Web Security for Developers

Real Threats, Practical Defense

Häftad, Engelska, 2020

298 kr

Beställningsvara. Skickas inom 7-10 vardagar. Fri frakt över 249 kr.

Beskrivning

Every website today is vulnerable to attack and a compromised website can ruin a company's reputation. Web Security Basics for Developers covers everything a web developer needs to know about web security. Readers will learn who attackers are and what they have at their disposal, how the Internet and websites operate, and various ways websites get attacked. Author Malcolm McDonald explores common attacks like SQL injection and cross-site scripting, as well as common vulnerabilities like information leakage, offering real-world examples and code samples.

Produktinformation

Utgivningsdatum:2020-06-19
Mått:178 x 234 x 15 mm
Vikt:431 g
Format:Häftad
Språk:Engelska
Antal sidor:216
Förlag:No Starch Press,US
ISBN:9781593279943

Utforska kategorier

Programmeringsböcker inom Data och IT

Mer om författaren

Malcolm McDonald has been writing code for nearly 20 years. Realizing there was a lack of direct, practical learning material on the internet on web security, he created www.hacksplaining.com, an online security training program for web developers.

Recensioner i media

"Reads easily and provides essential knowledge to aspiring web developers."—Help Net Security"You can frame the usefulness of this book several ways: It’s well suited to those who are transitioning from development to security. It’s also another great security beginner-level read, providing introductions to an array of pen testing tools that will help you do your job better. And finally, it’s a terrific resource for developers looking to build more secure applications." —Britt Kemp, Bishop Fox Labs

Innehållsförteckning

Chapter 1: Let’s Hack a WebsiteChapter 2: How the Internet WorksChapter 3: How Browsers WorkChapter 4: How Web Servers WorkChapter 5: How Programmers WorkChapter 6: Injection AttacksChapter 7: Cross-Site Scripting AttacksChapter 8: Cross-Site Request Forgery AttacksChapter 9: Comprising AuthenticationChapter 10: Session HijackingChapter 11: PermissionsChapter 12: Information LeaksChapter 13: EncryptionChapter 14: Third-Party CodeChapter 15: XML AttacksChapter 16: Don’t Be an AccessoryChapter 17: Denial-of-Service Attacks