February 2021
Beginner to intermediate
372 pages
6h 48m
Korean
Content preview from 웹 애플리케이션 보안: 정찰, 공격, 방어 세 단계로 배우는 웹 애플리케이션 보안의 모든 것
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
89
3
장
현대 웹 애플리케이션의 구조
플리케이션 (페이스북, 트위터, 유튜브 )에서
SPA
프레임워크를 많이 사용한다.
오늘날 널리 사용되는 오픈 소스
SPA
프레임워크로는 리액트
JS
,
EmberJS
, 뷰
JS
, 앵귤러
JS
등
이 있다 (그림
3
-
4
). 이것들은 모두 자바스크립트와
DOM
을 기반으로 만들어졌지만 보안과
기능 관점에서는 더욱 복잡하다.
그림
3-4
뷰
JS
는 인기 있는 단일 페이지 애플리케이션 프레임워크로 웹 컴포넌트들을 기반으로 만들어졌다.
3.6
인증 및 권한 부여 시스템
대부분의 애플리케이션은 클라이언트 (브라우저, 스마트폰 )와 서버로 구성되고 서버는 클라
이언트에서 보낸 데이터를 저장한다. 시스템은 저장한 데이터를 올바른 사용자에게 제공해야
한다.
시스템이 사용자를
식별
하는 흐름을 가리키는 데,
인증
authentication
이라는 용어를 사용한다. 쉽게
말해서 인증 시스템은 ‘
joe123
’이라는 사용자가 ‘
susan1988
’이 아니라 정말로 ‘
joe123
’이 맞는
지 우리에게 알려준다.
권한 부여
authorization
는 시스템 내에서 사용자가 어떤 리소스에 액세스할 수 있는지 결정하는 흐
름을 가리키는 용어다. 예를 들어 ‘
joe123
’은 자신이 업로드한 비공개 사진에 액세스할 수 있어
야 하고 ‘
susan1988
’도 자기 사진에 액세스할 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.