Input Validation Attacks -- Chapter 6, Hacking Exposed Web Applications, Second Edition

Book description:
Defend against the latest Web-based attacks by looking at your Web applications through the eyes of a malicious intruder. Fully rev...

Digg This!     StumbleUpon     Del.icio.us

VIEW ALL IN THIS CATEGORY

RELATED CONTENT Application Security Book Excerpts Cybersecurity czar candidate questions clout of new position Commonly-overlooked security flaws in rich Internet applications Common mistakes in real-time Java programming Web Security Testing Cookbook sample recipe Fuzzing for Software Security Testing and Quality Assurance: Chapter 3, Testing for Quality Software Security Engineering: A Guide for Project Managers -- Chapter 3, Requirements Engineering for Secure Software InfoSecurity 2008 Threat Analysis, Chapter 4: XSS Theory Google Hacking for Penetration Testers, Volume 2: Chapter 6, Locating Exploits and Finding Targets Ajax Security -- Chapter 6, Transparency in Ajax Applications Fuzzing: Brute Force Vulnerability Discovery -- Chapter 12, Fuzzing Frameworks Building security into the SDLC (Software development life cycle) Problems caused by skipping analysis stage of SDLC Inexpensive phase of SDLC to catch and fix bugs GatherSpace beefs up cloud-based requirements management ALM: Best of breed vs. complete systems Software development life cycle phases, iterations, explained step by step The role of quality assurance (QA) pros in software security Common software security risks and oversights Why the quality assurance department should be involved in testing How to develop secure applications Secure software development practices 'not rocket science' Software security testing and techniques Web server weaknesses you don't want to overlook Using firewalls for software testing: Pros and cons Beating software's cross-site scripting, authentication problems Free Web proxy security tools software testers should get to know How to get management on board with Web 2.0 security issues Web application security best practices: Tips on implementation Testing strategies for complex environments How to make your software tamperproof Ways to approach application performance testing on a tight budget How can I tell if my software security has been breached?

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary

ised and updated to cover the latest Web exploitation techniques, Hacking Exposed Web Applications, Second Edition shows you, step-by-step, how cyber-criminals target vulnerable sites, gain access, steal critical data, and execute devastating attacks.

All of the cutting-edge threats and vulnerabilities are covered in full detail alongside real-world examples, case studies, and battle-tested countermeasures from the authors' experiences as gray hat security professionals.

This book delves into topics like profiling, authentication, authorization, XML Web services, Web clients, Denial-of-Service attacks and much more.

>> Read Chapter 6: Input Validation Attacks.

>> Buy the book