Skip to content

Security Hardening Guide

Security is a fundamental requirement for most web applications. Organizations often demand detailed accounting of web application security, especially after mainstream media coverage of high-profile vulnerabilities or exploits. This guide instructs architects and administrators on how to evaluate and improve the security of applications based on HCL Digital Experience.

Security is a broad topic with many aspects to consider. This can become quite complex when applications integrate with other systems to deliver a solution. To conceptually simplify and organize your efforts while evaluating your application, consider these several fundamental concepts of information security:

  • Authentication

    • What is this?

    • Users provide credentials to identify themselves to the application.

  • Authorization

    • What can they do?

    • Application determines what data the user can access and what functions they can perform on/with that data.

  • Non-repudiation

    • What have they done?

    • Establish a record of actions against which user claims can be verified.

  • Confidentiality

    • Keep secrets

    • Prevent unauthorized disclosure of data, in storage and in transit.

  • Integrity

    • Stop corruption

    • Prevent unauthorized modification of data, in storage and in transit.

  • Availability

    • Be reliable

    • Ensure that authorized users can access data, when needed.