{"product_id":"grokking-web-application-security","title":"Grokking Web Application Security","description":"\u003cp\u003e\u003cb\u003eWhen you launch an application on the web, every hacker in the world has access to it. Are you sure your web apps can stand up to the most sophisticated attacks?\u003c\/b\u003e\u003c\/p\u003e\u003cp\u003eTrying to teach yourself about web security from the internet can feel like walking into a huge disorganized library—one where you can never find what you need, and the wrong advice might endanger your application! You need a single, all-in-one guide to securing your apps against all the attacks they can and will face. You need \u003ci\u003eGrokking Web Application Security\u003c\/i\u003e.\u003c\/p\u003e\u003cp\u003eThis brilliantly illustrated and clearly written guide delivers detailed coverage on:\u003c\/p\u003e\u003cul\u003e\n\u003cli\u003e\u003cspan class=\"a-list-item\"\u003eBrowser security, including sandboxing, the same-origin policy, and cookie security\u003c\/span\u003e\u003c\/li\u003e\n\u003cli\u003e\u003cspan class=\"a-list-item\"\u003eSecuring web servers with input validation, escaping of output, and defense in depth\u003c\/span\u003e\u003c\/li\u003e\n\u003cli\u003e\u003cspan class=\"a-list-item\"\u003eA development process that prevents security bugs\u003c\/span\u003e\u003c\/li\u003e\n\u003cli\u003e\u003cspan class=\"a-list-item\"\u003eBrowser vulnerabilities, from cross-site scripting and cross-site request forgery, to clickjacking\u003c\/span\u003e\u003c\/li\u003e\n\u003cli\u003e\u003cspan class=\"a-list-item\"\u003eNetwork vulnerabilities, such as man-in-the-middle attacks, SSL-stripping, and DNS poisoning\u003c\/span\u003e\u003c\/li\u003e\n\u003cli\u003e\u003cspan class=\"a-list-item\"\u003eAuthentication vulnerabilities, such as brute forcing of credentials with single sign-on or multi-factor authentication\u003c\/span\u003e\u003c\/li\u003e\n\u003cli\u003e\u003cspan class=\"a-list-item\"\u003eAuthorization vulnerabilities, such as broken access control and session jacking\u003c\/span\u003e\u003c\/li\u003e\n\u003cli\u003e\u003cspan class=\"a-list-item\"\u003eHow to use encryption in web applications\u003c\/span\u003e\u003c\/li\u003e\n\u003cli\u003e\u003cspan class=\"a-list-item\"\u003eInjection attacks, command execution attacks, and remote code execution attacks\u003c\/span\u003e\u003c\/li\u003e\n\u003cli\u003e\u003cspan class=\"a-list-item\"\u003eMalicious payloads that can be used to attack XML parsers and file upload functions\u003c\/span\u003e\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003ci\u003eGrokking Web Application Security\u003c\/i\u003e teaches you how to build web apps that are ready and resilient to any attack. It’s laser-focused on what the working programmer needs to know about web security. In it, you’ll find practical recommendations for both common and not-so-common vulnerabilities—everything from SQL injection to cross-site scripting inclusion attacks. You’ll learn what motivates hackers, discover the latest tools for identifying issues, and set up a development lifecycle that catches problems early. Read it cover to cover for a comprehensive overview of web security, and dip in as a reference whenever you need to tackle a specific vulnerability.\u003c\/p\u003e\u003cp\u003ePurchase of the print book includes a free eBook in PDF and ePub formats from Manning Publications.\u003c\/p\u003e\u003cp\u003e\u003cb\u003eAbout the technology\u003c\/b\u003e\u003c\/p\u003e\u003cp\u003eApplication security is a front-burner concern for web developers. Whether working on the UI with a frontend framework or building out the server side, it’s up to you to understand the threats and know exactly how to keep the black hats from getting the upper hand.\u003c\/p\u003e\u003cp\u003e\u003cb\u003eAbout the book\u003c\/b\u003e\u003c\/p\u003e\u003cp\u003e\u003ci\u003eGrokking Web Application Security\u003c\/i\u003e covers everything a working developer needs to know about securing applications in the browser and on the server. The tested techniques apply to any stack and are illustrated with concrete examples plucked from author Malcolm McDonald’s extensive career. You’ll discover must-implement security principles and even learn the fascinating tools and techniques the bad guys use to crack systems.\u003c\/p\u003e\u003cp\u003e\u003cb\u003eWhat's inside\u003c\/b\u003e\u003c\/p\u003e\u003cul\u003e\n\u003cli\u003e\u003cspan class=\"a-list-item\"\u003eA security-first development process\u003c\/span\u003e\u003c\/li\u003e\n\u003cli\u003e\u003cspan class=\"a-list-item\"\u003eEncryption in web applications\u003c\/span\u003e\u003c\/li\u003e\n\u003cli\u003e\u003cspan class=\"a-list-item\"\u003eSupply-chain and API attacks\u003c\/span\u003e\u003c\/li\u003e\n\u003cli\u003e\u003cspan class=\"a-list-item\"\u003eWhat to do when a hacker gets in\u003c\/span\u003e\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003cspan style=\"color: rgb(34, 34, 34); font-size: 24px; font-weight: 700;\"\u003eAbout the Author\u003c\/span\u003e\u003c\/p\u003e\u003cp\u003e\u003cb\u003eMalcolm McDonald\u003c\/b\u003e is the creator of hacksplaining.com, a comprehensive and interactive security training solution that helps working web developers brush up on their security knowledge. He is a security engineer with 20 years of experience across investment banking, start-ups, and PayPal. He has personally trained thousands of developers in web security over his career.\u003c\/p\u003e\u003cp\u003e\u003cb\u003eTable of Contents\u003c\/b\u003e\u003c\/p\u003e\u003cp\u003ePART 1\u003cbr\u003e1 Know your enemy\u003cbr\u003e2 Browser security\u003cbr\u003e3 Encryption\u003cbr\u003e4 Web server security\u003cbr\u003e5 Security as a process\u003cbr\u003ePART 2\u003cbr\u003e6 Browser vulnerabilities\u003cbr\u003e7 Network vulnerabilities\u003cbr\u003e8 Authentication vulnerabilities\u003cbr\u003e9 Session vulnerabilities\u003cbr\u003e10 Authorization vulnerabilities\u003cbr\u003e11 Payload vulnerabilities\u003cbr\u003e12 Injection vulnerabilities\u003cbr\u003e13 Vulnerabilities in third-party code\u003cbr\u003e14 Being an unwitting accomplice\u003cbr\u003e15 What to do when you get hackeded\u003cbr\u003e\u003c\/p\u003e\u003cp\u003e\u003cb\u003eEbook License\u003c\/b\u003e\u003c\/p\u003e\u003cp\u003eEnd-User Warranty And License Agreement\u003c\/p\u003e\u003cp\u003e1. Grant Of License\u003c\/p\u003e\u003cp\u003eManning Has Authorized The Download By You Of An Unrestricted Number Of Copies Of The Electronic Book (Ebook) In Any Of The Available Formats. Manning Grants You A Nonexclusive, Nontransferable License To Use The Ebook According To The Terms And Conditions Herein. This License Agreement Permits You To Install The Ebook On Any And All Your Devices For Your Personal Use Only.\u003c\/p\u003e\u003cp\u003e2. Restrictions\u003c\/p\u003e\u003cp\u003eYou Shall Not: (1) Share, Resell, Rent, Assign, Timeshare, Distribute, Or Transfer All Or Part Of The Ebook Or Any Rights Granted Hereunder To Any Other Person; (2) Duplicate The Ebook, Except For A Single Backup Or Archival Copy; (3) Remove Any Proprietary Notices, Labels, Or Marks From The Ebook; (4) Transfer Or Sublicense Title To The Ebook To Any Other Party.\u003c\/p\u003e\u003cp\u003e3. Intellectual Property Protection\u003c\/p\u003e\u003cp\u003eThe Ebook Is Owned By Manning And Is Protected By United States And International Copyright And Other Intellectual Property Laws. Manning Reserves All Rights In The Ebook Not Expressly Granted Herein. This License And Your Right To Use The Ebook Terminate Automatically If You Violate Any Part Of This Agreement. In The Event Of Termination, You Must Remove The Original And Any Copies Of The Ebook From All Your Devices.\u003c\/p\u003e\u003cp\u003e4. Source Code Supplementary Material\u003c\/p\u003e\u003cp\u003eAny Source Code Files Provided As A Supplement To The Book Are Freely Available To The Public For Download. Reuse Of The Code Is Permitted, In Whole Or In Part, Including The Creation Of Derivative Works, Provided That You Acknowledge That You Are Using It And Identify The Source: Title, Publisher And Year.\u003c\/p\u003e\u003cp\u003e5. Limited Warranty\u003c\/p\u003e\u003cp\u003eManning Warrants That The Ebook Files, A Copy Of Which You Are Authorized To Download, Are Free From Defects In The Operational Sense That They Can Be Read By A Pdf Reader Or Epub Reader, Or Other. Except For This Express Limited Warranty, Manning Makes And You Receive No Warranties, Express, Implied, Statutory Or In Any Communication With You, And Manning Specifically Disclaims Any Other Warranty Including The Implied Warranty Of Merchantability Or Fitness Or A Particular Purpose. Manning Does Not Warrant That The Operation Of The Ebook Will Be Uninterrupted Or Error Free. If The Ebook Was Purchased In The United States, The Above Exclusions May Not Apply To You As Some States Do Not Allow The Exclusion Of Implied Warranties. In Addition To The Above Warranty Rights, You May Also Have Other Rights That Vary From State To State.\u003c\/p\u003e\u003cp\u003e6. Limitation Of Liability\u003c\/p\u003e\u003cp\u003eIn No Event Will Manning Be Liable For Any Damages, Whether Arising For Tort Or Contract, Including Loss Of Data, Lost Profits, Or Other Special, Incidental, Consequential, Or Indirect Damages Arising Out Of The Use Or Inability To Use The Ebook.\u003c\/p\u003e\u003cp\u003e7. General\u003c\/p\u003e\u003cp\u003eThis Agreement Constitutes The Entire Agreement Between You And Manning And Supersedes Any Prior Agreement Concerning The Ebook. This Agreement Is Governed By The Laws Of The State Of New York\u003c\/p\u003e\u003cp\u003e\u003cbr\u003e\u003c\/p\u003e\u003cp\u003e\u003cbr\u003e\u003c\/p\u003e","brand":"Manning Publications","offers":[{"title":"Paperback","offer_id":50506358194246,"sku":"9781633438262","price":5318.0,"currency_code":"INR","in_stock":true},{"title":"E-Book","offer_id":50506358227014,"sku":"9781633438262-2","price":4333.0,"currency_code":"INR","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0754\/2797\/1142\/files\/81kskbg8BXL._SY385.jpg?v=1790327994","url":"https:\/\/cb-india.com\/products\/grokking-web-application-security","provider":"Computer Bookshop (India) Pvt Ltd","version":"1.0","type":"link"}