--- title: "Cybersecurity: Best Practices to Protect Your Web Apps From Common Cyber Attacks" description: Learn the best ways to protect your web apps from cyber threats. Principal Cybersecurity Engineer, Farhan Badshah, shares his best practices. image: https://blog.metrostar.com/hubfs/Cybersecurity-best-practices.jpg --- [![MetroStar Systems Logo](https://blog.metrostar.com/hs-fs/hubfs/raw_assets/public/MetroStar_Jan2021/images/Logo-2021.png?width=413&name=Logo-2021.png "MetroStar Systems Logo")](https://www.metrostar.com/) - Who We Are - [Meet MetroStar](https://metrostar.com/who-we-are/) - [Leadership](https://metrostar.com/leaders/) - [Partnerships](https://www.metrostar.com/partnerships/) - [Innovation Lab](https://www.metrostar.com/innovation-lab/) - [Contract Vehicles](https://www.metrostar.com/contract-vehicles/) - What We Do - [Artificial Intelligence](https://www.metrostar.com/ai-and-government/) - [Digital Experience](https://www.metrostar.com/digital-experience/) - [Application Modernization](https://www.metrostar.com/application-modernization/) - [Enterprise IT](https://www.metrostar.com/enterprise-it-services/) - [Products + Solutions](https://www.metrostar.com/federal-government-products-solutions/) - Who We Serve - [National Security](https://www.metrostar.com/national-security/) - [Defense](https://www.metrostar.com/defense-customers/) - Insights - [Blog](https://blog.metrostar.com/) - [Case Studies](https://www.metrostar.com/case-studies/) - [News + Events](https://metrostar.com/news-events/) - Join Us - [Careers](https://www.metrostar.com/join-us/) - [Open Roles](https://www.metrostar.com/jobs/) - [Cleared Jobs](https://www.metrostar.com/cleared-jobs/) - [Veterans](https://www.metrostar.com/veterans/) - [Internships](https://www.metrostar.com/internships/) - [Contact Us](https://metrostar.com/contact-us/) - Who We Are - [Meet MetroStar](https://metrostar.com/who-we-are/) - [Leadership](https://metrostar.com/leaders/) - [Culture](https://metrostar.com/culture/) - [Partnerships](https://www.metrostar.com/partnerships/) - [Innovation Lab](https://www.metrostar.com/innovation-lab/) - [Contract Vehicles](https://www.metrostar.com/contract-vehicles/) - What We Do - [Artificial Intelligence](https://www.metrostar.com/ai-and-government/) - [Digital Experience](https://www.metrostar.com/digital-experience/) - [Application Modernization](https://www.metrostar.com/application-modernization/) - [Enterprise IT](https://www.metrostar.com/enterprise-it-services/) - [Products + Solutions](https://www.metrostar.com/federal-government-products-solutions/) - Who We Serve - [National Security](https://www.metrostar.com/national-security/) - [Defense](https://www.metrostar.com/defense-customers/) - Insights - [Blog](https://blog.metrostar.com/) - [Case Studies](https://www.metrostar.com/case-studies/) - [News + Events](https://metrostar.com/news-events/) - Join Us - [Careers](https://www.metrostar.com/join-us/) - [Open Roles](https://www.metrostar.com/jobs/) - [Cleared Jobs](https://www.metrostar.com/cleared-jobs/) - [Veterans](https://www.metrostar.com/veterans/) - [Internships](https://www.metrostar.com/internships/) - [**Contact Us**](https://metrostar.com/contact-us/) [blogs](https://blog.metrostar.com/) > [Cyber](https://blog.metrostar.com/tag/cyber) # Cybersecurity: Best Practices to Protect Your Web Apps From Common Cyber Attacks 3 MIN READ 10/21/2020 | [Cyber](https://blog.metrostar.com/tag/cyber) | [Videos](https://blog.metrostar.com/tag/videos) ![](https://blog.metrostar.com/hubfs/Cybersecurity-best-practices.jpg) ***It is [National Cybersecurity Awareness Month (NCSAM)](https://www.cisa.gov/national-cyber-security-awareness-month)! While enhancing your cyberspace is a 24/7 activity, we have taken the time to highlight cybersecurity practices at MetroStar to celebrate this month.*** Did you know there are cyber-attacks every 39-seconds? Most of these attacks target web applications, so learning the best ways to protect your web apps is vital to your organization's success.  Principal [Cybersecurity Engineer](https://www.metrostarsystems.com/careers/), Farhan Badshah, shares his best practices that will keep your web applications secure from cyber threats. ## **Overview of Best Practices** **[Input validation](https://www.whitehatsec.com/glossary/content/input-validation#:~:text=Input%20validation%2C%20also%20known%20as,from%20entering%20an%20information%20system.)** is a way to prevent incorrect data from entering your application. You should check your user-submitted variables for malicious inputs that can cause strange behaviors within your software. One approach to this is called a *[**whitelist**](https://www.csoonline.com/article/3562429/whitelisting-explained-how-it-works-and-where-it-fits-in-a-security-program.html)-* a cybersecurity strategy that creates a set of patterns or criteria that blocks benign inputs. The whitelist approach allows for user criteria to be met while blocking everything else. It is also common to see a web application using **[single sign-on](https://www.cloudflare.com/learning/access-management/what-is-sso/)** or**[multi sign-on authentication](https://www.nten.org/article/the-basics-of-multi-factor-authentication-and-single-sign-on/)**, which pulls users' credentials from a directory or an identity database service. Multi-factor authentication can make your application more secure and is the preferred cybersecurity measure.  For user authorization, consider granular access control or **[granularity.](https://www.helpsystems.com/products/privileged-access-management/granular-control)** Granularity only gives users access to the information and applications required for them to complete their tasks. This step can help protect your organization from insider threats. Another best practice is to keep your error messages generic. Error messages can range from simple built-in notes to entire de-bugging information. It is important to remember that application errors should never reveal sensitive application data to external users. ## **MetroStar's Approach** MetroStar had an opportunity to develop a secure web application for a large federal agency. We ensured proper security requirements were included as a part of our design and implementation process. Some of these items consisted of encrypting the data in transit, two-factor authentication for login help, and storing information in a way that meets FIPS 140-2 compliance. To protect the customer’s application from malicious attacks, we implemented input validation, anti-forgery tokens, and other strong coding practices. Also, continuous monitoring and scanning of the application are used to address vulnerabilities and patches required to maintain ATO compliance. Watch our video for more best practices, [password tips](https://www.metrostarsystems.com/cyber-security/nist-password-security-guidelines/), and information on MetroStar's Agile Design & Implementation Process.   **Learn more about MetroStar's Cybersecurity.** **[![our services](https://no-cache.hubspot.com/cta/default/7196770/d2de22ce-ed7f-420e-bc4b-ef29042c6b46.png)](https://cta-redirect.hubspot.com/cta/redirect/7196770/d2de22ce-ed7f-420e-bc4b-ef29042c6b46)** ![Picture of Farhan Badshah](https://blog.metrostar.com/hs-fs/hubfs/MetroStar-Logo-2021-sun@3x-Nov-10-2021-08-51-23-93-PM.png?width=150&name=MetroStar-Logo-2021-sun@3x-Nov-10-2021-08-51-23-93-PM.png) Written By: [Farhan Badshah](https://blog.metrostar.com/author/fbadshah) Former MetroStar Principal Cybersecurity Engineer ### you might like these too ### [Why We Built a Free and Open Source Cybersecurity Solution](https://blog.metrostar.com/free-and-open-source-cybersecurity-solution) ##### DevSecOps | Cyber ### [Five 2024 GovCon Tech Trends: Perspectives from Six Industry Experts](https://blog.metrostar.com/five-govcon-tech-trends-from-six-industry-experts) ##### Enterprise IT | Feature | Cyber | AI/ML | Human-Centered Design ### [Indiana Students and Professionals Tackle Cybersecurity Challenge](https://blog.metrostar.com/cybersecurity-challenge) ##### Career Growth | Cyber [view more](https://blog.metrostar.com/tag/cyber) ## want to stay in the loop? Never miss a thing by signing up for our newsletter. We periodically send out important news, blogs, and other announcements. Don’t worry, we promise not to spam you. [![MetroStar Systems Logo](https://blog.metrostar.com/hs-fs/hubfs/raw_assets/public/MetroStar_Jan2021/images/MetroStar-Footer-Logo.png?name=MetroStar-Footer-Logo.png "MetroStar Systems Logo")](https://www.metrostar.com/) - [Services](https://www.metrostar.com/#digital-services) - [About Us](https://www.metrostar.com/company/) - [Jobs](https://www.metrostar.com/jobs/) - [Contract Vehicles](https://www.metrostar.com/contract-vehicles/) Creating dynamic digital solutions is kind of our thing - we've been transforming and accelerating government missions since 1999. [say hello](https://www.metrostar.com/contact-us/) [![MetroStar Systems Logo](https://blog.metrostar.com/hs-fs/hubfs/raw_assets/public/MetroStar_Jan2021/images/MetroStar-Footer-Logo.png?name=MetroStar-Footer-Logo.png "MetroStar Systems Logo")](https://www.metrostar.com/) [employee login](https://stargate.metrostarsystems.com/) © 2026 MetroStar Systems, LLC - All Rights Reserved | [Privacy Policy](https://www.metrostar.com/privacy-policy/) Go to Top