Cyberattacks are becoming more commonplace and the Open Web Application Security Project (OWASP), estimates 94% of sites have flaws in their access control alone. Attacks evolve to work around new defenses, and defenses must evolve to remain effective. Developers need to understand the fundamentals of attacks and defenses in order to comprehend new techniques as they become available. This book teaches you how to write secure web applications. The focus is highlighting how hackers attack applications along with a broad arsenal of defenses. This will enable you to pick appropriate techniques to close vulnerabilities while still providing users with their needed functionality.
Topics covered include:
A framework for deciding what needs to be protected and how strongly
Configuring services such as databases and web servers
Safe use of HTTP methods such as GET, POST, etc, cookies and use of HTTPS
Safe REST APIs
Server-side attacks and defenses such as injection and cross-site scripting
Client-side attacks and defenses such as cross-site request forgery
Security techniques such as CORS, CSP
Password management, authentication and authorization, including OAuth2
Best practices for dangerous operations such as password change and reset
Use of third-party components and supply chain security (Git, CI/CD etc)
What You'll Learn
Review the defenses that can used to prevent attacks
Model risks to better understand what to defend and how
Choose appropriate techniques to defend against attacks
Implement defenses in Python/Django applications
Who This Book Is For
Developers who already know how to build web applications but need to know more about security
Non-professional software engineers, such as scientists, who must develop web tools and want to make their algorithms available to a wider audience.
Engineers and managers who are responsible for their product/company technical security policy
Cyberattacks are becoming more commonplace and the Open Web Application Security Project (OWASP), estimates 94% of sites have flaws in their access control alone. Attacks evolve to work around new defenses, and defenses must evolve to remain effective. Developers need to understand the fundamentals of attacks and defenses in order to comprehend new techniques as they become available. This book teaches you how to write secure web applications. The focus is highlighting how hackers attack applications along with a broad arsenal of defenses. This will enable you to pick appropriate techniques to close vulnerabilities while still providing users with their needed functionality.
Topics covered include:
A framework for deciding what needs to be protected and how strongly
Configuring services such as databases and web servers
Safe use of HTTP methods such as GET, POST, etc, cookies and use of HTTPS
Safe REST APIs
Server-side attacks and defenses such as injection and cross-site scripting
Client-side attacks and defenses such as cross-site request forgery
Security techniques such as CORS, CSP
Password management, authentication and authorization, including OAuth2
Best practices for dangerous operations such as password change and reset
Use of third-party components and supply chain security (Git, CI/CD etc)
What You'll Learn
Review the defenses that can used to prevent attacks
Model risks to better understand what to defend and how
Choose appropriate techniques to defend against attacks
Implement defenses in Python/Django applications
Who This Book Is For
Developers who already know how to build web applications but need to know more about security
Non-professional software engineers, such as scientists, who must develop web tools and want to make their algorithms available to a wider audience.
Engineers and managers who are responsible for their product/company technical security policy
The increasing complexity of web applications has elevated the risk of security breaches. This book offers a comprehensive guide to mitigating these risks by applying OWASP principles and best...
Discover your next great read at BookLoop, Australiand online bookstore offering a vast selection of titles across various genres and interests. Whether you're curious about what's trending or searching for graphic novels that captivate, thrilling crime and mystery fiction, or exhilarating action and adventure stories, our curated collections have something for every reader. Delve into imaginative fantasy worlds or explore the realms of science fiction that challenge the boundaries of reality. Fans of contemporary narratives will find compelling stories in our contemporary fiction section. Embark on epic journeys with our fantasy and science fiction titles,
Shop Trending Books and New Releases
Explore our new releases for the most recent additions in romance books, fantasy books, graphic novels, crime and mystery books, science fiction books as well as biographies, cookbooks, self help books, tarot cards, fortunetelling and much more. With titles covering current trends, booktok and bookstagram recommendations, and emerging authors, BookLoop remains your go-to local australian bookstore for buying books online across all book genres.
Shop Best Books By Collection
Stay updated with the literary world by browsing our trending books, featuring the latest bestsellers and critically acclaimed works. Explore titles from popular brands like Minecraft, Pokemon, Star Wars, Bluey, Lonely Planet, ABIA award winners, Peppa Pig, and our specialised collection of ADHD books. At BookLoop, we are committed to providing a diverse and enriching reading experience for all.
Sign In
your cart
Your cart is empty
Menu
Search
PRE-SALES
If you have any questions before making a purchase chat with our online operators to get more information.
