Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I need to develop an application security strategy for a web application product. Do you have any recommendations as far as procedures and policies are concerned? Any inputs / guidelines or relevant URLs will much be appreciated.

share|improve this question

closed as too broad by Adnan, Terry Chia, TildalWave, Xander, Scott Pack Nov 6 '13 at 13:28

There are either too many possible answers, or good answers would be too long for this format. Please add details to narrow the answer set or to isolate an issue that can be answered in a few paragraphs.If this question can be reworded to fit the rules in the help center, please edit the question.

1  
What have you found so far? Please show us that you have done some preparatory work. –  Deer Hunter Nov 6 '13 at 7:52
    
We are not here to do your job for you, if you are going to post a question at least show that you made some effort by sharing documentation and references you already found. –  Lucas Kauffman Nov 6 '13 at 7:58
3  
possible duplicate of owasp.org –  Adnan Nov 6 '13 at 8:02
    
This has got to be a dupe. –  tylerl Nov 6 '13 at 8:37

1 Answer 1

You should follow web security standards outlined by OWASP

The Open Web Application Security Project (OWASP) is a 501(c)(3) worldwide not-for-profit charitable organization focused on improving the security of software. Our mission is to make software security visible, so that individuals and organizations worldwide can make informed decisions about true software security risks.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.