Security In a Web 2.0 Environment

Web 2.0 is a broad term that is not well defined. In this report, we examine the whole field of new web applications and websites that are designed to allow collaborative and interactive working, and which are not under the control of a single person or organisation. This includes collaboration, syndication and application development sites. These sites are built on well-established web technologies that are being used in novel ways. The way in which they are used is more significant from the security perspective than the underlying security characteristics of the technology components. This report explores the completely new range of issues raised by Web 2.0 covering compliance, business processes, infrastructure security and secure code development.