Grokking Web Application Security
Seiten
2024
Manning Publications (Verlag)
978-1-63343-826-2 (ISBN)
Manning Publications (Verlag)
978-1-63343-826-2 (ISBN)
Grokking Web Application Security teaches you how to build web apps that are ready for and resilient to any attack. You'll learn what motivates hackers to hack a site, discover the latest tools for identifying security issues, and set up a development lifecycle that catches security issues early.
When you launch an application on the web, every hacker in the world has access to it. Are you sure your web apps can stand up to the most sophisticated attacks?
Grokking Web Application Security is a brilliantly illustrated and clearly written guide that delivers detailed coverage on:
How the browser security model works, including sandboxing, the same-origin policy, and methods of securing cookies
Securing web servers with input validation, escaping of output, and defense in depth
A development process that prevents security bugs
Protecting yourself from browser vulnerabilities such as cross-site scripting, cross-site request forgery, and clickjacking
Network vulnerabilities like man-in-the-middle attacks, SSL-stripping, and DNS poisoning
Preventing authentication vulnerabilities that allow brute forcing of credentials by using single sign-on or multi-factor authentication
Authorization vulnerabilities like broken access control and session jacking
How to use encryption in web applications
Injection attacks, command execution attacks, and remote code execution attacks
Malicious payloads that can be used to attack XML parsers, and file upload functions
When you launch an application on the web, every hacker in the world has access to it. Are you sure your web apps can stand up to the most sophisticated attacks?
Grokking Web Application Security is a brilliantly illustrated and clearly written guide that delivers detailed coverage on:
How the browser security model works, including sandboxing, the same-origin policy, and methods of securing cookies
Securing web servers with input validation, escaping of output, and defense in depth
A development process that prevents security bugs
Protecting yourself from browser vulnerabilities such as cross-site scripting, cross-site request forgery, and clickjacking
Network vulnerabilities like man-in-the-middle attacks, SSL-stripping, and DNS poisoning
Preventing authentication vulnerabilities that allow brute forcing of credentials by using single sign-on or multi-factor authentication
Authorization vulnerabilities like broken access control and session jacking
How to use encryption in web applications
Injection attacks, command execution attacks, and remote code execution attacks
Malicious payloads that can be used to attack XML parsers, and file upload functions
Malcolm McDonald is the creator of hacksplaining.com, a comprehensive and interactive security training solution that helps working web developers brush up on their security knowledge. He is a security engineer with 20 years of experience across investment banking, start-ups, and PayPal. He has personally trained thousands of developers in web security over his career.
| Erscheinungsdatum | 01.05.2024 |
|---|---|
| Verlagsort | New York |
| Sprache | englisch |
| Maße | 185 x 235 mm |
| Gewicht | 606 g |
| Themenwelt | Informatik ► Software Entwicklung ► SOA / Web Services |
| Informatik ► Theorie / Studium ► Kryptologie | |
| Mathematik / Informatik ► Informatik ► Web / Internet | |
| ISBN-10 | 1-63343-826-0 / 1633438260 |
| ISBN-13 | 978-1-63343-826-2 / 9781633438262 |
| Zustand | Neuware |
| Haben Sie eine Frage zum Produkt? |
Mehr entdecken
aus dem Bereich
aus dem Bereich
Metriken auswerten, Besucher verstehen, Google Analytics einsetzen
Buch | Softcover (2023)
MITP (Verlag)
CHF 27,95
