Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need to develop an application security strategy for a web application product. Do you have any recommendations as far as procedures and policies are concerned?

Any inputs / guidelines or relevant URLs will much be appreciated.

share|improve this question

closed as too broad by Adi, Terry Chia, TildalWave, Xander, Scott Pack Nov 6 '13 at 13:28

There are either too many possible answers, or good answers would be too long for this format. Please add details to narrow the answer set or to isolate an issue that can be answered in a few paragraphs.If this question can be reworded to fit the rules in the help center, please edit the question.

What have you found so far? Please show us that you have done some preparatory work. – Deer Hunter Nov 6 '13 at 7:52
We are not here to do your job for you, if you are going to post a question at least show that you made some effort by sharing documentation and references you already found. – Lucas Kauffman Nov 6 '13 at 7:58
possible duplicate of – Adi Nov 6 '13 at 8:02
This has got to be a dupe. – tylerl Nov 6 '13 at 8:37

You should follow web security standards outlined by OWASP

The Open Web Application Security Project (OWASP) is a 501(c)(3) worldwide not-for-profit charitable organization focused on improving the security of software. Our mission is to make software security visible, so that individuals and organizations worldwide can make informed decisions about true software security risks.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.