Security Begins With Code
Most Web applications are created on frameworks that have bells and whistles to rapidly develop web applications, but have no focus on security. Similarly, programmers are rewarded for rapidly develop software features in a timely manner. Often there is no recognition for developing secure applications. Even if the right incentive were in place, the stark reality is that few security courses for coding are taught at the nation’s leading computer schools, leaving secure programming skills in short supply. Together these forces shape an environment where insecure coding manifests itself in many of today’s Web applications leaving vulnerabilities that hackers often exploit.
Organizations like OWASP and SANS are leading the way to improve coding practices so that security standards are met. Following the recommendations of these organizations enables developers to build secure Web applications.
Mykonos Software provides an automated solution that compliments this effort with the only industry framework that ensures Web applications are developed secure by default and address every vulnerability listed on the OWASP Top 10.
The Symptom or the Cure?
Industry analysts agree that the majority of security threats have shifted to the Web application layer. Yet, still today, the majority of security is based at the network layer. Using network perimeter security in an attempt to block vulnerability exploits of your code avoids the underlying problem of actually fixing the code. Fixing identified vulnerabilities after a source code analysis is time consuming requiring first that development resources are used to verify the findings, then actually correcting the code. Securing the code requires knowledge of secure coding concepts and methodologies, and as we’ve already said, these skills are in short supply.
A powerful cure is to build the Web application on a framework that is secure by default and enables developers to rapidly build secure Web applications.
Improved Development Practices
The Mykonos Framework improves development in three ways:
- Developers build Web applications more securely, including security features like access management, session management, validation, encoding and obfuscation.
- Developers create feature-rich Web applications with drag-and-drop desk-top functionality.
- Developers build Web applications faster, because the security is built-in during the coding. The typical cycle of code development is shortened significantly.
