Information Security resources for Application Developers

Security Responsibilities of Application Developers

1. Ensure that your web applications follow Penn's security standards.
2. Make sure that the system administrator of your server has taken steps to see that your server is properly secured.
3. Ensure that access to your sensitive applications is properly authenticated and authorized.
4. Subscribe to your operating system vendor and application software vendors' security advisories email list.
5. Report all critical security incidents to information security.

Guides, Checklists and Resources

• Web Security Standards: Things to consider in order to limit the risks associated with using web-based applications for sensitive data
• SWAT: Penn's Secure Web Application Team - "Top 10 Web Application Security Vulnerabilities"
• Securing web pages: an example describing methods that are applicable for an Apache web server
• Critical Host policy information for web application developers: The requirements and constraints for attaching and securing a critical computer to PennNet
• Critical Host registration
• PennKey information for web application developers: things to know about authentication and authorization

Last updated: Friday, July 13, 2007