web应用程序架构何时何时审核？
the most time- and cost-effective way to address application security risk is early in the software development lifecycle (sdlc), and well before the application is in production. it is ideal to identify and eliminate security flaws in the application’s architecture before coding begins.
among the major areas that are typically evaluated in a web application architecture review are authentication, protection of sensitive data sent to and from the application, preventing session hijacking, validating input, auditing/logging, session management and 第三方图书馆的漏洞.