Web Application Security, A Beginner's Guide

Contents

ACKNOWLEDGMENTS

INTRODUCTION

PART I Primer

1 Welcome to the Wide World of Web Application Security

Misplaced Priorities and the Need for a New Focus

Network Security versus Application Security: The Parable of the Wizard and the Magic Fruit Trees

Real-World Parallels

Thinking like a Defender

The OWASP Top Ten List

#1. Injection

#2. Cross-Site Scripting (XSS)

#3. Broken Authentication and Session Management

#4. Insecure Direct Object References

#5. Cross-Site Request Forgery

#6. Security Misconfiguration

#7. Insecure Cryptographic Storage

#8. Failure to Restrict URL Access

#9. Insufficient Transport Layer Protection

#10. Unvalidated Redirects and Forwards

Wrapping Up the OWASP Top Ten

Secure Features, Not Just Security Features

Final ...