Bang

Abstract — Application-level web security refers to obligation inherent in the code of a web-application itself. few months ago application-level vulnerabilities have been exploited with serious consequences: hackers have good knowledge of e-commerce sites into shipping goods for no charge, usernames and passwords have been harvested and confidential information has been leaked. In this paper we introduce new tools and techniques which address the problem of application-level web security. (i) We describe a scalable structuring mechanism facilitating the abstraction of security policies from large web-applications developed in heterogeneous multi-platform environments. (ii) In that present a tool which assists programmers develop secure applications which are resilient to a wide range of common attacks. (iii) The report results and experience arising from our implementation of these techniques