In his latest post, Chris Shiflett links to more information from Andrew van der Stock about his proposed PHP security architecture.

Andrew van der Stock has started providing more details about a proposed security architecture for PHP, beginning with the SABSA (Sherwood Applied Business Security Architecture) approach. This approach is broken down into layers:

• Contextual
• Conceptual
• Logical
• Physical
• Component

Andrew's post, a follow-up from previous posts, maps out the structure above visually, and provides this link to a book published dealing with a business-driven security approach...