Web Security for Developers

Website security made easy. This book covers the most common ways websites get hacked and how web developers can defend themselves. Every website today is vulnerable to attack and a compromised website can ruin a company's reputation. Consider the Heartland Payment System data breach of 2008: the Heartland attackers made off with 130 million credit card numbers using a SQL injection attack to gain access to the web-servers that handled payment data. Web Security for Developers covers everything a web developer needs to know about web security. Readers will learn who attackers are and what they have at their disposal, how the Internet and websites operate, and various ways websites get attacked. Author Malcolm McDonald explores common attacks like SQL injection and cross-site scripting, as well as common vulnerabilities like information leakage. The first half of the book describes security concepts every developer should know while the second half delves into the individual vulnerabilities themselves, offering real-world examples and code samples.

"Reads easily and provides essential knowledge to aspiring web developers."
—Help Net Security

"You can frame the usefulness of this book several ways: It’s well suited to those who are transitioning from development to security. It’s also another great security beginner-level read, providing introductions to an array of pen testing tools that will help you do your job better. And finally, it’s a terrific resource for developers looking to build more secure applications."
—Britt Kemp, Bishop Fox Labs

Auteur
Malcolm McDonald has been programming for over 20 years. McDonald is the creator of www.hacksplaining.com, an online training program for web developers.

Résumé
Website security made easy! Covers the most common ways websites get hacked and how web developers can defend themselves.

Contenu
Chapter 1: Let’s Hack a Website
Chapter 2: How the Internet Works
Chapter 3: How Browsers Work
Chapter 4: How Web Servers Work
Chapter 5: How Programmers Work
Chapter 6: Injection Attacks
Chapter 7: Cross-Site Scripting Attacks
Chapter 8: Cross-Site Request Forgery Attacks
Chapter 9: Comprising Authentication
Chapter 10: Session Hijacking
Chapter 11: Permissions
Chapter 12: Information Leaks
Chapter 13: Encryption
Chapter 14: Third-Party Code
Chapter 15: XML Attacks
Chapter 16: Don’t Be an Accessory
Chapter 17: Denial-of-Service Attacks