Toward Secure Web Application Design: Comparative Analysis of Major Languages and Framework Choices
Journal Title: International Journal of Advanced Computer Science & Applications - Year 2016, Vol 7, Issue 2
Abstract
We will examine the benefits and drawbacks in the selection of various software development languages and web application frameworks. In particular, we will consider five of the ten threats outlined in the Open Web Application Security Project (OWASP) Top 10 list of the most critical Web application security flaws [12], and examine the role of three popular Web application frameworks (Ruby on Rails (Ruby), Play Framework (Scala), and Zend Framework 2 (PHP)) in addressing a selection of these major threats. In addition, we will compare the strengths and weaknesses of each Web application framework as it pertains to the implementation of strong security measures. Furthermore, for each framework examined, assess how an organization should address these security threats in their software design utilizing their framework of choice. We will suggest the direction in which an organization facing such a decision ought to head; moreover, facilitate such a decision by assessing the benefits and drawbacks of each, based on the findings; and encourage one to decide what works best for the organization’s technical direction.
Authors and Affiliations
Stephen Tipton, Young Choi
Keywords
Related Articles
- EP ID EP95921
- DOI 10.14569/IJACSA.2016.070206
- Views 114
- Downloads 0
Cluster Based Routing Protocols for Wireless Sensor Networks: An Overview
Energy consumption of nodes in Wireless Sensor Networks (WSNs) is a very critical issue, particularly in scenarios where the energy of nodes cannot be recharged. Optimal routing approaches play a key role in energy utili...
A Lexicon-based Approach to Build Service Provider Reputation from Arabic Tweets in Twitter
Nowadays Social media has become a popular com-munication tool among Internet users. Many users share opinions and experiences on different service providers everyday through the social media platforms. Thus, these platf...
Auditing Hybrid IT Environments
This paper presents a personal approach of auditing the hybrid IT environments consisting in both on premise and on demand services and systems. The analysis is performed from both safety and profitability perspectives a...
Size Reduction and Performance Enhancement of Pi Shaped Patch Antenna using Superstrate Configuration
Patch antennas are modern elements of today’s world communication technology. They appear to have unique characteristics and features with their unique power with handling capabilities and lighted structure. This paper f...
Competitive Sparse Representation Classification for Face Recognition
A method, named competitive sparse representation classification (CSRC), is proposed for face recognition in this paper. CSRC introduces a lowest competitive deletion mechanism which removes the lowest competitive sample...