Web Application Security: Exploitation and Countermeasures for Modern Web Applications
Hoffman, Andrew
- 出版商: O'Reilly
- 出版日期: 2020-03-24
- 定價: $1,650
- 售價: 9.5 折 $1,568
- 貴賓價: 9.0 折 $1,485
- 語言: 英文
- 頁數: 346
- 裝訂: Quality Paper - also called trade paper
- ISBN: 1492053112
- ISBN-13: 9781492053118
-
相關分類:
資訊安全
-
相關翻譯:
Web 應用程序安全 (簡中版)
Web 應用系統安全|現代 Web 應用程式開發的資安對策 (Web Application Security) (繁中版)
立即出貨 (庫存 < 4)
買這商品的人也買了...
-
$1,292$1,224 -
$1,700$1,700 -
$780$616 -
$1,650$1,568 -
$4,620$4,389 -
$1,492$1,413 -
$2,090$1,980 -
$680$530 -
$602滲透測試 完全初學者指南
-
$1,380$1,311 -
$800$632 -
$1,311$1,242 -
$880$695 -
$980$833 -
$454超大流量分佈式系統架構解決方案:人人都是架構師2.0
-
$1,980$1,881 -
$680$537 -
$2,090$1,980 -
$1,050$998 -
$354$336 -
$550$468 -
$480$379 -
$2,185$2,070 -
$420$332 -
$179$141
商品描述
While many resources for network and IT security are available, detailed knowledge regarding modern web application security has been lacking—until now. This practical guide provides both offensive and defensive security concepts that software engineers can easily learn and apply.
Andrew Hoffman, a senior security engineer at Salesforce, introduces three pillars of web application security: recon, offense, and defense. You’ll learn methods for effectively researching and analyzing modern web applications—including those you don’t have direct access to. You’ll also learn how to break into web applications using the latest hacking techniques. Finally, you’ll learn how to develop mitigations for use in your own web applications to protect against hackers.
- Explore common vulnerabilities plaguing today's web applications
- Learn essential hacking techniques attackers use to exploit applications
- Map and document web applications for which you don’t have direct access
- Develop and deploy customized exploits that can bypass common defenses
- Develop and deploy mitigations to protect your applications against hackers
- Integrate secure coding best practices into your development lifecycle
- Get practical tips to help you improve the overall security of your web applications
作者簡介
Andrew Hoffman is a product security lead at Salesforce.com, where he is responsible for the security of multiple JavaScript, NodeJS, and OSS teams. His expertise is in deep DOM and JavaScript security vulnerabilities. He has worked with every major browser vendor, as well as with TC39 and WHATWG ? the organizations responsible for the upcoming version of JavaScript and the browser DOM spec.
Prior to this role, Andrew was a software security engineer working on Locker Service, the world's first JavaScript namespace isolation library that operates from the interpreter level up. In parallel, Andrew also contributed to the upcoming JavaScript language security feature "Realms," which provides language level namespace isolation to JavaScript.