Why does any organization need to worry about Web security?
The SC Magazine recently published a report from Cenzic that reveals that Web applications account for 80 percent of Internet vulnerabilities. [http://www.scmagazineus.com/web-apps-account-for-80-percent-of-internet-vulnerabilities/article/129027/] “Vulnerabilities in web applications made up 80 percent of all web-related flaws in the second half of 2008 and rose in prevalence by about eight percent from the first half of the year, according to a report released Tuesday by Cenzic.” “The web application vulnerabilities, for example, were in Adobe, SAP, Microsoft, Mozilla, Sun, Apache, and Oracle products.” SANS rates Web application vulnerabilities as the number one class of server-side vulnerabilities in their Top 20. MITRE’s “Top 25 Most Dangerous Programming Errors” covers most of the Web application vulnerabilities. The community has constructed this list based on the prevalence and the severity of the threats. MITRE has also captured the prevalence of these vulnerabilities in their
