Dekorationsartikel gehören nicht zum Leistungsumfang.
Sprache:
Englisch
51,95 €
UVP 64,19 €
Versandkostenfrei per Post / DHL
Lieferzeit 2-4 Werktage
Kategorien:
Beschreibung
Cyberattacks are becoming more commonplace and the Open Web Application Security Project (OWASP), estimates 94% of sites have flaws in their access control alone. Attacks evolve to work around new defenses, and defenses must evolve to remain effective. Developers need to understand the fundamentals of attacks and defenses in order to comprehend new techniques as they become available. This book teaches you how to write secure web applications.
The focus is highlighting how hackers attack applications along with a broad arsenal of defenses. This will enable you to pick appropriate techniques to close vulnerabilities while still providing users with their needed functionality.
Topics covered include:
A framework for deciding what needs to be protected and how strongly
Configuring services such as databases and web servers
Safe use of HTTP methods such as GET, POST, etc, cookies and use of HTTPS
Safe REST APIs
Server-side attacks and defenses such as injection and cross-site scripting
Client-side attacks and defenses such as cross-site request forgery
Security techniques such as CORS, CSP
Password management, authentication and authorization, including OAuth2
Best practices for dangerous operations such as password change and reset
Use of third-party components and supply chain security (Git, CI/CD etc)
Topics covered include:
A framework for deciding what needs to be protected and how strongly
Configuring services such as databases and web servers
Safe use of HTTP methods such as GET, POST, etc, cookies and use of HTTPS
Safe REST APIs
Server-side attacks and defenses such as injection and cross-site scripting
Client-side attacks and defenses such as cross-site request forgery
Security techniques such as CORS, CSP
Password management, authentication and authorization, including OAuth2
Best practices for dangerous operations such as password change and reset
Use of third-party components and supply chain security (Git, CI/CD etc)
What You'll Learn
Review the defenses that can used to prevent attacks
Model risks to better understand what to defend and how
Choose appropriate techniques to defend against attacks
Implement defenses in Python/Django applications
Model risks to better understand what to defend and how
Choose appropriate techniques to defend against attacks
Implement defenses in Python/Django applications
Who This Book Is For
Developers who already know how to build web applications but need to know more about security
Non-professional software engineers, such as scientists, who must develop web tools and want to make their algorithms available to a wider audience.
Engineers and managers who are responsible for their product/company technical security policy
Non-professional software engineers, such as scientists, who must develop web tools and want to make their algorithms available to a wider audience.
Engineers and managers who are responsible for their product/company technical security policy
Cyberattacks are becoming more commonplace and the Open Web Application Security Project (OWASP), estimates 94% of sites have flaws in their access control alone. Attacks evolve to work around new defenses, and defenses must evolve to remain effective. Developers need to understand the fundamentals of attacks and defenses in order to comprehend new techniques as they become available. This book teaches you how to write secure web applications.
The focus is highlighting how hackers attack applications along with a broad arsenal of defenses. This will enable you to pick appropriate techniques to close vulnerabilities while still providing users with their needed functionality.
Topics covered include:
A framework for deciding what needs to be protected and how strongly
Configuring services such as databases and web servers
Safe use of HTTP methods such as GET, POST, etc, cookies and use of HTTPS
Safe REST APIs
Server-side attacks and defenses such as injection and cross-site scripting
Client-side attacks and defenses such as cross-site request forgery
Security techniques such as CORS, CSP
Password management, authentication and authorization, including OAuth2
Best practices for dangerous operations such as password change and reset
Use of third-party components and supply chain security (Git, CI/CD etc)
Topics covered include:
A framework for deciding what needs to be protected and how strongly
Configuring services such as databases and web servers
Safe use of HTTP methods such as GET, POST, etc, cookies and use of HTTPS
Safe REST APIs
Server-side attacks and defenses such as injection and cross-site scripting
Client-side attacks and defenses such as cross-site request forgery
Security techniques such as CORS, CSP
Password management, authentication and authorization, including OAuth2
Best practices for dangerous operations such as password change and reset
Use of third-party components and supply chain security (Git, CI/CD etc)
What You'll Learn
Review the defenses that can used to prevent attacks
Model risks to better understand what to defend and how
Choose appropriate techniques to defend against attacks
Implement defenses in Python/Django applications
Model risks to better understand what to defend and how
Choose appropriate techniques to defend against attacks
Implement defenses in Python/Django applications
Who This Book Is For
Developers who already know how to build web applications but need to know more about security
Non-professional software engineers, such as scientists, who must develop web tools and want to make their algorithms available to a wider audience.
Engineers and managers who are responsible for their product/company technical security policy
Non-professional software engineers, such as scientists, who must develop web tools and want to make their algorithms available to a wider audience.
Engineers and managers who are responsible for their product/company technical security policy
Über den Autor
Matthew Baker is the Head of Scientific Software and Data Management at ETH Zurich, Switzerland's leading science and technology university, He leads a team of engineers developing custom software to support STEM research projects, as well as teaches computer science short courses. Having over 25 years of experience developing software, he has worked as a developer, systems administrator, project manager and consultant in various sectors from banking and insurance, science and engineering, to military intelligence.
Zusammenfassung
Provides both theoretical and practical approaches concerning web application security
Teaches readers how hackers attack applications as well as defense best practices
Delivers readers with a complete development environment complete with hands-on exercises
Inhaltsverzeichnis
1. Introduction.- 2. The Hands-On Environment.- 3. Threat Modelling.- 4. Transport and Encryption.- 5. Installing and Configuring Services.- 6. APIs and Endpoints.- 7. Cookies and User Input.- 8. Cross-Site Requests.- 9. Password Management.-10. Authentication and Authorization.- 11. OAuth2.- 12. Logging and Monitoring.- 13. Third-Party and Supply Chain Security.- 14. Further Resources.
Details
Erscheinungsjahr: | 2022 |
---|---|
Genre: | Importe, Informatik |
Rubrik: | Naturwissenschaften & Technik |
Medium: | Taschenbuch |
Inhalt: |
xxi
462 S. 87 s/w Illustr. 462 p. 87 illus. |
ISBN-13: | 9781484285954 |
ISBN-10: | 1484285956 |
Sprache: | Englisch |
Einband: | Kartoniert / Broschiert |
Autor: | Baker, Matthew |
Auflage: | 1st edition |
Hersteller: | APRESS |
Verantwortliche Person für die EU: | APress in Springer Science + Business Media, Heidelberger Platz 3, D-14197 Berlin, juergen.hartmann@springer.com |
Maße: | 235 x 155 x 27 mm |
Von/Mit: | Matthew Baker |
Erscheinungsdatum: | 29.10.2022 |
Gewicht: | 0,727 kg |