ABSTRACT

Subsequently, many Web applications are vulnerable

through the servers, applications, and in-house developed

code. These attacks pass right through a perimeter firewall

security because port 80 (or 443 for SSL) must be open for

the application to function properly. Web application

attacks include denial-of-service attacks on the Web appli-

cation, changing Web page content, and stealing sensitive

corporate or user information such as credit card numbers.