Security Implementation Patterns

From Guidance Share

Contents 1 Input and Data Validation 2 Authentication 3 Authorization 4 Auditing and Logging 5 Communications Security 6 Configuration Management 7 Cryptography 8 Data Access 9 Exception Management 10 Sensitive Data 11 Session Management

Input and Data Validation

• White List Input
• Black List Input

Authentication

Authorization

Auditing and Logging

Communications Security

Configuration Management

Cryptography

Data Access

• Type Safe SQL
• Escaping Special SQL Characters
• SQL Query Concatenation

Exception Management

Sensitive Data

Session Management