The biggest issue with utilizing web-based applications is the strong
possibility of suffering a data breach. Data breaches are typically caused
by poor risk assessments and or sub par management practices by the IT
security department. Some of the risks companies are likely to face are
mentioned below. Measures taking to mitigate these types of risks are
implementing Web Application Firewalls (WAF), providing adequate
isolation protection for configuration files and website content, and
conducting routine reviews/audits to verify content integrity.
*
Injections – invalid data disguised in various commands or queries with
the intent to fool the interpreter into executing unintended commands.
*
Broken Authentication and Session Management – compromised access
tools such as passwords or session tokens.
*
Cross-Site Scripting – an application shares or updates contaminated data
with a new web page without proper validation.
