Home | Amazing | Today | Tags | Publishers | Years | Account | Search 
Ajax Security

Buy
Ajax Security, 9780321491930 (0321491939), Addison Wesley, 2007
The Hands-On, Practical Guide to Preventing Ajax-Related Security Vulnerabilities

 

More and more Web sites are being rewritten as Ajax applications; even traditional desktop software is rapidly moving to the Web via Ajax. But, all too often, this transition is being made with reckless disregard for security. If Ajax applications aren’t designed and coded properly, they can be susceptible to far more dangerous security vulnerabilities than conventional Web or desktop software. Ajax developers desperately need guidance on securing their applications: knowledge that’s been virtually impossible to find, until now.

            Ajax Security systematically debunks today’s most dangerous myths about Ajax security, illustrating key points with detailed case studies of actual exploited Ajax vulnerabilities, ranging from MySpace’s Samy worm to MacWorld’s conference code validator. Even more important, it delivers specific, up-to-the-minute recommendations for securing Ajax applications in each major Web programming language and environment, including .NET, Java, PHP, and even Ruby on Rails. You’ll learn how to:

 

·        Mitigate unique risks associated with Ajax, including overly granular Web services, application control flow tampering, and manipulation of program logic

·        Write new Ajax code more safely—and identify and fix flaws in existing code

·        Prevent emerging Ajax-specific attacks, including JavaScript hijacking and persistent storage theft

·        Avoid attacks based on XSS and SQL Injection—including a dangerous SQL Injection variant that can extract an entire backend database with just two requests

·        Leverage security built into Ajax frameworks like Prototype, Dojo, and ASP.NET AJAX Extensions—and recognize what you still must implement on your own

·        Create more secure “mashup” applications

 

Ajax Security will be an indispensable resource for developers coding or maintaining Ajax applications; architects and development managers planning or designing new Ajax software, and all software security professionals, from QA specialists to penetration testers.

 


About the Author


Billy Hoffman is the lead researcher for HP Security Labs of HP Software. At HP, Billy focuses on JavaScript source code analysis, automated discovery of Web application vulnerabilities, and Web crawling technologies. He has worked in the security space since 2001 after he wrote an article on cracking software for 2600, “The Hacker Quarterly,” and learned that people would pay him to be curious. Over the years Billy has worked a variety of projects including reverse engineering file formats, micro-controllers, JavaScript malware, and magstripes. He is the creator of Stripe Snoop, a suite of research tools that captures, modifies, validates, generates, analyzes, and shares data from magstripes. Billy’s work has been featured in Wired, Make magazine, Slashdot, G4TechTV, and in various other journals and Web sites.

 

Bryan Sullivan is a software development manager for the Application Security Center division of HP Software. He has been a professional software developer and development manager for over 12 years, with the last five years focused on the Internet security software industry. Prior to HP, Bryan was a security researcher for SPI Dynamics, a leading Web application security company acquired by HP in August 2007.While at SPI, he created the DevInspect product, which analyzes Web applications for security vulnerabilities during development.

(HTML tags aren't allowed.)

UNIX and Linux System Administration Handbook (5th Edition)
UNIX and Linux System Administration Handbook (5th Edition)

UNIX® and Linux® System Administration Handbook, Fifth Edition, is today’s definitive guide to installing, configuring, and maintaining any UNIX or Linux system, including systems that supply core Internet and cloud infrastructure.

 

...
NumPy Beginner's Guide  - Second Edition
NumPy Beginner's Guide - Second Edition

An action packed guide using real world examples of the easy to use, high performance, free open source NumPy mathematical library

Overview

  • Perform high performance calculations with clean and efficient NumPy code
  • Analyze large data sets with statistical functions
  • Execute...
Making Embedded Systems: Design Patterns for Great Software
Making Embedded Systems: Design Patterns for Great Software
Interested in developing embedded systems? Since they don't tolerate inefficiency, these systems require a disciplined approach to programming. This easy-to-read guide helps you cultivate a host of good development practices, based on classic software design patterns and new patterns unique to embedded programming. Learn how to build...

Handbook of Cancer Vaccines (Cancer Drug Discovery and Development)
Handbook of Cancer Vaccines (Cancer Drug Discovery and Development)

An authoritative survey of the scientific background for therapeutic cancer vaccines, the challenges to their development, and their current uses in treating cancer. The authors examine the basic issues that effect all vaccines (such as immune adjuvants and prime-boost strategies), describe the methods for antigen discovery, and review the...

Analysis Patterns: Reusable Object Models (The Addison-Wesley Object Technology Series)
Analysis Patterns: Reusable Object Models (The Addison-Wesley Object Technology Series)

This innovative book recognizes the need within the object-oriented community for a book that goes beyond the tools and techniques of the typical methodology book. In Analysis Patterns: Reusable Object Models, Martin Fowler focuses on the end result of object-oriented analysis and design - the models themselves. He shares with...

Macromedia Flash MX Fast & Easy Web Development
Macromedia Flash MX Fast & Easy Web Development
Don't spend your time wading through manuals to learn Macromedia Dreamweaver MX. Spend it doing what you do best-creating Web pages! Design, develop, and deliver Web pages like a pro. Integrate graphics, animations, or documents into your Web pages with ease. Combining easy-to-understand instructions with visual examples, Macromedia Dreamweaver MX...
©2019 LearnIT (support@pdfchm.net) - Privacy Policy