Home 

The Enterprise Architecture Blog



 

  Technology   >>  security   >>  the 8 principles of web security

The 8 Principles Of Web Security

        posted by John Spacey, Simplicable, February 28, 2011

Web security is based upon 8 basic principles — these are the goals of security.

web security training

Authentication

Confirm something is authentic. Example: confirming the identity of a user.

Authorization

Specify access rights to resources. Example: only Joe can view Joe's account balance.

Confidentiality

Prevent the disclosure of information to unauthorized individuals or systems. Example: message encryption.

Data / Message Integrity

Data cannot be modified or corrupted without detection.

Availability

Web sites need to be available and fast. Example: many websites can boast 99.99% uptime.

Accountability

When a person or system accesses or changes data their actions should be traceable. Example: logging

Non-repudiation

The ability to prove that a transaction took place. Example: electronic receipts.

   

 

The 8 Principles Of Web Security

Web Security Cheat Sheet  Editor's Pick
What you should know about web security.
There are many steps involved in securing a website.


Permalink:
http://simplicable.com/new/the-8-principles-of-web-security
Home »