Home | Amazing | Today | Tags | Publishers | Years | Account | Search 
Ajax Security

Buy
Ajax Security, 9780321491930 (0321491939), Addison Wesley, 2007
The Hands-On, Practical Guide to Preventing Ajax-Related Security Vulnerabilities

 

More and more Web sites are being rewritten as Ajax applications; even traditional desktop software is rapidly moving to the Web via Ajax. But, all too often, this transition is being made with reckless disregard for security. If Ajax applications aren’t designed and coded properly, they can be susceptible to far more dangerous security vulnerabilities than conventional Web or desktop software. Ajax developers desperately need guidance on securing their applications: knowledge that’s been virtually impossible to find, until now.

            Ajax Security systematically debunks today’s most dangerous myths about Ajax security, illustrating key points with detailed case studies of actual exploited Ajax vulnerabilities, ranging from MySpace’s Samy worm to MacWorld’s conference code validator. Even more important, it delivers specific, up-to-the-minute recommendations for securing Ajax applications in each major Web programming language and environment, including .NET, Java, PHP, and even Ruby on Rails. You’ll learn how to:

 

·        Mitigate unique risks associated with Ajax, including overly granular Web services, application control flow tampering, and manipulation of program logic

·        Write new Ajax code more safely—and identify and fix flaws in existing code

·        Prevent emerging Ajax-specific attacks, including JavaScript hijacking and persistent storage theft

·        Avoid attacks based on XSS and SQL Injection—including a dangerous SQL Injection variant that can extract an entire backend database with just two requests

·        Leverage security built into Ajax frameworks like Prototype, Dojo, and ASP.NET AJAX Extensions—and recognize what you still must implement on your own

·        Create more secure “mashup” applications

 

Ajax Security will be an indispensable resource for developers coding or maintaining Ajax applications; architects and development managers planning or designing new Ajax software, and all software security professionals, from QA specialists to penetration testers.

 


About the Author


Billy Hoffman is the lead researcher for HP Security Labs of HP Software. At HP, Billy focuses on JavaScript source code analysis, automated discovery of Web application vulnerabilities, and Web crawling technologies. He has worked in the security space since 2001 after he wrote an article on cracking software for 2600, “The Hacker Quarterly,” and learned that people would pay him to be curious. Over the years Billy has worked a variety of projects including reverse engineering file formats, micro-controllers, JavaScript malware, and magstripes. He is the creator of Stripe Snoop, a suite of research tools that captures, modifies, validates, generates, analyzes, and shares data from magstripes. Billy’s work has been featured in Wired, Make magazine, Slashdot, G4TechTV, and in various other journals and Web sites.

 

Bryan Sullivan is a software development manager for the Application Security Center division of HP Software. He has been a professional software developer and development manager for over 12 years, with the last five years focused on the Internet security software industry. Prior to HP, Bryan was a security researcher for SPI Dynamics, a leading Web application security company acquired by HP in August 2007.While at SPI, he created the DevInspect product, which analyzes Web applications for security vulnerabilities during development.

(HTML tags aren't allowed.)

CompTIA Network+ Study Guide Authorized Courseware: Exam N10-005
CompTIA Network+ Study Guide Authorized Courseware: Exam N10-005

Todd Lammle's CompTIA Network+ Authorized Study Guide for the N10-005 exam!

CompTIA's Network+ certification tells the world you have the skills to install, configure, and troubleshoot today's basic networking hardware peripherals and protocols. But first, you have to pass the exam! This detailed...

The Definitive Guide to Lift: A Scala-based Web Framework (Expert's Voice in Open Source)
The Definitive Guide to Lift: A Scala-based Web Framework (Expert's Voice in Open Source)
Welcome to The Definitive Guide to Lift: A Scala-Based Web Framework! We hope that you find reading our work as informative, fun, and exciting as writing it has been for us. This book started out as some informal discussions between the Lift committers about a need for a good guide beyond the documentation contained on the Lift wiki and API...
Web Search Engine Research (Library and Information Science)
Web Search Engine Research (Library and Information Science)

Web Search Engine Research, edited by Dirk Lewandowski, provides an understanding of Web search engines from the unique perspective of Library and Information Science. The book explores a range of topics including retrieval effectiveness, user satisfaction, the evaluation of search interfaces, the impact of search on society, reliability of...


The ActionScript 3.0 Quick Reference Guide: For Developers and Designers Using Flash: For Developers and Designers Using Flash CS4 Professional (Adobe Developer Library)
The ActionScript 3.0 Quick Reference Guide: For Developers and Designers Using Flash: For Developers and Designers Using Flash CS4 Professional (Adobe Developer Library)

"No matter what your background, the pages that follow will provide you with some excellent knowledge, insight, and even a little bit of wisdom in the realm of Flash and ActionScript. Happy learning!"-- Branden Hall, from the Foreword

Written by Flash insiders with extensive knowledge of the technology,
...

Character Modeling with Maya and ZBrush: Professional polygonal modeling techniques
Character Modeling with Maya and ZBrush: Professional polygonal modeling techniques
Maya is at the forefront of 3D graphics. The newest version of Maya has a host of new features and improvements to help the modeler achieve amazing results.

Before we move into modeling let’s go over some guideline we want to stick with to ensure clean models. These are concepts to follow when dealing with all models, be it a low
...
Time-Saver Standards for Urban Design
Time-Saver Standards for Urban Design
The global scale and impact of urban settlements and cities will determine the course of the emergent 21st century. Cities are no longer isolated and responding only to local and regional influences. Very large cities—megacities—are exploding in size and growth, for the most part in newly developing regions of the globe. The impact of...
©2019 LearnIT (support@pdfchm.net) - Privacy Policy