Secure Web Application Development: A Hands-On Guide with Python and... - Librairie Eyrolles
Menu

mon compte Connexion

mon panier 0 article

Vous avez entre 15 et 18 ans ? Profitez du Pass Culture à la librairie Eyrolles !
Tous nos rayons
Aucun résultat pour ""

Rayons

Graphisme & Photo Informatique Construction Entreprise & Droit Sciences Littérature Arts & Loisirs Vie pratique Voyage et Tourisme BD et Jeunesse

Déjà client ? Identifiez-vous

Mot de passe oublié ?

Nouveau client ?

CRÉER VOTRE COMPTE
Secure Web Application Development: A Hands-On Guide with Python and Django
Ajouter à une liste

Librairie Eyrolles - Paris 5e
Indisponible

Secure Web Application Development: A Hands-On Guide with Python and Django

Secure Web Application Development: A Hands-On Guide with Python and Django

Matthew Baker

(0 avis) Donner votre avis
462 pages, parution le 28/10/2022
Ajouter à une liste
Indisponible

Résumé

IntermediateCyberattacks are becoming more commonplace and the Open Web Application Security Project (OWASP), estimates 94% of sites have flaws in their access control alone. Attacks evolve to work around new defenses, and defenses must evolve to remain effective. Developers need to understand the fundamentals of attacks and defenses in order to comprehend new techniques as they become available. This book teaches you how to write secure web applications.
The focus is highlighting how hackers attack applications along with a broad arsenal of defenses. This will enable you to pick appropriate techniques to close vulnerabilities while still providing users with their needed functionality.

Topics covered include:

  • A framework for deciding what needs to be protected and how strongly
  • Configuring services such as databases and web servers
  • Safe use of HTTP methods such as GET, POST, etc, cookies and use of HTTPS
  • Safe REST APIs
  • Server-side attacks and defenses such as injection and cross-site scripting
  • Client-side attacks and defenses such as cross-site request forgery
  • Security techniques such as CORS, CSP
  • Password management, authentication and authorization, including OAuth2
  • Best practices for dangerous operations such as password change and reset
  • Use of third-party components and supply chain security (Git, CI/CD etc)

    • What You'll Learn


    • Review the defenses that can used to prevent attacks
    • Model risks to better understand what to defend and how
    • Choose appropriate techniques to defend against attacks
    • Implement defenses in Python/Django applications

    Who This Book Is For

    • Developers who already know how to build web applications but need to know more about security
    • Non-professional software engineers, such as scientists, who must develop web tools and want to make their algorithms available to a wider audience.
    • Engineers and managers who are responsible for their product/company technical security policy

    1. Introduction

    2. The Hands-On Environment

    3. Threat Modelling

    4. Transport and Encryption

    5. Installing and Configuring Services

    6. APIs and Endpoints

    7. Cookies and User Input

    8. Cross-Site Requests

    9. Password Management

    10. Authentication and Authorization

    11. OAuth2

    12. Logging and Monitoring

    13. Third-Party and Supply Chain Security

    14. Further Resources.

     Matthew Baker is the Head of Scientific Software and Data Management at ETH Zurich, Switzerland's leading science and technology university, He leads a team of engineers developing custom software to support STEM research projects, as well as teaches computer science short courses. Having over 25 years of experience developing software, he has worked as a developer, systems administrator, project manager and consultant in various sectors from banking and insurance, science and engineering, to military intelligence.

    Caractéristiques techniques

      PAPIER
    Éditeur(s) Apress
    Auteur(s) Matthew Baker
    Parution 28/10/2022
    Nb. de pages 462
    EAN13 9781484285954

    Avantages Eyrolles.com

    Livraison à partir de 0,01 € en France métropolitaine
    Paiement en ligne SÉCURISÉ
    Livraison dans le monde
    Retour sous 15 jours
    + d'un million et demi de livres disponibles

    Consultez aussi

    satisfait ou remboursé
    Satisfait ou remboursé
    Paiement sécurisé
    modes de paiement
    Paiement à l'expédition
    partout dans le monde
    Livraison partout dans le monde
    Service clients sav@commande.eyrolles.com
    librairie française
    Librairie française depuis 1925
    Recevez nos newsletters
    Vous serez régulièrement informé(e) de toutes nos actualités.
    Inscription