Bookshelf:Software Quality Bookshelf
Software Security
Security Vulnerabilities
Cross-site scripting, buffer overflow and other security attacks are covered in this section of SearchSoftwareQuality.com's bookshelf.
-
Hacking For Dummies: Hacking Methodologies, Chapter 4
Tip - Kevin Beaver teaches the steps for successful ethical hacking, gleaning information about your organization from the Internet, scanning your network and how to look for vulnerabilities. Tools and techniques for ethical hacking are described throughout...
-
Exploiting Software: How to Break Code -- Chapter 7, Buffer Overflow
Tip - How does software break? How do attackers make software break on purpose? Why are firewalls, intrusion detection systems and antivirus software not keeping out the bad guys? This book provides the answers. In particular, this free excerpt takes a look at...
-
InfoSecurity 2008 Threat Analysis, Chapter 4: XSS Theory
Tip - Application security threats are becoming more complex than ever before. This free chapter explains what cross-site scripting (XSS) is, how it is exploited and what can be done to counter it.
-
Input Validation Attacks -- Chapter 6, Hacking Exposed Web Applications, Second Edition
Tip - Input validation routines serve as a first line of defense for a Web application. Buffer overflow, directory traversal, cross-site scripting and SQL injection are just a few of the attacks that can result from improper data validation. This chapter will...
-
How to Break Web Software: Functional and Security Testing of Web Applications and Web Services -- C
Tip - Web application security is dependent on proper coding and session management, and Web application developers must take it upon themselves to code state information so they can enforce rules about page access and session management. This chapter contains...
-
Cross Site Scripting Attacks: XSS Exploits and Defense -- Chapter 5, Advanced XSS Attack Vectors
Tip - In the past, the primary focus of XSS attack was Web applications that failed to filter user-supplied data. Researchers have since discovered that there are several other ways an attacker can inject JavaScript into a user's browser. This chapter,...