@@ -2,4 +2,22 @@ \chapter{Conclusions}
2
2
3
3
Throughout this dissertation, we have discussed and analyzed the state
4
4
of web security today. I have proposed new approaches that aim to
5
- fight vulnerabilities.
5
+ find vulnerabilities before a malicious attacker has the chance. It is
6
+ in this vein of preemptively finding vulnerabilities that I believe
7
+ will have the greatest return-on-investment. By finding
8
+ vulnerabilities early on in the development process, the
9
+ vulnerabilities will be easier and cheaper to fix.
10
+
11
+ In this spirit, for moving forward I see the web security community
12
+ moving to approaches that create web applications that are secure by
13
+ construction. Therefore, vulnerabilities can be prevented, just by
14
+ designing an application in a certain way, or perhaps by creating a
15
+ new language or framework that is easy to statically analyze. As shown
16
+ throughout this dissertation, web application vulnerabilities are
17
+ incredibly prevalent, and show no signs of stopping. In order to
18
+ counteract this trend, we require novel ideas: new ways of designing
19
+ applications, new tools to automatically find security
20
+ vulnerabilities, or new approaches to web applications. The web is too
21
+ important to wait---we must take responsibly for securing this popular
22
+ platform.
23
+
0 commit comments