Web Hacking: Attacks and Defense

McClure, Stuart; Shah, Saumil; Shah, Shreeraj

ISBN 10: 0201761769 / ISBN 13: 9780201761764

Edité par Addison-Wesley Professional, 2002

A propos de cet article

May have limited writing in cover pages. Pages are unmarked. ~ ThriftBooks: Read More, Spend Less 2.36. N° de réf. du vendeur G0201761769I4N00

Détails bibliographiques

Titre : Web Hacking: Attacks and Defense

Éditeur : Addison-Wesley Professional

Date d'édition : 2002

Reliure : Paperback

Etat : Very Good

Etat de la jaquette : No Jacket

A propos de ce titre

Synopsis :

Whether it's petty defacing or full-scale cyber robbery, hackers are moving to the Web along with everyone else. Organizations using Web-based business applications are increasingly at risk. Web Hacking: Attacks and Defense is a powerful guide to the latest information on Web attacks and defense. Security experts Stuart McClure (lead author of Hacking Exposed), Saumil Shah, and Shreeraj Shah present a broad range of Web attacks and defense. Both novice and seasoned readers will come away with an increased understanding of how Web hacking occurs and enhanced skill at developing defenses against such Web attacks. Technologies covered include Web languages and protocols, Web and database servers, payment systems and shopping carts, and critical vulnerabilities associated with URLs. Features Include: Overview of the Web and what hackers go after; Complete Web application security methodologies; Detailed analysis of hack techniques; Countermeasures; What to do at development time to eliminate vulnerabilities; New case studies and eye-opening attack scenarios; Advanced Web hacking concepts, methodologies, and tools. "How Do They Do It?" sections show how and why different attacks succeed, including: Cyber graffiti and Web site defacements; e-Shoplifting; Database access and Web applications; Java TM application servers; how to harden your Java Web Server; Impersonation and session hijacking; Buffer overflows, the most wicked of attacks; Automated attack tools and worms. Appendices include a listing of Web and database ports, cheat sheets for remote command execution, and source code disclosure techniques. Web Hacking informs from the trenches. Experts show you how to connect the dots-how to put the stages of a Web hack together so you can best defend against them. Written for maximum brain absorption with unparalleled technical content and battle-tested analysis, Web Hacking will help you combat potentially costly security threats and attacks.

À propos de l?auteur:

Stuart McClure is the President/CTO of Foundstone, Inc., the premier provider of enterprise vulnerability management products and services. He is lead author of the critically acclaimed Hacking Exposed, Third Edition, (Osborne McGraw-Hill, 2001). Saumil Shah, Director of India Operations for Foundstone, Inc., is a regular speaker at security conferences such as Black Hat and RSA, and has pioneered Foundstone's Ultimate Web Hacking training course. Mr. Shah authored The Anti-Virus Book (Tata McGraw-Hill, India). Shreeraj Shah is a Consultant and Software Engineer with Foundstone, Inc., where he specializes in analyzing the security architecture of Internet and Intranet applications. He has published numerous security vulnerability advisories on Web application servers.