Web Application Security by Andrew Hoffman

Web Application Security by Andrew Hoffman

Regular price
Checking stock...
Regular price
Checking stock...
Résumé

In this revised and updated second edition, author Andrew Hoffman examines dozens of related topics, from the latest types of attacks and mitigations to threat modeling, the secure software development lifecycle (SSDL/SDLC), and more.

The feel-good place to buy books
  • Free delivery in the UK
  • Supporting authors with AuthorSHARE
  • 100% recyclable packaging
  • B Corp - kinder to people and planet
  • Buy-back with World of Books - Sell Your Books

Web Application Security by Andrew Hoffman

In the first edition of this critically acclaimed book, Andrew Hoffman defined the three pillars of application security: reconnaissance, offense, and defense. In this revised and updated second edition, he examines dozens of related topics, from the latest types of attacks and mitigations to threat modeling, the secure software development lifecycle (SSDL/SDLC), and more. Hoffman, senior staff security engineer at Ripple, also provides information regarding exploits and mitigations for several additional web application technologies such as GraphQL, cloud-based deployments, content delivery networks (CDN) and server-side rendering (SSR). Following the curriculum from the first book, this second edition is split into three distinct pillars comprising three separate skill sets: Pillar 1: Recon-Learn techniques for mapping and documenting web applications remotely, including procedures for working with web applications Pillar 2: Offense-Explore methods for attacking web applications using a number of highly effective exploits that have been proven by the best hackers in the world. These skills are valuable when used alongside the skills from Pillar 3. Pillar 3: Defense-Build on skills acquired in the first two parts to construct effective and long-lived mitigations for each of the attacks described in Pillar 2.
Andrew Hoffman is a senior staff security engineer at Ripple. His expertise is in deep DOM and JavaScript security vulnerabilities. He's worked with every major browser vendor, including TC39 and the Web Hypertext Application Technology Working Group (WHATWG) - organizations responsible for the upcoming version of JavaScript and the browser DOM spec.
SKU Non disponible
ISBN 13 9781098143930
ISBN 10 1098143930
Titre Web Application Security
Auteur Andrew Hoffman
État Non disponible
Type de reliure Paperback
Éditeur O'Reilly Media
Année de publication 2024-02-02
Nombre de pages 446
Note de couverture La photo du livre est présentée à titre d'illustration uniquement. La reliure, la couverture ou l'édition réelle peuvent varier.
Note Non disponible