When you launch an application on the web, every hacker in the world has access to it. Are you sure your web apps can stand up to the most sophisticated attacks?
Grokking Web Application Security is a brilliantly illustrated and clearly written guide that delivers detailed coverage on
How the browser security model works, including sandboxing, the same-origin policy, and methods of securing cookies Securing web servers with input validation, escaping of output, and defense in depth A development process that prevents security bugs Protecting yourself from browser vulnerabilities such as cross-site scripting, cross-site request forgery, and clickjacking Network vulnerabilities like man-in-the-middle attacks, SSL-stripping, and DNS poisoning Preventing authentication vulnerabilities that allow brute forcing of credentials by using single sign-on or multi-factor authentication Authorization vulnerabilities like broken access control and session jacking How to use encryption in web applications Injection attacks, command execution attacks, and remote code execution attacks Malicious payloads that can be used to attack XML parsers, and file upload functions
Grokking Web Application Security teaches you how to build web apps that are ready for and resilient to any attack. It’s laser focused on what the working programmer needs to know about web security, and is fully illustrated with concrete examples and essential advice from author Malcolm McDonald’s extensive career. You’ll learn what motivates hackers to hack a site, discover the latest tools for identifying security issues, and set up a development lifecycle that catches security issues early. Read it cover-to-cover for a comprehensive overview of web security, and dip in as a reference whenever you need to tackle a specific vulnerability.
about the technology Security is vital for any application, especially those deployed on the web! The internet is full of scripts, bots, and hackers who will seize any opportunity to attack, crack, and hack your site for their own ends. It doesn’t matter which part of a web app you work with—security vulnerabilities can be found in both frontends and backends. Luckily, this comprehensive guide is here with no-nonsense advice that will keep your web apps safe.
about the book Grokking Web Application Security teaches you everything you need to know to secure your web applications in the browser, on the server, and even at the code level. The book is perfect for both junior and experienced learners. It’s written to be language-agnostic, with advice and vulnerability insights that will work with any stack.
You’ll begin with the foundations of web security and then dive into dozens of practical security recommendations for both common and not-so-common vulnerabilities—everything from SQL injection to cross-site scripting inclusion attacks. Explore growing modern threats like supply-chain attacks and attacks on APIs, learn about cryptography and how it applies to the web, and discover how to pick up the pieces after a hacker has successfully gotten inside your app.
about the reader For junior web developers who know the basics of web programming, or more experienced developers looking for concrete advice on solving vulnerabilities.
about the author Malcolm McDonald is the creator of hacksplaining.com, a comprehensive and interactive security training solution that helps working web developers brush up on their security knowledge. He is a security engineer with 20 years of experience across investment banking, start-ups, and PayPal. He has personally trained thousands of developers in web security over his career.
Скачать Grokking Web Application Security (MEAP V02)
Уважаемый посетитель, Вы зашли на сайт как незарегистрированный пользователь.
С этой публикацией часто скачивают:
Spring Security in Action, Second Edition (MEAP v8) Название: Spring Security in Action, Second Edition (MEAP v8) Автор: Laurentiu Spilca Издательство: Manning Publications Год: 2023 Страниц: 342 Язык:...
Spring Security in Action, Second Edition (MEAP v7) Название: Spring Security in Action, Second Edition (MEAP v7) Автор: Laurentiu Spilca Издательство: Manning Publications Год: 2023 Страниц: 278 Язык:...
Spring Security in Action, Second Edition (MEAP v6) Название: Spring Security in Action, Second Edition (MEAP v6) Автор: Laurentiu Spilca Издательство: Manning Publications Год: 2023 Страниц: 229 Язык:...
Hands-on Penetration Testing for Web Applications Название: Hands-on Penetration Testing for Web Applications Автор: Richa Gupta Издательство: BPB Publications Год: 2021 Формат: epub Страниц: 310...
Web Security for Developers Название: Web Security for Developers Автор: Malcolm McDonald Издательство: No Starch Press Год: 2020 Формат: true pdf/epub/mobi Страниц: 270...
Web 2.0 Security: Defending Ajax, RIA, and SOA Название: Web 2.0 Security: Defending Ajax, RIA, and SOA Автор: Shreeraj Shah Издательство: Cengage Learning Год: 2008 Формат: PDF Страниц: 385...
The Mobile Application Hacker's Handbook Название: The Mobile Application Hacker's Handbook Автор: Dominic Chell and Tyrone Erasmus Издательство: Wiley Год: 2015 Формат: PDF Размер: 34 Мб ...
The Browser Hacker's Handbook (+code) Название: The Browser Hacker's Handbook (+code) Автор: Wade Alcorn, Christian Frichot, Michele Orru Издательство: Wiley Год: 2014 Формат: PDF, EPUB...
Информация
Посетители, находящиеся в группе Гости, не могут оставлять комментарии к данной публикации.
Навигация
Вход на сайт
Реклама
Grokking Web Application Security (MEAP v2) 
