the application code before going live on the Internet. Subsequently, many Web applications are vulnerable through the Web server and bugs in the in-house developed code. Web application attacks include Denial of Service attacks on the Web application, changing Web page content, and stealing sensitive corporate or user information, such as credit card numbers. The denvergov.org Web site was defaced and turned into a rant on Web hacking and saving Napster.