Hacking exposed : web applications : web application security secrets and solutions / Joel Scambray, Vincent Liu, Caleb Sima.

By:

Scambray, Joel [author.]

Contributor(s):

Material type: Text

TextPublisher: New York : McGraw-Hill, [2011]Copyright date: c2011Edition: third editionDescription: xxvi, 451 pages : illustartions ; 24 cmContent type:

text

Media type:

unmediated

Carrier type:

volume

ISBN:

9780071740647 (alk. paper)

Subject(s):

DDC classification:

005.8 22 S.J.H

LOC classification:

TK5105.59 .S32 2011

Online resources:

Abstract

Contents:

Hacking web apps 101 -- Profiling -- Hacking web platforms -- Attacking web authentication -- Attacking web authorization -- Input injection attacks -- Attacking XML web services -- Attacking web application management -- Hacking web clients -- The Enterprise web application security program -- Web application security checklist -- Web hacking tools and techniques cribsheet.

Summary: Protect your Web applications from malicious attacks by mastering the weapons and thought processes of today's hacker. Written by recognized security practitioners and thought leaders, Hacking Exposed Web Applications, Third Edition is fully updated to cover new infiltration methods and countermeasures. Find out how to reinforce authentication and authorization, plug holes in Firefox and IE, reinforce against injection attacks, and secure Web 2.0 features. Integrating security into the Web development lifecycle (SDL) and into the broader enterprise information security program is also covered in this comprehensive resource. Get full details on the hacker's footprinting, scanning, and profiling tools, including SHODAN, Maltego, and OWASP DirBuster See new exploits of popular platforms like Sun Java System Web Server and Oracle WebLogic in operation Understand how attackers defeat commonly used Web authentication technologies See how real-world session attacks leak sensitive data and how to fortify your applications Learn the most devastating methods used in today's hacks, including SQL injection, XSS, XSRF, phishing, and XML injection techniques Find and fix vulnerabilities in ASP.NET, PHP, and J2EE execution environments Safety deploy XML, social networking, cloud computing, and Web 2.0 services Defend against RIA, Ajax, UGC, and browser-based, client-side exploits Implement scalable threat modeling, code review, application scanning, fuzzing, and security testing procedures

Average rating: 0.0 (0 votes)

Holdings
Item type	Current library	Collection	Call number	Status	Date due	Barcode
Books	Main library A2	Computers & Information Technology ( Computer Science )	005.8 S.J.H (Browse shelf(Opens below))	Available		00011408

Includes bibliographical references and index.

Hacking web apps 101 --
Profiling --
Hacking web platforms --
Attacking web authentication --
Attacking web authorization --
Input injection attacks --
Attacking XML web services --
Attacking web application management --
Hacking web clients --
The Enterprise web application security program --
Web application security checklist --
Web hacking tools and techniques cribsheet.

Protect your Web applications from malicious attacks by mastering the weapons and thought processes of today's hacker. Written by recognized security practitioners and thought leaders, Hacking Exposed Web Applications, Third Edition is fully updated to cover new infiltration methods and countermeasures. Find out how to reinforce authentication and authorization, plug holes in Firefox and IE, reinforce against injection attacks, and secure Web 2.0 features. Integrating security into the Web development lifecycle (SDL) and into the broader enterprise information security program is also covered in this comprehensive resource.

Get full details on the hacker's footprinting, scanning, and profiling tools, including SHODAN, Maltego, and OWASP DirBuster
See new exploits of popular platforms like Sun Java System Web Server and Oracle WebLogic in operation
Understand how attackers defeat commonly used Web authentication technologies
See how real-world session attacks leak sensitive data and how to fortify your applications
Learn the most devastating methods used in today's hacks, including SQL injection, XSS, XSRF, phishing, and XML injection techniques
Find and fix vulnerabilities in ASP.NET, PHP, and J2EE execution environments
Safety deploy XML, social networking, cloud computing, and Web 2.0 services
Defend against RIA, Ajax, UGC, and browser-based, client-side exploits
Implement scalable threat modeling, code review, application scanning, fuzzing, and security testing procedures

There are no comments on this title.

to post a comment.