Web Security: A WhiteHat Perspective

Copertina anteriore
CRC Press, 6 apr 2015 - 532 pagine
In late 2013, approximately 40 million customer debit and credit cards were leaked in a data breach at Target. This catastrophic event, deemed one of the biggest data breaches ever, clearly showed that many companies need to significantly improve their information security strategies. Web Security: A White Hat Perspective presents a comprehensive g
 

Pagine selezionate

Sommario

View of the IT Security World
3
Security of Browser
29
CrossSite Scripting Attack
45
CrossSite Request Forgery
123
Clickjacking
141
HTML5 Securities
157
Injection Attacks
173
File Upload Vulnerability
207
Encryption Algorithms and Random Numbers
253
Web Framework Security
325
ApplicationLayer DenialofService Attacks
343
PHP Security
369
Web Server Configuration Security
413
Security of Internet Business
429
Security Development Lifecycle
467
Security Operations
487

Authentication and Session Management
221
Access Control
235
Back Cover
499
Copyright

Altre edizioni - Visualizza tutto

Parole e frasi comuni

Informazioni sull'autore (2015)

Axie Wu was a founder of ph4nt0m.org, one of China's famous domestic security organizations. He is proficient in different offensive and defensive techniques with regard to web security. He joined Alibaba Co., Ltd, China, after his graduation from Xi'an Jiaotong University in 2005 and became the youngest expert level engineer in Alibaba by 2007. He then designed the network security systems for Alibaba, Taobao, and Alipay. He was completely involved in the security development process for Alibaba, where he gained extensive experience in the field of application security. From 2011 onward, he has been a security architect in Alibaba, responsible for group-wide web security and cloud computing security. Wu is currently product vice president of Anquanbao.com and is responsible for the company's product development and design. He also leads the Zhejiang chapter of OWASP China.

Lizzie Zhao graduated from the University of Bridgeport, Connecticut, in 2001. She then worked at a computer training institute in New York City. Two years later, she returned to China and took up work with the subsidiary of a software company at the institute of the Chinese Academy of Sciences (CAS) as a project manager and system architect. In 2006, she joined the information technology promotion office of CECA (China E-Commerce Association). In 2007, she cofounded the RWStation (Beijing) Network Technology Co., Ltd., with other shareholders, and has since managed the company. From September 2011, Liz has focused her attention on China's network security issues and has aimed to help enterprises in China with system security and network security business. She initiated the establishment of the Union SOSTC Alliance (Security Open Source Technology of China) with the help of other Chinese and overseas security experts. She is also a popular consultant for IT security service for various companies and for the Chinese government. Liz is currently the head of the S

Informazioni bibliografiche