web应用程序架构审查是什么？
among the major areas that are typically evaluated in a web application architecture review are authentication, protection of sensitive data sent to and from the application, preventing session hijacking, validating input, auditing/logging, session management and 第三方图书馆的漏洞.
a web app pen test is an “ethical hacking” exercise that pits a running application’s security controls against the skills of the attackers. an application architecture review carefully examines various aspects of the application’s design—ideally before coding begins—to eliminate cyber risk before it can impact stakeholders.