Ask Slashdot: Writing Hardened Web Applications?

Posted by Unknown on Monday January 2, 2012 @12:10PM from the i-hear-plain-text-password-databases-are-secure dept.

rhartness writes "I am a long time Software Engineer, however, almost all of my work has been developing server-side, intranet applications or applications for the Windows desktop environment. With that said, I have recently come up with an idea for a new website which would require extremely high levels of security (i.e. I need to be sure that my servers are as 100% rock-solid, unhackable as possible.) I am an experienced developer, and I have a general understanding of web security; however, I am clueless of what is requires to create a web server that is as secure as, say, a banking account management system. Can the Slashdot community recommend good websites, books, or any other resources that thoroughly discuss the topic of setting up a small web server or network for hosting a site that is as absolutely secure as possible?"

1 of 333 comments (clear)

Min score:

Reason:

Sort:

So your intranet apps aren't secure? by Stormthirst · 2012-01-02 12:15 · Score: -1, Flamebait

Users always have ways of breaking apps in completely unintended ways. If you can't harden your intranet apps from 'ordinary' users - not sure you've got much hope against malicious intent. Intranet apps should be written as if it were posted on the internet for all and sundry to see and have a go at.