Cross Site Scripting Attacks: Xss Exploits and Defense

Description

Cross Site Scripting Attacks starts by defining the terms and laying out the ground work. It assumes that the reader is familiar with basic web programming (HTML) and JavaScript. First it discusses the concepts, methodology, and technology that makes XSS a valid concern. It then moves into the various types of XSS attacks, how they are implemented, used, and abused. After XSS is thoroughly explored, the next part provides examples of XSS malware and demonstrates real cases where XSS is a dangerous risk that exposes internet users to remote access, sensitive data theft, and monetary losses. Finally, the book closes by examining the ways developers can avoid XSS vulnerabilities in their web applications, and how users can avoid becoming a victim. The audience is web developers, security practitioners, and managers.

*XSS Vulnerabilities exist in 8 out of 10 Web sites
*The authors of this book are the undisputed industry leading authorities
*Contains independent, bleeding edge research, code listings and exploits that can not be found anywhere else

描述

《跨站腳本攻擊》首先定義了詞彙並建立了基礎。它假設讀者對基本的網頁編程（HTML）和JavaScript有所了解。首先討論了使XSS成為一個合理關注的概念、方法和技術。然後進入了各種類型的XSS攻擊，以及它們的實施、使用和濫用。在深入探討XSS之後，下一部分提供了XSS惡意軟件的示例，並展示了XSS是一個危險風險，會使網絡用戶面臨遠程訪問、敏感數據盜竊和金錢損失。最後，本書通過檢視開發人員如何避免其網頁應用程序中的XSS漏洞以及用戶如何避免成為受害者來結束。目標讀者是網頁開發人員、安全從業人員和管理人員。

* 10個網站中有8個存在XSS漏洞
* 本書的作者是無可爭議的行業領先權威
* 包含獨立的、最新的研究、代碼清單和無法在其他地方找到的攻擊示例