Grokking Web Application Security 277862

Trying to teach yourself about web security from the internet can feel like walking into a huge disorganized library—one where you can never find what you need, and the wrong advice might endanger your application! You need a single, all-in-one guide to securing your apps against all the attacks they can and will face. You need Grokking Web Application Security.

This brilliantly illustrated and clearly written guide delivers detailed coverage on:

Grokking Web Application Security teaches you how to build web apps that are ready and resilient to any attack. It’s laser-focused on what the working programmer needs to know about web security. In it, you’ll find practical recommendations for both common and not-so-common vulnerabilities—everything from SQL injection to cross-site scripting inclusion attacks. You’ll learn what motivates hackers, discover the latest tools for identifying issues, and set up a development lifecycle that catches problems early. Read it cover to cover for a comprehensive overview of web security, and dip in as a reference whenever you need to tackle a specific vulnerability.

Application security is a front-burner concern for web developers. Whether working on the UI with a frontend framework or building out the server side, it’s up to you to understand the threats and know exactly how to keep the black hats from getting the upper hand.

Grokking Web Application Security covers everything a working developer needs to know about securing applications in the browser and on the server. The tested techniques apply to any stack and are illustrated with concrete examples plucked from author Malcolm McDonald’s extensive career. You’ll discover must-implement security principles and even learn the fascinating tools and techniques the bad guys use to crack systems.

For readers who understand basic web application design and technologies.

Malcolm McDonald is a security engineer with 20 years of experience across investment banking, start-ups, and PayPal, and he is the creator of hacksplaining.com.

The technical editor on this book was Rajvardhan Oak.

1 Know your enemy

2 Browser security

3 Encryption

4 Web server security

5 Security as a process

6 Browser vulnerabilities

7 Network vulnerabilities

8 Authentication vulnerabilities

9 Session vulnerabilities

10 Authorization vulnerabilities

11 Payload vulnerabilities

12 Injection vulnerabilities

13 Vulnerabilities in third-party code

14 Being an unwitting accomplice

15 What to do when you get hackede