Get Free Shipping on orders over $79
Web Application Security : 2nd Eidtion - Exploitation and Countermeasures for Modern Web Applications - Andrew Hoffman
eTextbook alternate format product

Instant online reading.
Don't wait for delivery!

Web Application Security

2nd Eidtion - Exploitation and Countermeasures for Modern Web Applications

By: Andrew Hoffman

Paperback | 2 February 2024 | Edition Number 2

At a Glance

Paperback


RRP $125.50

$60.99

51%OFF

or 4 interest-free payments of $15.25 with

 or 

Ships in 15 to 25 business days

In the first edition of this critically acclaimed book, Andrew Hoffman defined the three pillars of application security: reconnaissance, offense, and defense. In this revised and updated second edition, he examines dozens of related topics, from the latest types of attacks and mitigations to threat modeling, the secure software development lifecycle (SSDL/SDLC), and more.

Hoffman, senior staff security engineer at Ripple, also provides information regarding exploits and mitigations for several additional web application technologies such as GraphQL, cloud-based deployments, content delivery networks (CDN) and server-side rendering (SSR). Following the curriculum from the first book, this second edition is split into three distinct pillars comprising three separate skill sets:

  • Pillar 1: Recon-Learn techniques for mapping and documenting web applications remotely, including procedures for working with web applications
  • Pillar 2: Offense-Explore methods for attacking web applications using a number of highly effective exploits that have been proven by the best hackers in the world. These skills are valuable when used alongside the skills from Pillar 3.
  • Pillar 3: Defense-Build on skills acquired in the first two parts to construct effective and long-lived mitigations for each of the attacks described in Pillar 2.
About the Author

Andrew Hoffman is a senior staff security engineer at Ripple. His expertise is in deep DOM and JavaScript security vulnerabilities. He's worked with every major browser vendor, including TC39 and the Web Hypertext Application Technology Working Group (WHATWG) - organizations responsible for the upcoming version of JavaScript and the browser DOM spec.

More in Network Security

Grey Area : Dark Web Data Collection and the Future of OSINT - Vinny Troia
Hacking For Dummies : For Dummies (Computer/Tech) - Kevin Beaver

RRP $49.95

$38.75

22%
OFF
Cybersecurity All-in-One For Dummies : For Dummies - Joseph Steinberg
Tech-Smart Parenting : How to keep your kids happy and safe online - Catherine Knibbs
Crafting an Information Security Playbook - Brandon Enright

RRP $95.00

$43.75

54%
OFF
Threat Modeling : A Practical Guide for Development Teams - Izar Tarandach
Linux Security Cookbook : Cookbooks Ser. - Daniel J Barrett

RRP $76.00

$39.75

48%
OFF
Mitigating the Risks of AI Deepfakes - Tarek Moulahi

RRP $231.00

$202.75

12%
OFF