Improving Web Application Installation as a Security Imperative

December 7th, 2005

It looks there is a Mambo worm out now. I read Hackers Hitting Popular Apps a couple of weeks ago and it mentioned that hackers are targeting PHP apps among other things. Dog bites man for some. More interesting was this quote:

“The bottom line is that security has been set back nearly six years in the past 18 months,” Alan Paller, director of research for the SANS Institute, wrote in an E-mail. “Six years ago, attackers targeted operating systems and the operating system vendors didn’t do automated patching. In the intervening years, automated patching protected everyone from government to grandma. Now the attackers are targeting popular applications, and the vendors of those applications do not do automated patching.”

I’ve advocated better web application installation for a while, but as a usability issue. Increasingly, it is also a security issue. Just another example of why I think the PEAR installer is important. (and why I hope Zend PHP Framework is released on a PEAR channel.)

Filed Under

Both comments and pings are currently closed.

5 Responses to “Improving Web Application Installation as a Security Imperative”

  1. Sandro Groganz says:
    12/8/2005 at 12:12 am

    The eZ publish Network Edition ships with an automated update manager which allows for automated patching in case there’s a security flaw: http://ez.no/services/ez_publish_network

  2. Acheter Nike Air Max says:
    11/14/2011 at 2:15 am

    dédouanement. Bon de réduction peut être eu avec ces magasins si vous êtes disposé à régler pour les gants

  3. Chaussre Air Jordan says:
    11/14/2011 at 2:15 am

    vue de face montrant sur un fond blanc. Le visage doit être comprise entre 1 et 1 3 / 8 pouces à partir du menton au sommet de la tête. Chapeaux, coiffures et uniformes, sauf mot de vêtements religieux quotidiens ne peuvent pas être portés.

  4. Ilana Reggio says:
    1/10/2012 at 5:10 am

    You are the most God-less man I know. You should be ashamed of yourself.

  5. find it worrying that the news on spyware and virus problems is not keeping up with the danger. It looks like several years since spy ware or virus software gained from any kind of awareness greatly. I wonder if that's the reason why attacks continue and says:
    5/7/2012 at 9:53 am

    Thank you for this write-up and also the many others that I’ve read from the site. Have you ever considered about being a guest blogger. My small website could definitely use a person with your background to share every once in awhile. You truly know a lot.