|
At the core of any secure application, is the overall design and architecture of
the system. The team at Appsecure has been building and design secure
applications for many years and we work with our clients to ensure that the
design and foundation of any system is secure and provides a scalable and
extensive platform for building a secure application.
Our team has extensive experience with designing systems including .NET, JAVA
enterprise systems as well as other backend, web services and smaller
application systems including mobile application environment. With the
experience in our team and resources available, Appsecure is the perfectly
suited security partner.
When completing architecture, design and application security analysis the
following key areas are reviewed and reported on:
- Authentication (Identification of user's and systems)
- Authorisation (Access Control to systems, services and data)
- Session Management (Manage communication between client-server)
- Validation (Countermeasures for managing input and output of application data)
- Error Handling (Managing exceptions and failures securely within the application
platform)
- Auditing (Capturing events that require security notification or alert)
- Data Security (Data security and storage/handling of sensitive information)
- Configuration Maintenance (Hosting/Environment configuration & interaction
between layers)
- Business Logic Design (Informational design and data access architecture)
- Common Vulnerabilities (Common issues identified in Applications i.e CSRF, XSS,
SQLi)
Our dedicated team can work closely with your development and project teams
during the lifecycle of a project. Typically, our team is engaged in the early
stages of design and development. This ensures that the initial concept and
architecture has the relevant security controls inline with the risk associated
with the application.
Our architecture and design programs, are typically part of a larger engagement
with our clients in which initially we work to ensure the design incorporates
security controls. Then, during the development lifecycle coming back into the
project at regular intervals to perform code review, architecture review and
overall testing, thus ensuring the project has security implemented throughout
the lifecycle.
By considering security as an initial part of the project and performing
reoccuring assessments during the build of the project, this significantly
reduces the risk of an application being launched with vulnerabilities. This
reduces the overall cost of security to the project over the entire lifecycle of
a project.
|