Innocent Code: A Security Wake-Up Call for Web Programmers und �ber 1,5 Millionen weitere B�cher verf�gbar f�r Amazon Kindle. Erfahren Sie mehr

Menge:

oder

Loggen Sie sich ein, um 1-Click® einzuschalten.

oder


	Mit kostenloser Probeteilnahme bei Amazon Prime. Melden Sie sich w�hrend des Bestellvorgangs an. Erfahren Sie mehr

Alle Angebote

M�chten Sie verkaufen? Hier verkaufen

Der Artikel ist in folgender Variante leider nicht verf�gbar

Keine Abbildung vorhanden f�r
Farbe:

Keine Abbildung vorhanden

F�r Kunden: Stellen Sie Ihre eigenen Bilder ein.

Hier reinlesen und suchen

Beginnen Sie mit dem Lesen von Innocent Code: A Security Wake-Up Call for Web Programmers auf Ihrem Kindle in weniger als einer Minute.

Sie haben keinen Kindle? Hier kaufen oder eine gratis Kindle Lese-App herunterladen.

Innocent Code: A Security wake-up call for web Programmers [Englisch] [Taschenbuch]

Sverre H. Huseby (Autor)

Preis:	EUR 44,60 kostenlose Lieferung. Siehe Details.
Angebotspreis:
	Alle Preisangaben inkl. MwSt.
	o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o

Auf Lager.
Verkauf und Versand durch Amazon. Geschenkverpackung verf�gbar.

Lieferung bis Donnerstag, 20. Juni: W�hlen Sie an der Kasse Morning-Express. Siehe Details.

Weitere Ausgaben	Amazon-Preis		Neu ab	Gebraucht ab
Kindle Edition	EUR 18,29		--	--
Taschenbuch	EUR 44,60		--	--

Kurzbeschreibung

Erscheinungstermin: 22. Januar 2004

* This concise and practical book shows where code vulnerabilities lie-without delving into the specifics of each system architecture, programming or scripting language, or application-and how best to fix them
* Based on real-world situations taken from the author's experiences of tracking coding mistakes at major financial institutions
* Covers SQL injection attacks, cross-site scripting, data manipulation in order to bypass authorization, and other attacks that work because of missing pieces of code
* Shows developers how to change their mindset from Web site construction to Web site destruction in order to find dangerous code

#outer_postBodyPS { display: none; } #psGradient { display: none; } #psPlaceHolder { display: none; } #psExpand { display: none; } * This concise and practical book shows where code vulnerabilities lie-without delving into the specifics of each system architecture, programming or scripting language, or application-and how best to fix them
* Based on real-world situations taken from the author's experiences of tracking coding mistakes at major financial institutions
* Covers SQL injection attacks, cross-site scripting, data manipulation in order to bypass authorization, and other attacks that work because of missing pieces of code
* Shows developers how to change their mindset from Web site construction to Web site destruction in order to find dangerous code

Produktinformation

Taschenbuch: 248 Seiten
Verlag: John Wiley & Sons Ltd; Auflage: 1. Auflage (22. Januar 2004)
Sprache: Englisch
ISBN-10: 0470857447
ISBN-13: 978-0470857441
Gr��e und/oder Gewicht: 17,9 x 1,5 x 23,4 cm
Amazon Bestseller-Rang: Nr. 553.399 in Englische Bücher (Siehe Top 100 in Englische Bücher)

M�chten Sie die Produktinformationen aktualisieren oder Feedback zu den Produktabbildungen geben?
Ist der Verkauf dieses Produkts f�r Sie nicht akzeptabel?

Komplettes Inhaltsverzeichnis ansehen

Mehr �ber den Autor

› Besuchen Sie die Seite von Sverre H. Huseby auf Amazon

Entdecken Sie B�cher, lesen Sie �ber Autoren und mehr

Produktbeschreibungen

Pressestimmen

"...the security book that all web developers need to read...sound advice...ignore at peril..." (Tech Book Report, January 2004)

"...achieves its aims admirably..." (PC Utilities, April 2004)

Synopsis

This book is much more than a wake-up call. It is also an eye-opener. Even for those who are already awake to the problems of Web server security, it is a serious guide for what to do and what not to do, with many well-chosen examples. The set of fundamental rules is highly relevant. Peter G. Neumann, Author of Computer-Related Risks,and moderator of the Internet Risks Forum (risks.org). This concise and practical book will show where code vulnerabilities lie and how best to fix them. Its value is in showing where code may be exploited to gain access to - or break - systems, but without delving into specific architectures, programming or scripting languages or applications. It provides illustrations with real code. Innocent Code is an entertaining read showing how to change your mindset from website construction to website destruction so as to avoid writing dangerous code. Abundant examples from susceptible sites will bring the material alive and help you to guard against:; SQL Injection, shell command injection and other attacks based on mishandling meta-characters; bad input; cross-site scripting; attackers who trick users into performing actions.

Alle Produktbeschreibungen

In diesem Buch (Mehr dazu)

Einleitungssatz
The first line of the response is known as the Status-Line. Lesen Sie die erste Seite

Mehr entdecken
Wortanzeiger

Kundenrezensionen

Es gibt noch keine Kundenrezensionen auf Amazon.de

5 Sterne

4 Sterne

3 Sterne

2 Sterne

1 Sterne

Noch keine Kundenrezensionen vorhanden.

Kundenrezension verfassen

Die hilfreichsten Kundenrezensionen auf Amazon.com ^(beta)

Amazon.com: 4.6 von 5 Sternen 5 Rezensionen

18 von 18 Kunden fanden die folgende Rezension hilfreich

5.0 von 5 Sternen Focused info for developers more than security pros 17. M�rz 2004

Von Mike Tarrani - Ver�ffentlicht auf Amazon.com

Format:Taschenbuch

This book is similar in many respects to Web Hacking: Attacks and Defense (ISBN 0201761769). While that book was aimed at security professionals who needed to understand the exposures and vulnerabilities in web systems that were commonly exploited by the bad guys and gals, this book is aimed more at developers.

Like for former book, this one systematically covers exposures and vulnerabilities, and provides remedies at the code level. What sets this book apart is every component of a modern web site, from web server to backend database is covered, problem areas from a developer's perspective are highlighted, and solutions for resolving the problem areas given. I like this book because developers, from casual hobbyists to professionals, will easily grasp the information. More importantly, the material is not insultingly simple to experienced developers, nor is it over the head of less experienced ones.

Another reason I like this book is in systematically uncovering exposures the QA team can also use this book as a sourcebook for developing a baseline set of test cases that will catch security-related problems during acceptance, functional qualification, or regression test cycles.

In my opinion not only should web developers (including DBAs) and QA professionals read this book, but it should also be adopted by development organizations and projects as a part of coding standards.

4 von 4 Kunden fanden die folgende Rezension hilfreich

4.0 von 5 Sternen a longer discussion of Trojans would have been nice 14. September 2005

Von W Boudville - Ver�ffentlicht auf Amazon.com

Format:Taschenbuch

Huseby walks through many instances of flawed web code. Client side and server side. All of these have been covered before in other forums and books, but he offers a clear exposition of the dangers.

Take SQL injection. If you do not have your web server filter the user's input in a web page submitted by her browser, and you blithely pass her string to your SQL engine, you are asking for grief. You're begging for a cracker to stuff a SQL command script to sabotage or exacavate your database. Thus too for shell command injection, where your server might inadvertantly execute that as a shell command. Remember to filter user input!

Cross site scripting and Trojans are also explained. Unfortunately, while the Trojan discussion is understandable, it is far too short.

There is no discussion of antiphishing methods. Though in the Trojan chapter, an example fake email would qualify as phishing. Perhaps the author saw no technical solution for phishing. And this book is about technical solutions.

6 von 7 Kunden fanden die folgende Rezension hilfreich

5.0 von 5 Sternen Highly recommended 6. August 2004

Von Stephan Meyn - Ver�ffentlicht auf Amazon.com

Format:Taschenbuch

Security is a serious issue and education of the developer about writing secure code is extremely important. There are a lot of books out there that write either about how to configure your servers or about the various security technologies (cryptography, WSE etc) - this is not unimportant but it is incomplete because it ignores weaknesses introduced through coding practices.

The author manages a tight and very readable book that is addressed at the software developer. It can be read in about a day or afternoon (if you happen to be stranded at an airport lounge). I will be suggesting it to be one of our standard literature titles on the development floor.

› Gehen Sie zu Amazon.com, um alle 5 Rezensionen zu sehen 4.6 von 5 Sternen

Waren diese Rezensionen hilfreich? Wir wollen von Ihnen h�ren.

.jsOffDisplayBlock { display: block; } .jsOffDisplayInline { display: inline; } .jsOffVisibility { visibility: visible; } .jsOnDisplayBlock { display: none; } .jsOnDisplayNoneBlock { display: block; } .jsOnDisplayNoneInline { display: inline; } .jsOnDisplayInline { display: none; } .jsOnVisibility { visibility: hidden; } .jqOnDisplayBlock { display: none; } .jqOnDisplayInline { display: none; } .jqOnVisibility { visibility: hidden; } .jqOnDisplayNoneBlock { display: block; } .jqOnDisplayNoneInline { display: inline; }

Kunden diskutieren

Das Forum zu diesem Produkt

Diskussion	Antworten	J�ngster Beitrag
Noch keine Diskussionen

Fragen stellen, Meinungen austauschen, Einblicke gewinnen

Neue Diskussion starten

Thema:

Erster Beitrag:

Bei neuen Eintr�gen E-Mail erhalten

Eingabe des Log-ins

Richtlinien

Aktive Diskussionen in �hnlichen Foren

Diskussion	Antworten	J�ngster Beitrag
englische b�cher Diskussionsforum Children's Stories	1	Gestern
englische b�cher Diskussionsforum We can get a book for free? Great! Please post here!	424	Gestern
englische b�cher Diskussionsforum Welches englische Buch lest Ihr zur Zeit?	528	Vor 2 Tagen
englische b�cher Diskussionsforum Action-Adventure Books in English	167	Vor 4 Tagen
englische b�cher Diskussionsforum deutsche Zitate in englischen B�chern - wieso so viele Fehler?	53	Vor 5 Tagen
englische b�cher Diskussionsforum Meet Our Authors	390	Vor 8 Tagen
englische b�cher Diskussionsforum fun with Robin Hood	0	Vor 8 Tagen
englische b�cher Diskussionsforum Deep Feelings between Men	194	Vor 11 Tagen