Computer Security World

I will try to maintain this web page as a meta resource list by adding any links that catch my fancy in a categorized manner.

Note: If you want to send me suggestions on what I should add here, please click here. I will add the link at my discretion, only if believe it is useful. I do NOT expect any links back to my website if I add yours.

Tutorials:

• Web Applications Security Tutorial. Written in 2003, but still a very good resource.
• Web application security tutorial Journal of Computing Sciences in Colleges: Volume 23 , Issue 1 A very good tutorial talking about some of the common web application vulnerabilities and how to avoid them while coding. If you can get access to it, it is very useful.
• OWASP Guide Project: A very comprehensive guide for web application builders. This is a very comprehensive resource.

Cheat Sheets:

• Cheat Sheet: Web Application Security This a slight old, but very good cheat sheet for web application security threats. It is a part of Threat Modeling Web Applications.
• OWASP Top 10 lists can also serve as a good cheat sheet for web applications security.
• A nice and quick read cheatsheet

Blogs:

• Web application security blog by some security consultants
• Mighty Seek is primarily a podcast about Web Application Security and Development

Other Useful Websites:

• OWASP has lots of other stuff besides the guide.
• SANS Top 20 threats list is not specific to web applications, but is useful to look at for security threats in general. It is a living document and is constantly updated with new threats.