Web hacking : attacks and defense

Whether it's petty defacing or full-scale cyber robbery, hackers are moving to the Web along with everyone else. Organizations using Web-based business applications are increasingly at risk. Web Hacking: Attacks and Defense is a powerful guide to the latest information on Web attacks and defense. Security experts Stuart McClure (lead author of Hacking Exposed), Saumil Shah, and Shreeraj Shah present a broad range of Web attacks and defense.Features include: \* Overview of the Web and what hackers go after \* Complete Web application security methodologies \* Detailed analysis of hack techniques \* Countermeasures \* What to do at development time to eliminate vulnerabilities \* New case studies and eye-opening attack scenarios \* Advanced Web hacking concepts, methodologies, and tools "How Do They Do It?"sections show how and why different attacks succeed, including: \* Cyber graffiti and Web site defacements \* e-Shoplifting \* Database access and Web applications \* JavaT application servers; how to harden your JavaT Web Server \* Impersonation and session hijacking \* Buffer overflows, the most wicked of attacks \* Automated attack tools and wormsAppendices include a listing of Web and database ports, cheat sheets for remote command execution, and source code disclosure techniques.Web Hacking informs from the trenches. Experts show you how to connect the dots - how to put the stages of a Web hack together so you can best defend against them. Written for maximum brain absorption with unparalleled technical content and battle-tested analysis, Web Hacking will help you combat potentially costly security threats and attacks. "Both novice and seasoned readers will come away with an increased understanding of how Web hacking occurs and enhanced skill at developing defenses against such Web attacks. Technologies covered include Web languages and protocols, Web and database servers, payment systems and shopping carts, and critical vulnerabilities associated with URLs. This book is a virtual battle plan that will help you identify and eliminate threats that could take your Web site off line..."
--From the Foreword by William C. Boni, Chief Information Security Officer, Motorola "Just because you have a firewall and IDS sensor does not mean you aresecure; this book shows you why."
--Lance Spitzner, Founder, The Honeynet Project Whether it's petty defacing or full-scale cyber robbery, hackers are moving to the Web along with everyone else. Organizations using Web-based business applications are increasingly at risk. Web Hacking: Attacks and Defense is a powerful guide to the latest information on Web attacks and defense. Security experts Stuart McClure (lead author of Hacking Exposed), Saumil Shah, and Shreeraj Shah present a broad range of Web attacks and defense.

Features include:

• Overview of the Web and what hackers go after
• Complete Web application security methodologies
• Detailed analysis of hack techniques
• Countermeasures
• What to do at development time to eliminate vulnerabilities
• New case studies and eye-opening attack scenarios
• Advanced Web hacking concepts, methodologies, and tools

"How Do They Do It?" sections show how and why different attacks succeed, including:

• Cyber graffiti and Web site defacements
• e-Shoplifting
• Database access and Web applications
• Java™ application servers; how to harden your Java™ Web Server
• Impersonation and session hijacking
• Buffer overflows, the most wicked of attacks
• Automated attack tools and worms

Appendices include a listing of Web and database ports, cheat sheets for remote command execution, and source code disclosure techniques.

Web Hacking informs from the trenches. Experts show you how to connect the dots--how to put the stages of a Web hack together so you can best defend against them. Written for maximum brain absorption with unparalleled technical content and battle-tested analysis, Web Hacking will help you combat potentially costly security threats and attacks.

0201761769B07192002

In the evolution of hacking, firewalls are a mere speed bump. Hacking continues to develop, becoming ever more sophisticated, adapting and growing in ingenuity as well as in the damage that results. Web attacks running over web ports strike with enormous impact. Stuart McClure's new book focuses on Web hacking, an area where organizations are particularly vulnerable. The material covers the web commerce "playground', describing web languages and protocols, web and database servers, and payment systems. The authors bring unparalleled insight to both well- known and lesser known web vulnerabilities. They show the dangerous range of the many different attacks web hackers harbor in their bag of tricks -- including buffer overflows, the most wicked of attacks, plus other advanced attacks. The book features complete methodologies, including techniques and attacks, countermeasures, tools, plus case studies and web attack scenarios showing how different attacks work and why they work This book is great if you develop websites, especially if you maintain a webserver. I am fairly well versed on basic security measures, but there was alot of stuff in this book that I didn't know. Its not a book for someone who is looking for an in-depth detailed book about network security, but its a really good overview of web attacks and how to avoid being hit. The book is also well written, and easy and fun to read. The writers do a good job of making the content fun and entertaining. You won't be disapointed with this book unless you are already very familiar with many different types of web attacks. Exposes complete methodologies showing the actual techniques and attacks. Shows countermeasures, tools, and eye-opening case studies. Covers the web commerce playground, describing web languages and protocols, web and database servers, and payment systems. Softcover. Intended for a course that is teaching students how and where web-based applications are particularly vulnerable. The authors explain the complete range of attacks, including buffer overflows-the most problematic of all attacks.