tailieunhanh - Web Security Testing Cookbook

Web applications suffer more than their share of security attacks. Here’s why. Websites and the applications that exist on them are in some sense the virtual front door of all corporations and organizations. Growth of the Web since 1993 has been astounding, outpacing even the adoption of the television and electricity in terms of speed of widespread adoption. Web applications are playing a growing and increasingly prominent role in software development. In fact, pundits currently have us entering the era of Web (see http: //). The problem is that security has frankly not kept pace. At the moment we have enough problems securing Web apps that we. | Systematic Techniques to Find Problems Fast y Testing Cookbook O REILLY Paco Hope Ben Walther Web Security O REILLY Web Security Testing Cookbook Among the tests you perform on web applications security testing is perhaps the most important yet it s often the most neglected. The recipes in Web Ẽ-_ Security Testing Cookbook demonstrate how developers and testers can check for the most common web security issues while conducting unit tests regression tests or exploratory tests. Unlike ad hoc security assessments these recipes are repeatable concise and systematic perfect for integrating into your regular test suite. Recipes cover the basics from observing messages between clients and servers to multiphase tests that script the login and execution of web application features. By the end of the book you ll be able to build tests pinpointed at Ajax functions as well as large multistep tests for the usual suspects cross-site scripting and injection attacks. This book will help you Obtain install and configure useful and free security testing tools Understand how your application communicates with users so you can better simulate attacks in your tests Great real-life examples throughout make the theory come alive and make the attacks compelling. Lee Copeland Program Chair StarEast and StarWest Testing Conferences Finally a plain-sense handbook for testers that teaches the mechanics of security testing. Belying the usability of the recipe approach this book actually arms the tester to find vulnerabilities that even some of the best known security tools can t find. Matt Fisher Founder and CEO Piscis LLC Choose from many different methods that imitate common attacks such as SQL injection cross-site scripting and manipulating hidden form fields Make your tests repeatable by using the scripts and examples in the recipes as starting points for automated tests Don t live in dread of a midnight phone call telling you that your site has been hacked. With Web Security Testing