Re: [WEB SECURITY] definition of "web application security"?

[Pete Herzog <lists@xxxxxxxxxx>]

I bastardized some OSSTMM language to fit into the infamous CIA stuff 
already well understood by most management and tried to match it with 
your style:

Web Application Security is the separation or control of threats from 
assets within or maintained by web-based services to protect the 
integrity of the service, the confidentiality of the communication, 
and the availability of the application.

It's late here so it probably still needs to be tweaked in ways I'm 
too tired to notice right now. It also probably doesn't help that I 
believe Web Application Security to be a misnomer anyway. But hey, I 
get it that you're looking for a marketing angle.

-pete.
OPST, OPSA, OPSE, OWSE
http://www.isecom.org


----------------------------------------------------------------------------
Join us on IRC: irc.freenode.net #webappsec

Have a question? Search The Web Security Mailing List Archives: 
http://www.webappsec.org/lists/websecurity/archive/

Subscribe via RSS: 
http://www.webappsec.org/rss/websecurity.rss [RSS Feed]

Join WASC on LinkedIn
http://www.linkedin.com/e/gis/83336/4B20E4374DBA