Information security is an ever-evolving process. In the past, the majority of security breaches occurred at the network layer of corporate systems. However, today many companies are unaware that their corporate assets are exposed even though they have implemented network firewalls and intrusion detection systems.

In part, this is due to organisations not yet incorporating web application security into their development processes. A company's web applications can be the most important, and most vulnerable, entry point into the organisation.

By Caleb Sima at vnunet.

[ Read more ]