
Innocent code: a security wake-up call for Web programmers
Innocent code: a security wake-up call for Web programmers. * This concise and practical book shows where code vulnerabilities lie-without delving into the specifics of each system architecture, programming or scripting language, or application-and how best to fix them * Based on real-world situations taken from the author's experiences of tracking coding mistakes at major financial institutions * Covers SQL injection attacks, cross-site scripting, data manipulation in order to bypass authorization, and other attacks that work because of missing pieces of code * Shows developers how to change their mindset from Web site construction to Web site destruction in order to find dangerous code * Addresses how hackers can insert HTML into a Web program, what it can do, how to prevent it, and what to do when a bad input is detected
Forfattere: Sverre H. Huseby | Utgave: ukjent |
Språk: Engelsk | Sidetall: 248 |
ISBN: 9780470857441 | Vekt: 467 g |
Forlag: John Wiley & Sons | Innbinding: Heftet |
Utgitt: 2003 | Veil. pris: 0 kr |