by JoelScambray (Author), VincentLiu (Author), Caleb Sima (Author)
This is the latest Web app attacks and countermeasures from world-renowned practitioners. Protect your Web applications from malicious attacks by mastering the weapons and thought processes of today's hacker. Written by recognized security practitioners and thought leaders, "Hacking Exposed Web Applications, Third Edition" is fully updated to cover new infiltration methods and countermeasures. It helps you find out how to reinforce authentication and authorization, plug holes in Firefox and IE, reinforce against injection attacks, and secure Web 2.0 features. Integrating security into the Web development lifecycle (SDL) and into the broader enterprise information security program is also covered in this comprehensive resource. Get full details on the hacker's footprinting, scanning, and profiling tools, including SHODAN, Maltego, and OWASP DirBuster. It shows new exploits of popular platforms like Sun Java System Web Server and Oracle WebLogic in operation Understand how attackers defeat commonly used Web authentication technologies. It also shows how real-world session attacks leak sensitive data and how to fortify your applications. It helps you learn the most devastating methods used in today's hacks, including SQL injection, XSS, XSRF, phishing, and XML injection techniques. Find and fix vulnerabilities in ASP.NET, PHP, and J2EE execution environments. Safety deploy XML, social networking, cloud computing, and Web 2.0 services. Defend against RIA, Ajax, UGC, and browser-based, client-side exploits. Implement scalable threat modeling, code review, application scanning, fuzzing, and security testing procedures.
Format: Paperback
Pages: 482
Edition: 3
Publisher: McGraw-Hill Osborne
Published: 01 Nov 2010
ISBN 10: 0071740643
ISBN 13: 9780071740647
Vincent Liu, CISSP, is a managing partner at Stach & Liu. He previously led the Attack & Penetration and Reverse Engineering teams at Honeywell's Global Security group, was a consultant with the Ernst & Young Advanced Security Centers, and was an analyst at the National Security Agency. Vincent speaks at industry conferences, including Black Hat, ToorCon, and Microsoft's BlueHat.
Caleb Sima is CEO of Armorize Technologies, provider of integrated Web application security solutions. He founded SPI Dynamics, a Web security technology company, and was an early innovator at Internet Security Systems/IBM's elite X-Force team. Caleb presents at key industry conferences, such as RSA and Black Hat.