One of the questions I’m asked most frequently is, “How can our organisation develop more secure Web applications?”

There are many ways of improving in-house application development processes, and most come under the concept of the Security Development Lifecycle (SDL).

The aim of the SDL is to reduce the number of security-related bugs in applications in order to improve reliability and reduce maintenance costs. In this article, I want to look at the Model-View-Controller (MVC) framework, which lends itself very well to those who wish to learn Web application development methodology and can be used within the SDL.

Web applications often grow in an ad hoc fashion, creating so called "spaghetti code," were complex and tangled control structures make managing and reviewing.

To read more. Click here

Recent News