買這商品的人也買了...
-
$650$553 -
$520$442 -
$600$199 -
$650$553 -
$650$507 -
$680$578 -
$550$468 -
$390$332 -
$690$545 -
$980$774 -
$720$612 -
$480$379 -
$1,200$948 -
$680$537 -
$880$695 -
$720$569 -
$750$638 -
$290$226 -
$1,200$948 -
$600$480 -
$480$379 -
$450$351 -
$620$527 -
$980$774 -
$179JSON必知必會/圖靈程序設計叢書
商品描述
Description
Ajax applications should be open yet secure. Far too often security is added as an afterthought. Potential flaws need to be identified and addressed right away. This book explores Ajax and web application security with an eye for dangerous gaps and offers ways that you can plug them before they become a problem. By making security part of the process from the start, you will learn how to build secure Ajax applications and discover how to respond quickly when attacks occur.
Securing Ajax Applications succinctly explains that the same back-and-forth communications that make Ajax so responsive also gives invaders new opportunities to gather data, make creative new requests of your server, and interfere with the communications between you and your customers. This book presents basic security techniques and examines vulnerabilities with JavaScript, XML, JSON, Flash, and other technologies -- vital information that will ultimately save you time and money.
Topics include:
- An overview of the evolving web platform, including APIs, feeds, web services and asynchronous messaging
- Web security basics, including common vulnerabilities, common cures, state management and session management
- How to secure web technologies, such as Ajax, JavaScript, Java applets, Active X controls, plug-ins, Flash and Flex
- How to protect your server, including front-line defense, dealing with application servers, PHP and scripting
- Vulnerabilities among web standards such as HTTP, XML, JSON, RSS, ATOM, REST, and XDOS
- How to secure web services, build secure APIs, and make open mashups secure
Securing Ajax Applications takes on the challenges created by this new generation of web development, and demonstrates why web security isn't just for administrators and back-end programmers any more. It's also for web developers who accept the responsibility that comes with using the new wonders of the Web.
Table of Contents
Preface
1. The Evolving Web
The Rise of the Web
2. Web Security
Security Basics
Risk Analysis
Common Web Application Vulnerabilities
3. Securing Web Technologies
How Web Sites Communicate
Browser Security
Browser Plug-ins, Extensions, and Add-ons
4. Protecting the Server
Network Security
Host Security
Web Server Hardening
Application Server Hardening
5. A Weak Foundation
HTTP Vulnerabilities
The Threats
JSON
XML
RSS
Atom
REST
6. Securing Web Services
Web Services Overview
Security and Web Services
Web Service Security
7. Building Secure APIs
Building Your Own APIs
Preconditions
Postconditions
Invariants
Security Concerns
RESTful Web Services
8. Mashups
Web Applications and Open Internet APIs
Wild Web 2.0
Mashups and Security
Open Versus Secure
A Security Blanket
Case Studies
Index