When you launch an application on the web, every hacker in the world has access to it. Are you sure your web apps can stand up to the most sophisticated attacks?Grokking Web Application Security is a brilliantly illustrated and clearly written guide that delivers detailed coverage on: How the browser security model works, including sandboxing, the same-origin policy, and methods of securing cookiesSecuring web servers with input validation, escaping of output, and defense in depthA development process that prevents security bugsProtecting yourself from browser vulnerabilities such as cross-site scripting, cross-site request forgery, and clickjackingNetwork vulnerabilities like man-in-the-middle attacks, SSL-stripping, and DNS poisoningPreventing authentication vulnerabilities that allow brute forcing of credentials by using single sign-on or multi-factor authenticationAuthorization vulnerabilities like broken access control and session jackingHow to use encryption in web applicationsInjection attacks, command execution attacks, and remote code execution attacksMalicious payloads that can be used to attack XML parsers, and file upload functions
Les mer
Grokking Web Application Security teaches you how to build web apps that are ready for and resilient to any attack. You'll learn what motivates hackers to hack a site, discover the latest tools for identifying security issues, and set up a development lifecycle that catches security issues early.
Les mer
From the Back Cover: Grokking Web Application Security teaches you everything you need to know to secure your web applications in the browser, on the server, and even at the code level. The book is perfect for both junior and experienced learners. It's written to be language-agnostic, with advice and vulnerability insights that will work with any stack. You'll begin with the foundations of web security and then dive into dozens of practical security recommendations for both common and not-so-common vulnerabilities: everything from SQL injection to cross-site scripting inclusion attacks. Explore growing modern threats like supply-chain attacks and attacks on APIs, learn about cryptography and how it applies to the web, and discover how to pick up the pieces after a hacker has successfully gotten inside your app. About the reader: For junior web developers who know the basics of web programming, or more experienced developers looking for concrete advice on solving vulnerabilities.
Les mer
Produktdetaljer
ISBN
9781633438262
Publisert
2024-06-24
Utgiver
Vendor
Manning Publications
Vekt
606 gr
Høyde
235 mm
Bredde
185 mm
Dybde
20 mm
Aldersnivå
P, 06
Språk
Product language
Engelsk
Format
Product format
Innbundet
Antall sider
336
Forfatter
Om bidragsyterne
Malcolm McDonald is the creator of hacksplaining.com, a comprehensive and interactive security training solution that helps working web developers brush up on their security knowledge. He is a security engineer with 20 years of experience across investment banking, start-ups, and PayPal. He has personally trained thousands of developers in web security over his career.