Dewey Decimal005.8/7
Table Of ContentChapter 1: Let's Hack a Website Chapter 2: How the Internet Works Chapter 3: How Browsers Work Chapter 4: How Web Servers Work Chapter 5: How Programmers Work Chapter 6: Injection Attacks Chapter 7: Cross-Site Scripting Attacks Chapter 8: Cross-Site Request Forgery Attacks Chapter 9: Comprising Authentication Chapter 10: Session Hijacking Chapter 11: Permissions Chapter 12: Information Leaks Chapter 13: Encryption Chapter 14: Third-Party Code Chapter 15: XML Attacks Chapter 16: Don't Be an Accessory Chapter 17: Denial-of-Service Attacks
SynopsisWebsite security made easy! Covers the most common ways websites get hacked and how web developers can defend themselves., Website security made easy. This book covers the most common ways websites get hacked and how web developers can defend themselves. Every website today is vulnerable to attack and a compromised website can ruin a company's reputation. Web Security for Developers covers everything a web developer needs to know about web security. Readers will learn who attackers are and what they have at their disposal, how the Internet and websites operate, and various ways websites get attacked. Author Malcolm McDonald explores common attacks like SQL injection and cross-site scripting, as well as common vulnerabilities like information leakage. The first half of the book describes security concepts every developer should know while the second half delves into the individual vulnerabilities themselves, offering real-world examples and code samples., Website security made easy. This book covers the most common ways websites get hacked and how web developers can defend themselves. Every website today is vulnerable to attack and a compromised website can ruin a company's reputation. Consider the Heartland Payment System data breach of 2008: the Heartland attackers made off with 130 million credit card numbers using a SQL injection attack to gain access to the web-servers that handled payment data. Web Security Basics for Developers covers everything a web developer needs to know about web security. Readers will learn who attackers are and what they have at their disposal, how the Internet and websites operate, and various ways websites get attacked. Author Malcolm McDonald explores common attacks like SQL injection and cross-site scripting, as well as common vulnerabilities like information leakage. The first half of the book describes security concepts every developer should know while the second half delves into the individual vulnerabilities themselves, offering real-world examples and code samples., Every website today is vulnerable to attack and a compromised website can ruin a company's reputation. Web Security Basics for Developers covers everything a web developer needs to know about web security. Readers will learn who attackers are and what they have at their disposal, how the Internet and websites operate, and various ways websites get attacked. Author Malcolm McDonald explores common attacks like SQL injection and cross-site scripting, as well as common vulnerabilities like information leakage, offering real-world examples and code samples., The world has changed. Today, every time you make a site live, you're opening it up to attack. A first-time developer can easily be discouraged by the difficulties involved with properly securing a website. But have hope: an army of security researchers is out there discovering, documenting, and fixing security flaws. Thankfully, the tools you'll need to secure your site are freely available and generally easy to use. Web Security for Developers will teach you how your websites are vulnerable to attack and how to protect them. Each chapter breaks down a major security vulnerability and explores a real-world attack, coupled with plenty of code to show you both the vulnerability and the fix. You'll learn how to: Protect against SQL injection attacks, malicious JavaScript, and cross-site request forgery, Add authentication and shape access control to protect accounts, Lock down user accounts to prevent attacks that rely on guessing passwords, stealing sessions, or escalating privileges, Implement encryption, Manage vulnerabilities in legacy code, Prevent information leaks that disclose vulnerabilities, Mitigate advanced attacks like malvertising and denial-of-service, As you get stronger at identifying and fixing vulnerabilities, you'll learn to deploy disciplined, secure code and become a better programmer along the way. Book jacket.
LC Classification NumberTK5105.59.M4833 2020