Due to the dramatically increasing number of cyber security threats, security has become a top priority for many companies and even for people operating only small websites. Unfortunately, due to their countless variants and the constantly and rapidly changing threat landscape keeping track with the latest developments is almost impossible.
As a result, attackers are permanently one step ahead. Attacks are getting smarter, more sophisticated and better organized. Due to that data breaches, phishing and social engineering attacks, denial of service attacks, website defacement, malware and ransomware attacks — just to mention just a few — are reported almost on a daily basis. Very lately we can also see an ever increasing number of successful supply chain attacks.
If a company becomes the victim of a successful attack, this could have a significant impact on its business. It might happen that customers won’t trust the company anymore and that they will move to its competitors. If this happens, most likely it will become rather challenging to recover from this (it might be even impossible) as it’s very easy to loose trust but very difficult to build trust.
Hence, considering security especially during development and the operation of web services is getting more and more important. In the past security was…
