Testing Web Security: Assessing the Security of Web Sites and Applications by Steven Splaine
* Covers security basics and guides reader through the process of testing a Web site.* Explains how to analyze results and design specialized follow-up tests that focus on potential security gaps.* Teaches the process of discovery, scanning, analyzing, verifying results of specialized tests, and fixing vulnerabilities.