This document introduces an S-vector model for managing web application security. It was created by Russell R. Barton of Penn State University, William J. Hery of Penn State eBusiness Research Center, and Peng Liu of Penn State School of Information Sciences and Technology. The S-vector model provides a framework to assess security risks and requirements across different dimensions, including technical, organizational and human factors.

1. An S-vector for Web Application Security Management
Russell R. Barton William J. Hery Peng Liu
Smeal College of Business Penn State eBusiness Research School of Information Sciences and
Administration Center Technology
Penn State University 51 Mt. Pleasant Road Penn State University
University Park, PA 16802 Morristown, NJ 07960 University Park, PA 16802
001-814-865-7669 001-973-895-3451 001-814-863-0641
rbarton@psu.edu hery@nac.net pliu@ist.psu.edu
ABSTRACT