Testing and securing web applications

"Web applications occupy a large space within the IT infrastructure of a business or a corporation. They simply just don’t touch a front end or a back end; today’s web apps impact just about every corner of it. Today’s web apps have become complex, which has made them a prime target for sophisticated cyberattacks. As a result, web apps must be literally tested from the inside and out in terms of security before they can be deployed and launched to the public for business transactions to occur. The primary objective of this book is to address those specific areas that require testing before a web app can be considered to be completely secure. The book specifically examines five key areas: network security, cryptography, penetration testing, threat hunting, and the dark web. Testing and Securing Web Applications breaks down the complexity of web application security testing so this critical part of IT and corporate infrastructure remains safe and in operation"--

"An Auerbach book." (appears on title page)

1. Network Security -- Introduction -- A Chronological History of the Internet -- The Evolution of Web Applications -- The Fundamentals of Network Security -- The OSI Model -- The OSI Model -- What Is the Significance of the OSI Model to Network Security? -- The Classification of Threats to the OSI Model -- The Most Probable Attacks -- Assessing a Threat to a Web Application -- Network Security Terminology; The Types of Network Security Topologies Best Suited for Web Applications -- The Types of Attack That Can Take Place against Web Applications -- How to Protect Web Applications from DDoS Attacks -- Defending against Buffer Overflow Attacks -- Defending against IP Spoofing Attacks -- Defending against Session Hijacking -- Defending Virus and Trojan Horse Attacks -- Viruses -- How a Virus Spreads Itself -- The Different Types of Viruses -- Defending Web Applications at a Deeper Level -- The Firewall -- Types of Firewalls -- Blacklisting and Whitelisting; How to Properly Implement a Firewall to Safeguard the Web Application -- The Use of Intrusion Detection Systems -- Understanding What a Network Intrusion Detection System Is -- Preemptive Blocking -- Anomaly Detection -- Importan…