Marco Mirko Morana

Marco Mirko Morana

My career in cyber-security spans more than 20 years working in different roles and industry sectors. As a author, besides co-authoring the book on risk centric threat modelling I wrote a book on application security risk management for CISOs and several white papers covering application and software security topics.

Root Causes of Web Application Vulnerabilities

Published in Insecure Magazine, Issue 15, 2008

Before to diagnose the disease and provide the cure a doctor looks at the root causes of the patient sikness, the risk factors and the symptoms. In the case of application security most of the root causes of the security issues are due to insecure software: the risk factors can be found in how good or bad the application/product is security designed, coded and tested.

Recommended citation: Marco Morana, (2008). "Issue 15 ." InSecure Magazine. 1(1).
Download Paper | Download Slides