Security in web 2.0 application development

  • Authors:
  • Adam A. Noureddine;Meledath Damodaran

  • Affiliations:
  • Microlead Business Solutions, Richland Hills, Texas;University of Houston -- Victoria, Victoria, Texas

  • Venue:
  • Proceedings of the 10th International Conference on Information Integration and Web-based Applications & Services
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

In this paper we survey and validate some of the known security and reliability issues in Web 2.0 based application development. We see in Web 2.0 application development an evolving paradigm shift in security focus from servers to clients. Our approach consists of critically reviewing relevant literature including books, published articles, vendor documentations, white papers, and expert opinions; performing a detailed technical examination of the claims of exploits; and presenting the findings. Then we examine some industry best practices in Web 2.0 application security, and list the most effective approaches and countermeasures. Finally, we present some recommendations to improve the security environment in Web 2.0, as well as an indication of some future research in this area. The paper is aimed at both developers and users of Web 2.0 based systems.