Web Application Security for Managers

As a manager, part of your job is to plan and prioritize tasks and to control the work done. To plan and prioritize tasks, you need to have a global overview of all issues. To control the work done, you need a basic understanding of the subject. The first part of the article intends to convince the reader that web application security matters. This may not be obvious to all managers. They sometimes believe that a firewall and the use of the SSL protocol are enough to secure a web application. The second part of the article surveys some of the potential problems and discusses solutions. We will look at issues like data manipulation, input validation, SQL query poisoning, session hijacking, and some others. The article ends with a summary of the recommendations.