Developing secure web applications is important to protect sensitive data and systems. The document provides guidelines for developing secure applications throughout the lifecycle from design to deployment. It advocates for a hierarchical view of security where each component is verified and policies are in place to monitor and adapt protections as needed. Application shields and policy recognition tools can help automate security and reduce risks.

1. Developing Secure Web Applications
White Paper
Izhar Bar-Gad
Amit Klein
Sanctum Inc.
June 2002
Sanctum, the Sanctum logo, AppShield, Policy Recognition and Adaptive Reduction are trademarks of
Sanctum, Inc. Products mentioned herein are for identification purposes only and may be registered
trademarks of their respective companies. Specification subject to change without notice.
2002 Sanctum, Inc. All rights reserved.