WebFund 2014W Lecture 15

From Soma-notes
Revision as of 17:50, 7 March 2014 by Soma (talk | contribs) (Created page with "==Web Security== Security is (roughly): * confidentiality * integrity * availability Cryptography (SSL, secure hashes) are tools for achieving security. But they are not the...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Web Security

Security is (roughly):

  • confidentiality
  • integrity
  • availability

Cryptography (SSL, secure hashes) are tools for achieving security. But they are not the only ones.

Security really matters for web applications because, by design, most are accessible by anyone in the world.

Threat Models

Attacker Goals

Points of Vulnerability