Much discussion about IT security centers around the idea that developers should build secure applications. It makes sense; more than ever, attackers are targeting vulnerabilities in the application ...
It starts simply enough. First someone builds a SOAP interface for an internal system; then the next upgrade to your financial package sports a Web services API. At some point you wake up and realize ...