Web Application Security, A Beginner's Guide

Security smarts for the self-guided IT professional! Learn how to secure Web applications from today's sneakiest hackers. True to the hallmarks of our Secure Beginner's Guides series, Web Application Security, A Beginner's Guideimparts the hard-learned lessons and experiences of top security professionals, and provides know-how that can otherwise take you years to learn. This book takes you from a professional beginner-level to an up-and-running level of proficiency through a complete overview of Web application security. Important tips and key techniques plus the most common terminology you must know are all clearly explained. Hackers are smart but security professionals need to be smarter. This book provides you with an actionable, rock-solid foundation in Web application security from a thorough review of the tools and resources essential to Web application security to the trade's best practices for detecting vulnerabilities and protecting applications. The aim of this series is to help you work a bit more expertly than your actual years of hands-on experience. Web Application Security, A Beginner's Guidefeatures: LingoConcise definitions of frequently used security terms In Actual PracticeReal-world examples of security concepts in context Budget NoteTips for optimizing security processes and technologies to align with an organization's budget IMHOCautionary advice on errors to avoid, based on the authors' life lessons Your PlanCustomizable, on-the-job planning checklists Into ActionHands-on exercises that show how to apply new skills

Part I: Primer
Chapter 1. Welcome to the Wide World of Web Application Security
Chapter 2. Security Fundamentals
Part II: Web Application Security Principles
Chapter 3. Authentication
Chapter 4. Authorization
Chapter 5. Browser Security Principles: The Same-Origin Policy
Chapter 6. Browser Security Principles: Cross-Site Scripting and Cross-Site Request Forgery
Chapter 7. Database Security Principles
Chapter 8. File Security Principles
Part III: Secure Development and Deployment
Chapter 9. Secure Development Methodologies
Epilogue: The Wizard, the Giant, and the Magic Fruit Trees: A Happy Ending
Index