Protect your Web applications from malicious attacks by mastering the weapons and thought processes of today's hacker. Written by recognized security practitioners and thought leaders, Hacking Exposed Web Applications, Third Edition is fully updated to cover new infiltration methods and countermeasures. Find out how to reinforce authentication and authorization, plug holes in Firefox and IE, reinforce against injection attacks, and secure Web features. Integrating security into the Web development lifecycle (SDL) and into the broader enterprise information security program is also covered in this comprehensive resource | The desk reference every Web application security practitioner needs. Robert RSnake Hansen CEO of SecTheory and founder of Web Application Security Secrets Solutions Joel Scambray Vincent Liu Caleb Sima Praise for Hacking Exposed Web Applications Web Application Security Secrets and Solutions Third Edition Whether you are a business leader attempting to understand the threat space for your business or an engineer tasked with writing the code for those sites or a security engineer attempting to identify and mitigate the threats to your applications this book will be an invaluable weapon in your arsenal. From the Foreword by Chris Peterson Senior Director of Application Security Zynga Game Network Former Director of Security Assurance Microsoft Corporation I cut my teeth reading Joel s work and this book is no disappointment. People often ask where to find high-quality content that will help them gain a foothold in this daunting industry. This is the kind of desk reference every web application security practitioner needs. It will certainly hold a place of prominence in my personal library. Robert RSnake Hansen CEO SecTheory and founder of An eye-opening resource for realizing the realities of today s web application security landscape this book explores the latest vulnerabilities as well as exploitation techniques and tradecraft being deployed against those vulnerabilities. This book is a valuable read for both the aspiring engineer who is looking for the first foray into the world of web application security and the seasoned application-security penetration-testing expert who wants to keep abreast of current techniques. Chad Greene Director eBay Global Information Security As our businesses push more of their information and commerce to their customers through webapplications the confidentiality and integrity of these transactions is our fundamental if not mandatory responsibility. Hacking Exposed Web Applications provides a comprehensive
