Secure Web Application Development A Hands-On Guide with Python and Django
Heftet /
2022
/ Engelsk
Produktdetaljer
ISBN
9781484285954
Publisert
2022-10-29
Utgiver
Vendor
Apress
Høyde
235 mm
Bredde
155 mm
Aldersnivå
Professional/practitioner, P, 06
Språk
Product language
Engelsk
Format
Product format
Heftet
Forfatter
Biografisk notat
Matthew Baker is the Head of Scientific Software and Data Management at ETH Zurich, Switzerland’s leading science and technology university, He leads a team of engineers developing custom software to support STEM research projects, as well as teaches computer science short courses. Having over 25 years of experience developing software, he has worked as a developer, systems administrator, project manager and consultant in various sectors from banking and insurance, science and engineering, to military intelligence.
Cyberattacks are becoming more commonplace and the Open Web Application Security Project (OWASP), estimates 94% of sites have flaws in their access control alone. Attacks evolve to work around new defenses, and defenses must evolve to remain effective. Developers need to understand the fundamentals of attacks and defenses in order to comprehend new techniques as they become available. This book teaches you how to write secure web applications.
The focus is highlighting how hackers attack applications along with a broad arsenal of defenses. This will enable you to pick appropriate techniques to close vulnerabilities while still providing users with their needed functionality.
A framework for deciding what needs to be protected and how strongly Configuring services such as databases and web servers Safe use of HTTP methods such as GET, POST, etc, cookies and use of HTTPS Safe REST APIs Server-side attacks and defenses such as injection and cross-site scripting Client-side attacks and defenses such as cross-site request forgery Security techniques such as CORS, CSP Password management, authentication and authorization, including OAuth2 Best practices for dangerous operations such as password change and reset Use of third-party components and supply chain security (Git, CI/CD etc)
What You'll Learn
The focus is highlighting how hackers attack applications along with a broad arsenal of defenses. This will enable you to pick appropriate techniques to close vulnerabilities while still providing users with their needed functionality.
Topics covered include:
What You'll Learn
- Review the defenses that can used to prevent attacks
- Model risks to better understand what to defend and how
- Choose appropriate techniques to defend against attacks
- Implement defenses in Python/Django applications
- Developers who already know how to build web applications but need to know more about security
- Non-professional software engineers, such as scientists, who must develop web tools and want to make their algorithms available to a wider audience.
- Engineers and managers who are responsible for their product/company technical security policy
Les mer
1. Introduction.- 2. The Hands-On Environment.- 3. Threat Modelling.- 4. Transport and Encryption.- 5. Installing and Configuring Services.- 6. APIs and Endpoints.- 7. Cookies and User Input.- 8. Cross-Site Requests.- 9. Password Management.-10. Authentication and Authorization.- 11. OAuth2.- 12. Logging and Monitoring.- 13. Third-Party and Supply Chain Security.- 14. Further Resources.
Les mer
Cyberattacks are becoming more commonplace and the Open Web Application Security Project (OWASP), estimates 94% of sites have flaws in their access control alone. Attacks evolve to work around new defenses, and defenses must evolve to remain effective. Developers need to understand the fundamentals of attacks and defenses in order to comprehend new techniques as they become available.
This book uses a hand-on approach to teach you how to write secure web applications and will highlight how hackers attack applications along with a broad arsenal of defenses. You'll see how to Implement the right defenses in Python/Django applications to prevent such attacks. Secure Web Application Development is your guide to picking the appropriate techniques to close vulnerabilities and ensuring you still provide users with their needed functionality.
You will:
This book uses a hand-on approach to teach you how to write secure web applications and will highlight how hackers attack applications along with a broad arsenal of defenses. You'll see how to Implement the right defenses in Python/Django applications to prevent such attacks. Secure Web Application Development is your guide to picking the appropriate techniques to close vulnerabilities and ensuring you still provide users with their needed functionality.
You will:
- Understand common coding vulnerabilities and how to avoid them
- Configure services, such as databases and web servers, to minimize the risk of attack
- Implement secure methods for password management, authentication, and authorization
- Safely manage requests to and from external web sites
- Establish a framework for modelling and assessing risks
Les mer
Provides both theoretical and practical approaches concerning web application security Teaches readers how hackers attack applications as well as defense best practices Delivers readers with a complete development environment complete with hands-on exercises
Les mer
GPSR Compliance
The European Union's (EU) General Product Safety Regulation (GPSR) is a set of rules that requires consumer products to be safe and our obligations to ensure this.
If you have any concerns about our products you can contact us on ProductSafety@springernature.com.
In case Publisher is established outside the EU, the EU authorized representative is:
Springer Nature Customer Service Center GmbH
Europaplatz 3
69115 Heidelberg, Germany
ProductSafety@springernature.com
Les mer
Produktdetaljer
ISBN
9781484285954
Publisert
2022-10-29
Utgiver
Vendor
Apress
Høyde
235 mm
Bredde
155 mm
Aldersnivå
Professional/practitioner, P, 06
Språk
Product language
Engelsk
Format
Product format
Heftet
Forfatter