Hacking Exposed Web Applications / Edition 3

Hacking Exposed Web Applications / Edition 3

ISBN-10:
0071740643
ISBN-13:
9780071740647
Pub. Date:
10/15/2010
Publisher:
McGraw Hill LLC
ISBN-10:
0071740643
ISBN-13:
9780071740647
Pub. Date:
10/15/2010
Publisher:
McGraw Hill LLC
Hacking Exposed Web Applications / Edition 3

Hacking Exposed Web Applications / Edition 3

Paperback

$65.0 Current price is , Original price is $65.0. You
$65.00 
  • SHIP THIS ITEM
    Qualifies for Free Shipping
  • PICK UP IN STORE
    Check Availability at Nearby Stores
  • SHIP THIS ITEM

    Temporarily Out of Stock Online

    Please check back later for updated availability.


Overview

Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.

Protect your Web applications from malicious attacks by mastering the weapons and thought processes of today's hacker. Written by recognized security practitioners and thought leaders, Hacking Exposed Web Applications, Third Edition is fully updated to cover new infiltration methods and countermeasures. Find out how to reinforce authentication and authorization, plug holes in Firefox and IE, reinforce against injection attacks, and secure Web 2.0 features. Integrating security into the Web development lifecycle (SDL) and into the broader enterprise information security program is also covered in this comprehensive resource.

  • Get full details on the hacker's footprinting, scanning, and profiling tools, including SHODAN, Maltego, and OWASP DirBuster
  • See new exploits of popular platforms like Sun Java System Web Server and Oracle WebLogic in operation
  • Understand how attackers defeat commonly used Web authentication technologies
  • See how real-world session attacks leak sensitive data and how to fortify your applications
  • Learn the most devastating methods used in today's hacks, including SQL injection, XSS, XSRF, phishing, and XML injection techniques
  • Find and fix vulnerabilities in ASP.NET, PHP, and J2EE execution environments
  • Safety deploy XML, social networking, cloud computing, and Web 2.0 services
  • Defend against RIA, Ajax, UGC, and browser-based, client-side exploits
  • Implement scalable threat modeling, code review, application scanning, fuzzing, and security testing procedures

Product Details

ISBN-13: 9780071740647
Publisher: McGraw Hill LLC
Publication date: 10/15/2010
Series: Hacking Exposed
Pages: 482
Product dimensions: 7.20(w) x 9.00(h) x 1.10(d)

About the Author

Caleb Sima is the co-founder and CTO of SPI Dynamics, a web application security products company, and has more than 12 years of security experience. His pioneering efforts and expertise in web security have helped define the direction the web application security industry has taken. Caleb is a frequent speaker and expert resource for the press on Internet attacks and has been featured in the Associated Press. He is also a contributing author to various magazines and online columns. Caleb is a member of ISSA and is one of the founding visionaries of the Application Vulnerability Description Language (AVDL) standard within OASIS, as well as a founding member of the Web Application Security Consortium (WASC).

Joel Scambray, CISSP, is co-founder and CEO of Consciere, provider of strategic security advisory services. He has worked in Internet security assessment and defense for nearly 15 years at Microsoft, Foundstone, Ernst & Young, and other organizations. Joel is an internationally renowned speaker and author of multiple security books, including 12 editions in the Hacking Exposed series.

Vincent Liu, CISSP, is a managing partner at Stach & Liu. He previously led the Attack & Penetration and Reverse Engineering teams at Honeywell's Global Security group, was a consultant with the Ernst & Young Advanced Security Centers, and was an analyst at the National Security Agency. Vincent speaks at industry conferences, including Black Hat, ToorCon, and Microsoft's BlueHat.

Caleb Sima is CEO of Armorize Technologies, provider of integrated Web application security solutions. He founded SPI Dynamics, a Web security technology company, and was an early innovator at Internet Security Systems/IBM's elite X-Force team. Caleb presents at key industry conferences, such as RSA and Black Hat.

McGraw-Hill authors represent the leading experts in their fields and are dedicated to improving the lives, careers, and interests of readers worldwide

Table of Contents

Chapter 1 Hacking Web Apps 101
Chapter 2 Profiling
Chapter 3 Hacking Web Platforms
Chapter 4 Attacking Web Authentication
Chapter 5 Attacking Web Authorization
Chapter 6 Input Injection Attacks
Chapter 7 Attacking XML Web Services
Chapter 8 Attacking Web Application Management
Chapter 9 Hacking Web Clients
Chapter 10 The Enterprise Web Application Security Program
Chapter 11 Web Application Security Scanners
Appendix A Web Application Security Checklist
Appendix B Web Hacking Tools and Techniques Cribsheet
Index
From the B&N Reads Blog

Customer Reviews