1. Home
  2. » Web development
  3. » Web Application Security

Web Application Security



Download free course Web Application Security, pdf file on 331 pages by Andrew Hoffman.
While many resources for network and IT security are available, detailed knowledge regarding modern web application security has been lacking - until now. This practical guide provides both offensive and defensive security concepts that software engineers can easily learn and apply.

Andrew Hoffman, a senior security engineer at Salesforce, introduces three pillars of web application security: recon, offense, and defense. You'll learn methods for effectively researching and analyzing modern web applications - including those you don't have direct access to. You'll also learn how to break into web applications using the latest hacking techniques. Finally, you'll learn how to develop mitigations for use in your own web applications to protect against hackers.

- Explore common vulnerabilities plaguing today's web applications;
- Learn essential hacking techniques attackers use to exploit applications;
- Map and document web applications for which you don't have direct access;
- Develop and deploy customized exploits that can bypass common defenses;
- Develop and deploy mitigations to protect your applications against hackers;
- Integrate secure coding best practices into your development lifecycle;
- Get practical tips to help you improve the overall security of your web applications.

Table of contents

  • The History of Software Security
  • Introduction to Web Application Reconnaissance
  • The Structure of a Modern Web Application
  • Finding Subdomains
  • API Analysis
  • Identifying Third-Party Dependencies
  • Identifying Weak Points in Application Architecture
  • Part I Summary
  • Introduction to Hacking Web Applications
  • Cross-Site Scripting (XSS)
  • Cross-Site Request Forgery (CSRF)
  • XML External Entity (XXE)
  • Injection
  • Denial of Service (DoS)
  • Exploiting Third-Party Dependencies
  • Part II Summary
  • Securing Modern Web Applications
  • Secure Application Architecture
  • Reviewing Code for Security
  • Vulnerability Discovery
  • Vulnerability Management
  • Defending Against XSS Attacks
  • Defending Against CSRF Attacks
  • Defending Against XXE
  • Defending Against Injection
  • Defending Against DoS
  • Securing Third-Party Dependencies
  • Part III Summary
  • Conclusion
Pages : 331
Size : 5.2 MB
File type : PDF
Downloads: 267
Created: 2022-02-03
License: Open Publication License
Author(s): Andrew Hoffman
Web Application Security

Warning: Trying to access array offset on false in /home/tutovnfz/public_html/article.php on line 233

Others web Tutorials

Web content filtering and access denied

Access Control and internet Filtering

Practical Semantic Web and Linked Data Applications

RESTful Web Services

Web API Design in PDF

Others related eBooks about Web Application Security

The JavaScript Beginner's Handbook

The JavaScript Beginner's Handbook follows the 80/20 rule: learn in 20% of the time the 80..., download free JavaScript tutorial in PDF (70 pages) created by ....

Cascading style sheets (CSS) free pdf tutorial

Download free Cascading style sheets (CSS) course material and training (PDF file 34 pages) designated to beginners....

Essential CSS

This book written to provide clear and concise explanation of topics for programmers both starting to learn the Cascading Style Sheets (CSS) as well as those diving in more complex topics. Most examples are linked to online playground that allows you to change the code and re-run it....

The Node.js Handbook

Node.js is built on top of the Google Chrome V8 JavaScript engine, and it's mainly used to..., download free Node.js tutorial in PDF (189 pages) created by ....

HTML5 training guide

This training guide is designated to IT professionals who want to develop with HTML documents such as websites or webapplications. It is assumed that you are familiar with web development,free courses in PDF for download under 681 pages....

Go Web Development Succinctly

Download free course Go Web Development Succinctly, pdf file on 89 pages by Mark Lewin....

JavaScript tutorial for professionals

Download free JavaScript tutorial course in PDF, training file in 106 chapters and 490 pages. Free unaffiliated ebook created from Stack OverFlow contributor....

Learning CSS

Download complet course on CSS style sheets, PDF document on 327 pages for beginners. Training document created by StackOverFlow to get started with CSS....

AngularJS Fundamentals

This tutorial is an AngulaRJS training document intended to architects, developers And web project leaders wanting To optimize their web application with JavaScript....

Learning Node.js

Node.js is an event-based, non-blocking, asynchronous I/O framework that uses Google's V8 ..., download free Node.js tutorial in PDF (414 pages) created by ....


Categories