Security
Web application development is very different from other environments. Web browser and the nature of HTTP pose security pitfalls not found in traditional client-server applications.
At ZipTechnologies our web developers know how web servers and browsers interact, the nature of Internet communications, and the attacks web applications undergo on the Internet.
Ziptechnologies is the only Caribbean Web development company to have built financial applications for three Caribbean institutions that have passed the most rigourous 1st world security checks.
High-level Security Principles Used
A few of the reference points used when designing systems.
Validate Input and Output
User input and output to and from the system is the route for malicious payloads into or out of the system. All user input and user output should be checked to ensure it is both appropriate and expected.
Authentication
This is the process of determining caller identity.
Fail Securely (Closed)
Any security mechanism should be designed in such a way that when it fails, it fails closed.
Only as Secure as the Weakest Link
Attackers will find the weakest point and attempt to exploit it.
