Sign-In
Cart
Grokking Web Application Security
Paperback
ISBN13: 9781633438262
Publisher: Manning Publications
Published: Jun 11 2024
Pages: 336
Weight: 1.27
Height: 0.69 Width: 7.41 Depth: 9.25
Language: English
Trying to teach yourself about web security from the internet can feel like walking into a huge disorganized library--one where you can never find what you need, and the wrong advice might endanger your application! You need a single, all-in-one guide to securing your apps against all the attacks they can and will face. You need Grokking Web Application Security.
This brilliantly illustrated and clearly written guide delivers detailed coverage on:
- Browser security, including sandboxing, the same-origin policy, and cookie security
- Securing web servers with input validation, escaping of output, and defense in depth
- A development process that prevents security bugs
- Browser vulnerabilities, from cross-site scripting and cross-site request forgery, to clickjacking
- Network vulnerabilities, such as man-in-the-middle attacks, SSL-stripping, and DNS poisoning
- Authentication vulnerabilities, such as brute forcing of credentials with single sign-on or multi-factor authentication
- Authorization vulnerabilities, such as broken access control and session jacking
- How to use encryption in web applications
- Injection attacks, command execution attacks, and remote code execution attacks
- Malicious payloads that can be used to attack XML parsers and file upload functions
Purchase of the print book includes a free eBook in PDF and ePub formats from Manning Publications.
About the technology
Application security is a front-burner concern for web developers. Whether working on the UI with a frontend framework or building out the server side, it's up to you to understand the threats and know exactly how to keep the black hats from getting the upper hand.
About the book
Grokking Web Application Security covers everything a working developer needs to know about securing applications in the browser and on the server. The tested techniques apply to any stack and are illustrated with concrete examples plucked from author Malcolm McDonald's extensive career. You'll discover must-implement security principles and even learn the fascinating tools and techniques the bad guys use to crack systems.
What's inside
- A security-first development process
- Encryption in web applications
- Supply-chain and API attacks
- What to do when a hacker gets in
About the reader
For readers who understand basic web application design and technologies.
About the author
Malcolm McDonald is a security engineer with 20 years of experience across investment banking, start-ups, and PayPal, and he is the creator of hacksplaining.com.
The technical editor on this book was Rajvardhan Oak.
Table of Contents
PART 1
1 Know your enemy
2 Browser security
3 Encryption
4 Web server security
5 Security as a process
PART 2
6 Browser vulnerabilities
7 Network vulnerabilities
8 Authentication vulnerabilities
9 Session vulnerabilities
10 Authorization vulnerabilities
11 Payload vulnerabilities
12 Injection vulnerabilities
13 Vulnerabilities in third-party code
14 Being an unwitting accomplice
15 What to do when you get hackede
Also in
Programming
The Pragmatic Programmer: Your Journey to Mastery, 20th Anniversary Edition
Thomas, David
Hunt, Andrew
Hardcover
The Legend of Zelda(tm) Tears of the Kingdom - The Complete Official Guide: Collector's Edition
Piggyback
Hardcover
Cracking the Coding Interview: 189 Programming Questions and Solutions
McDowell, Gayle Laakmann
Paperback
The Legend of Zelda(tm) Tears of the Kingdom - The Complete Official Guide: Standard Edition
Piggyback
Paperback
Python Crash Course, 3rd Edition: A Hands-On, Project-Based Introduction to Programming
Matthes, Eric
Paperback
Accelerate: The Science of Lean Software and DevOps: Building and Scaling High Performing Technology Organizations
Forsgren Phd, Nicole
Humble, Jez
Kim, Gene
Paperback
Embedded Systems with ARM Cortex-M Microcontrollers in Assembly Language and C: Fourth Edition
Zhu, Yifeng
Paperback
SQL QuickStart Guide: The Simplified Beginner's Guide to Managing, Analyzing, and Manipulating Data With SQL
Shields, Walter
Hardcover
Learning Php, MySQL & JavaScript: A Step-By-Step Guide to Creating Dynamic Websites
Nixon, Robin
Paperback
The Manager's Path: A Guide for Tech Leaders Navigating Growth and Change
Fournier, Camille
Paperback
The Staff Engineer's Path: A Guide for Individual Contributors Navigating Growth and Change
Reilly, Tanya
Paperback
Automate the Boring Stuff with Python, 2nd Edition: Practical Programming for Total Beginners
Sweigart, Al
Paperback
The Official Raspberry Pi Handbook 2025: Projects, Tutorials, Interviews, and Reviews from the Magpi Magazine
Makers of the Magpi Magazine, The
Paperback
Head First JavaScript Programming: A Learner's Guide to Modern JavaScript
Robson, Elisabeth
Freeman, Eric
Paperback
This Is Service Design Doing: Applying Service Design Thinking in the Real World
Hormess, Markus Edgar
Stickdorn, Marc
Lawrence, Adam
Paperback
The DevOps Handbook: How to Create World-Class Agility, Reliability, & Security in Technology Organizations
Humble, Jez
Debois, Patrick
Kim, Gene
Paperback
Building AI-Powered Products: The Essential Guide to AI and Genai Product Management
Nika, Marily
Paperback
Head First Design Patterns: Building Extensible and Maintainable Object-Oriented Software
Freeman, Eric
Robson, Elisabeth
Paperback
Learning Web Design: A Beginner's Guide to Html, Css, Javascript, and Web Graphics
Robbins, Jennifer
Paperback
Spies, Lies, and Algorithms: The History and Future of American Intelligence
Zegart, Amy B.
Paperback
Pro C# 10 with .Net 6: Foundational Principles and Practices in Programming
Japikse, Phil
Troelsen, Andrew
Paperback
Software Architecture: The Hard Parts: Modern Trade-Off Analyses for Distributed Architectures
Ford, Neal
Richards, Mark
Sadalage, Pramod
Paperback
Head First C#: A Learner's Guide to Real-World Programming with C# and .Net
Stellman, Andrew
Greene, Jennifer
Paperback
Design Patterns: Elements of Reusable Object-Oriented Software
Helm, Richard
Johnson, Ralph
Gamma, Erich
Hardcover
Embedded Systems with Arm Cortex-M Microcontrollers in Assembly Language and C: Third Edition
Zhu, Yifeng
Paperback
Serious Cryptography, 2nd Edition: A Practical Introduction to Modern Encryption
Aumasson, Jean-Philippe
Paperback
Make: Electronics: Learning by Discovery: A Hands-On Primer for the New Electronics Enthusiast
Platt, Charles
Paperback
Gestión práctica de proyectos con Scrum: Desarrollo de software ágil para el Scrum Master
Martel, Antonio
Paperback
Concrete Mathematics: A Foundation for Computer Science
Patashnik, Oren
Knuth, Donald
Graham, Ronald
Hardcover
Leading Quality: How Great Leaders Deliver High Quality Software and Accelerate Growth
Cummings -. John, Ronald
Peer, Owais
Paperback
Learn OpenGL: Learn modern OpenGL graphics programming in a step-by-step fashion.
de Vries, Joey
Paperback
Living a Jewish Life, Revised and Updated: Jewish Traditions, Customs, and Values for Today's Families
Diamant, Anita
Cooper, Howard
Paperback
Electronic Music and Sound Design - Theory and Practice with Max 8 - Volume 1 (Fourth Edition)
Cipriani, Alessandro
Giri, Maurizio
Paperback
Data Visualization with Microsoft Power Bi: How to Design Savvy Dashboards
Kolokolov, Alex
Zelensky, Maxim
Paperback
Dark Souls: Beyond the Grave Volume 1: Demon's Souls -- Dark Souls -- Dark Souls II
Romieu, Sylvain
Mecheri, Damien
Hardcover
Video Game of the Year: A Year-By-Year Guide to the Best, Boldest, and Most Bizarre Games from Every Year Since 1977
Minor, Jordan
Paperback
Electronic Music and Sound Design - Theory and Practice with Max 8 - volume 3
Cipriani, Alessandro
Giri, Maurizio
Paperback
Aprenda Visual Basic (Vba) Y Macros Para Excel: Más de 100 ejercicios resueltos, macros y juegos, para desarrollar tus habilidades de programación
Vidal Bosch, Josep Ramon
Paperback
Modern Software Engineering: Doing What Works to Build Better Software Faster
Farley, David
Paperback
Computer Science Distilled: Learn the Art of Solving Computational Problems
Ferreira Filho, Wladston
Paperback
The Digital Photography Book: The Step-By-Step Secrets for How to Make Your Photos Look Like the Pros'!
Kelby, Scott
Paperback
Electronic Music and Sound Design - Theory and Practice with Max 8 - Volume 2 (Third Edition)
Giri, Maurizio
Cipriani, Alessandro
Paperback
Linux Basics for Hackers: Getting Started with Networking, Scripting, and Security in Kali
Occupytheweb
Paperback
iPhone 8 Guide: The iPhone Manual for Beginners, Seniors & for All iPhone Users
Brave, Dale
Paperback
Javascript: The Definitive Guide: Master the World's Most-Used Programming Language
Flanagan, David
Paperback
JavaScript Crash Course: A Hands-On, Project-Based Introduction to Programming
Morgan, Nick
Paperback
SQL QuickStart Guide: The Simplified Beginner's Guide to Managing, Analyzing, and Manipulating Data With SQL
Shields, Walter
Paperback
Software Wasteland: How the Application-Centric Mindset is Hobbling our Enterprises
McComb, Dave
Paperback
Workday Gold: A Collection of Keith Bitikofer's #WorkdayTips Focused on Software Functionality 2021-2023
Bitikofer, Keith
Paperback
Dark Souls: Beyond the Grave Volume 2: Bloodborne €" Dark Souls III
Romieu, Sylvain
Mecheri, Damien
Hardcover
Prompt Engineering for Llms: The Art and Science of Building Large Language Model-Based Applications
Ziegler, Albert
Berryman, John
Paperback
Simple SysML for Beginners: Using CATIA No Magic Products
Braun, Frank
Hetherington, David
Casse, Olivier
Paperback
The Practice of Enterprise Architecture: A Modern Approach to Business and IT Alignment
Kotusev, Svyatoslav
Hardcover
Python Machine Learning By Example - Fourth Edition: Unlock machine learning best practices with real-world use cases
Liu, Yuxi (Hayden)
Paperback
Designing Distributed Systems: Patterns and Paradigms for Scalable, Reliable Systems Using Kubernetes
Burns, Brendan
Paperback
Python Basics: A Practical Introduction to Python 3
Bader, Dan
Jablonski, Joanna
Heisler, Fletcher
Paperback