A generic architecture for web applications to support threat analysis of infrastructural components

Abstract

In order to perform a useful threat analysis of a web application platform, some architectural assumptions about such applications must be made. This document describes a generic architecture for typical 3-tier web applications. It serves as the basis for analyzing the threats in the most important infrastructural components in that architecture, presented in the following papers. © 2005 by International Federation for Information Processing.