easy to understand web security info

[Mark St Denis]

Can anyone tell me where I might find easy-to-understand information on web security. I have read lots of stuff by Microsoft (Threats and Countermeasures, etc), but all I've seen presupposes I know alot already, which I don't. Any help would be appreciated, thanks.

 

[Nicole Calinoiu]

Mark,

If you're looking for an introduction to common web application security
problems, the OWASP top ten list (http://www.owasp.org/documentation/topten)
and the W3C security faq
(http://www.w3.org/Security/Faq/www-security-faq.html) might be good places
to start. If these aren't the sort of thing you were looking for, perhaps
you could be a little more precise about the type(s) of background
information you feel you might be lacking.

HTH,
Nicole

 

[Mark St Denis]

Thanks Nicole...the OWASP site is an excellent resource

(what is HTH?)

 

[Nicole Calinoiu]

HTH = Hope this helps