Web Application Security, A Beginner's Guide

Security smarts for the self-guided IT professional! Learn how to secure Web applications from today’s sneakiest hackers.

True to the hallmarks of our Secure Beginner’s Guides series, Web Application Security, A Beginner’s Guide imparts the hard-learned lessons and experiences of top security professionals, and provides know-how that can otherwise take you years to learn. This book takes you from a professional beginner-level to an up-and-running level of proficiency through a complete overview of Web application security. Important tips and key techniques plus the most common terminology you must know are all clearly explained.

Hackers are smart but security professionals need to be smarter. This book provides you with an actionable, rock-solid foundation in Web application security — from a thorough review of the tools and resources essential to Web application security to the trade’s best practices for detecting vulnerabilities and protecting applications.

The aim of this series is to help you work a bit more expertly than your actual years of hands-on experience.

Web Application Security, A Beginner’s Guide features:

• Lingo—Concise definitions of frequently used security terms
• In Actual Practice—Real-world examples of security concepts in context
• Budget Note—Tips for optimizing security processes and technologies to align with an organization’s budget
• IMHO—Cautionary advice on errors to avoid, based on the authors’ life lessons
• Your Plan—Customizable, on-the-job planning checklists
• Into Action—Hands-on exercises that show how to apply new skills

Vincent Liu, CISSP, is a managing partner at Stach & Liu. He previously led the Attack & Penetration and Reverse Engineering teams for Honeywell’s Global Security group and was an analyst at the National Security Agency. Vincent speaks at industry conferences, including Black Hat, ToorCon, and Microsoft’s BlueHat. He is a co-author of Hacking Exposed Web Applications, Third Edition and Hacking Exposed Wireless, Second Edition.

Bryan Sullivan, Senior Security Researcher at Adobe Systems, was previously Security Program Manager at Microsoft and a development manager at HP, where he helped to design HP's vulnerability scanning tools WebInspect and DevInspect. Bryan speaks at industry conferences such as Black Hat, RSA, BlueHat and TechEd.