Grokking Web Application Security

When you launch an application on the web, every hacker in the world has access to it. Are you sure your web apps can stand up to the most sophisticated attacks?

Grokking Web Application Security is a brilliantly illustrated and clearly written guide that delivers detailed coverage on:

How the browser security model works, including sandboxing, the same-origin policy, and methods of securing cookiesSecuring web servers with input validation, escaping of output, and defense in depthA development process that prevents security bugsProtecting yourself from browser vulnerabilities such as cross-site scripting, cross-site request forgery, and clickjackingNetwork vulnerabilities like man-in-the-middle attacks, SSL-stripping, and DNS poisoningPreventing authentication vulnerabilities that allow brute forcing of credentials by using single sign-on or multi-factor authenticationAuthorization vulnerabilities like broken access control and session jackingHow to use encryption in web applicationsInjection attacks, command execution attacks, and remote code execution attacksMalicious payloads that can be used to attack XML parsers, and file upload functions