Book
Taikeiteki ni Manabu Anzen na Web Application no Tsukurikata, 2nd Edition (A Systematic Guide to Building Secure Web Applications)
How Vulnerabilities Arise and How to Counter Them in Practice
Hiroshi Tokumaru
Summary
A Japanese-language guide to web application security by Hiroshi Tokumaru, aimed at programmers, explaining the vulnerabilities that can arise in a web application and how to avoid introducing them. This second edition updates the original 2011 edition for seven years of change: it replaces the chapter on vulnerability countermeasures for mobile-phone web applications with a new chapter introducing vulnerability assessment, adds guidance on points to watch when building web applications with HTML5, and covers newer vulnerabilities worth knowing such as clickjacking. The hands-on practice environment has also been updated, with most screenshots retaken to match.
Target Readers
- Programmers who need to understand not just how to fix a vulnerability but why it arises in the first place
- Developers building web applications with HTML5 who need to know what to watch for when it comes to security
- Programmers getting started with vulnerability assessment, using the book's dedicated introductory chapter on the subject
Tags
Colophon
- Publisher
- SB Creative
- ISBN
- 978-4-7973-9316-3
- Published
- Jun 2018
- List price
- ¥3,520incl. taxMay differ from the actual selling price on Amazon
Get this book
* The link above is an advertisement via Amazon Associates.Related Books
Prerequisites
- Recommended
Real World HTTP, 3rd Edition
Internet and Web Technology, Learned from History and Code
Yoshiki Shibukawa
Reason: Authentication, sessions, and cookies all sit on top of HTTP. Grasping HTTP's behavior from first principles first lets you understand structurally where in the protocol the vulnerabilities in Tokumaru's book actually arise.
Next Books
- Recommended
Grokking Web Application Security
Malcolm McDonald
Reason: Once Tokumaru's book has cemented the principles and root fixes, reinforce them with a modern, cross-layer view from browser to server. Widening the scope to supply chain and incident response raises the resolution of your defense.
- Recommended
Ango Gijutsu Nyumon, 3rd Edition (An Introduction to Cryptography)
Alice in the Land of Secrets
Hiroshi Yuki
Reason: After grasping the overall picture of vulnerability defense, descend to the cryptographic foundation that much of it relies on. Understanding the logic of hashing, signatures, and public-key crypto lets you treat TLS and token verification as principles rather than magic.
- Recommended
Web Security Tantosha no Tame no Zeijakusei Shindan Start Guide, 2nd Edition (A Vulnerability Assessment Start Guide for Web Security Staff)
Sen Ueno Teaches New Techniques for Preventing Information Leaks
Sen Ueno
Reason: After learning the principles of vulnerabilities, verify them with your own hands. Dynamic analysis with OWASP ZAP and Burp Suite lets you feel how attacks you knew only in theory actually succeed in real traffic, closing the gap between theory and practice.