Essential PHP Security

Book description

The PHP scripting language works beautifully with other open source tools, such as the MySQL database and Apache web server software, to build interactive web applications. But security is still an issue that developers need to address, given the frequency of attacks on web sites. Essential PHP Security explains the types of attacks that hackers use on web sites and how to correctly configure Apache and PHP to guard against them. The author of Essential PHP Security, Chris Shiflett, is an internationally recognized expert in the field of PHP security and this book shows developers how to guard against attacks by writing secure PHP code.
Full Description
Being highly flexible in building dynamic, database-driven web applications makes the PHP programming language one of the most popular web development tools in use today. It also works beautifully with other open source tools, such as the MySQL database and the Apache web server. However, as more web sites are developed in PHP, they become targets for malicious attackers, and developers need to prepare for the attacks.

Security is an issue that demands attention, given the growing frequency of attacks on web sites. Essential PHP Security explains the most common types of attacks and how to write code that isn't susceptible to them. By examining specific attacks and the techniques used to protect against them, you will have a deeper understanding and appreciation of the safeguards you are about to learn in this book.

In the much-needed (and highly-requested) Essential PHP Security, each chapter covers an aspect of a web application (such as form processing, database programming, session management, and authentication). Chapters describe potential attacks with examples and then explain techniques to help you prevent those attacks.

Topics covered include:

* Preventing cross-site scripting (XSS) vulnerabilities
* Protecting against SQL injection attacks
* Complicating session hijacking attempts

You are in good hands with author Chris Shiflett, an internationally-recognized expert in the field of PHP security. Shiflett is also the founder and President of Brain Bulb, a PHP consultancy that offers a variety of services to clients around the world.

Read More......

McGraw Hill Web Services Security

Web Services: An Introduction
B V Kumar
S V Subrahmanya

ISBN: 0070593787
Copyright year: 2004

Web services have now started making a mark in the world of business by building business automation capabilities. The potential tangible benefits of web services have make strategists, executives, critics to evaluate it in terms of technology adoption and incorporation into the existing intranet, extranet and internet environments.

This book addresses the web services arena with a specific agenda of providing information right from covering the fundamental aspects to its deployment and implementation issues. The content is introductory in nature, and covers not only the technology aspects, but also highlights the application scenarios across the industry. In order to illustrate the potential of web services, a case study exemplifying the Financial and Banking Services industry has been chosen for presentation the book.

Part I of the book provides an overview of web services and covers the evolution of web services to its present form. In Part II, constituents of web services are covered in detail. This part also covers predominant mechanisms of accessing and availing web services.

In Part III, Financial and Banking Services Industry has been chosen for a detailed analysis of the impact of web services technology. Emphasis of this part is on the detailed case study that deals with the development and implementation exercise of web services as applied to a particular enterprise banking organization. This case study provides elaborate step-by-step details from proof-of-concept to prototype development.

Audience: This book is designed for IT professionals in the making, those who teach and all those who implement. The primary audiences for this book are the following:
# Academicians, Professors, Educators, Trainers and Students
# Enterprise Solution Architects and Designers
# Business and Technology professionals

The companion website provides a refreshing and stimulating experience in transacting on the web

Download

Read More......

McGraw Hill Hacking Exposed Web Applications

Overview

Implement bulletproof e-business security the proven Hacking Exposed way

Defend against the latest Web-based attacks by looking at your Web applications through the eyes of a malicious intruder. Fully revised and updated to cover the latest Web exploitation techniques, Hacking Exposed Web Applications, Second Edition shows you, step-by-step, how cyber-criminals target vulnerable sites, gain access, steal critical data, and execute devastating attacks. All of the cutting-edge threats and vulnerabilities are covered in full detail alongside real-world examples, case studies, and battle-tested countermeasures from the authors' experiences as gray hat security professionals.

Download

Read More......

McGraw.Hill.HackNotes.Web.Security.Portable.Reference

Describes how hackers break into Web applications, what function areas are vulnerable, and how to guard against attacks.

Download

Read More......

Addison Wesley - Web Hacking Attacks and Defense

"Both novice and seasoned readers will come away with an increased understanding of how Web hacking occurs and enhanced skill at developing defenses against such Web attacks. Technologies covered include Web languages and protocols, Web and database servers, payment systems and shopping carts, and critical vulnerabilities associated with URLs. This book is a virtual battle plan that will help you identify and eliminate threats that could take your Web site off line..."
--From the Foreword by William C. Boni, Chief Information Security Officer, Motorola

"Just because you have a firewall and IDS sensor does not mean you aresecure; this book shows you why."
--Lance Spitzner, Founder, The Honeynet Project

Whether it's petty defacing or full-scale cyber robbery, hackers are moving to the Web along with everyone else. Organizations using Web-based business applications are increasingly at risk. Web Hacking: Attacks and Defense is a powerful guide to the latest information on Web attacks and defense. Security experts Stuart McClure (lead author of Hacking Exposed), Saumil Shah, and Shreeraj Shah present a broad range of Web attacks and defense.

Features include:

* Overview of the Web and what hackers go after
* Complete Web application security methodologies
* Detailed analysis of hack techniques
* Countermeasures
* What to do at development time to eliminate vulnerabilities
* New case studies and eye-opening attack scenarios
* Advanced Web hacking concepts, methodologies, and tools

"How Do They Do It?" sections show how and why different attacks succeed, including:

* Cyber graffiti and Web site defacements
* e-Shoplifting
* Database access and Web applications
* Java™ application servers; how to harden your Java™ Web Server
* Impersonation and session hijacking
* Buffer overflows, the most wicked of attacks
* Automated attack tools and worms

Appendices include a listing of Web and database ports, cheat sheets for remote command execution, and source code disclosure techniques.

Web Hacking informs from the trenches. Experts show you how to connect the dots--how to put the stages of a Web hack together so you can best defend against them. Written for maximum brain absorption with unparalleled technical content and battle-tested analysis, Web Hacking will help you combat potentially costly security threats and attacks.


0201761769B07192002

Download

Read More......