Malcolm McDonald All Books: Web Security sku-5179522858

Grokking Web Application Security is a paperback by Malcolm McDonald, listed under All Books as SKU sku-5179522858. Written for readers who know basic web application design and technologies, it uses illustrations and examples from McDonald's security work to explain browser and server security across technology stacks.

Topics include sandboxing, the same-origin policy, cookies, input validation, output escaping, defense in depth, encryption and a development process for finding security bugs early. It covers cross-site scripting, cross-site request forgery, clickjacking, man-in-the-middle attacks, SSL-stripping, DNS poisoning, brute-force attacks, single sign-on, multi-factor authentication, broken access control, session jacking, SQL injection, cross-site scripting inclusion, command and remote code execution, and attacks on XML parsers and file uploads.

Supply-chain and API attacks, incident response, attacker motivations and tools for finding issues are also covered. It can be read in order or used to look up a vulnerability. A print purchase includes a free PDF and ePub eBook from Manning Publications. McDonald is a security engineer with 20 years of experience in investment banking, start-ups and PayPal; he created hacksplaining.com.

Rajvardhan Oak was the technical editor. The contents are divided into two parts: 1 Know your enemy; 2 Browser security; 3 Encryption; 4 Web server security; 5 Security as a process; 6 Browser vulnerabilities; 7 Network vulnerabilities; 8 Authentication vulnerabilities; 9 Session vulnerabilities; 10 Authorization vulnerabilities; 11 Payload vulnerabilities; 12 Injection vulnerabilities; 13 Vulnerabilities in third-party code; 14 Being an unwitting accomplice; and 15 What to do when you get hacked.