Goal
The path to "Taikeiteki ni Manabu Anzen na Web Application no Tsukurikata, 2nd Edition (A Systematic Guide to Building Secure Web Applications)"
Here is the reading path leading up to this book, derived from its dependencies and ordered from the fundamentals.
The path so far (1 books)
Why read this first: Authentication, sessions, and cookies all sit on top of HTTP. Grasping HTTP's behavior from first principles first lets you understand structurally where in the protocol the vulnerabilities in Tokumaru's book actually arise.