Checklist for building a secure web application.

Hi,
Look at
1. authentication
2. authorization
3. privacy
4. non-repudiation

when designing security into a web application. the key is to design security
beforehand and not "add it on" at the end.

There are a number of excellent web application security papers available
on the Net. Check the following websites:

http://www.spidynamics.com/ - lots of white papers
http://www.securityportal.com - enroll for the webappsec list digest

Read Mike Howard's book on building Secure Applications.
Search on Google for web app security pdf. Bound to get a whole lot of links.

HTH,

Arvind Shyamsundar
Brainbench MVP for Internet Security
www.brainbench.com