application security books

I believe you have heard more or less about various web application security vulnerabilities, such as cross-site scripting (XSS), SQL injection, and upload vulnerabilities.Here, I do not deny the naming and classification methods, nor comment on the rationality of the naming. What I want to tell you is that among the various security vulnerabilities, in fact, the

Because IIS users are also Windows 2000 users, and the permissions of the IIS Directory depend on the permission control of the Windows NTFS file system, you must create a secure and reliable Web server, to ensure both Windows 2000 and IIS security, the first step to protect IIS security is to ensure the security of the Windows 2000 operating system. The IIS ser

IT technology is in the ascendant, but behind its development is computer technology.Network SecurityThinking about the problem, this security risk is always wrong with the Internet technology has an impact. Network security has become the most popular topic. Network security protection has also become one of the popular network technologies, protecting the norma

sources via HTTP, the page is still marked as unsafe. This is the so-called mixed content page, where mixed content pages are only partially protected because HTTP content (unencrypted content) can be hacked by sniffers and susceptible to man-in-the-middle attacks. Click on the left to provide a link to the network panel view. A man-in-the-middle attack (Man-in-the-middle Attack, "MITM attack") is an "indirect" intrusion pattern that, by various technical means, places a computer

This article describes the thread security of the iOS app's objective-C code. First, we will briefly introduce the basic knowledge of thread security. Then, we will use a small example to observe non-thread security code. Finally, we will briefly introduce a tool that can be used to analyze thread security risks. 1) t

First, account security control1) Basic security measuresSystem Account CleanupIn the Linux system, in addition to the user manually created a variety of accounts, but also included with the system or program installation processGenerate a large number of other accounts. In addition to Superuser root, a large number of accounts are used to maintain the operation of the system, to start or maintain the servi

Article Title: Application: Unix-based Web server security guide. Linux is a technology channel of the IT lab in China. Includes basic categories such as desktop applications, Linux system management, kernel research, embedded systems, and open source. Today, with the increasing popularity of computer networks, computer security not only requires the prevention o

, which leads to excessive review ), however, this results in a poor user experience. IP address replacement is a common problem. For example, there are two IP addresses at work and at home, so this method is often not used. Therefore, cookie-based attack methods are very popular now. In some Web 2.0 websites, it is easy to obtain the application administrator identity. How can we ensure the security of ou

As we all know, PHP is already the most popular Web application programming language. But like other scripting languages, PHP also has several dangerous security vulnerabilities. As we all know, PHP is already the most popular Web application programming language. But like other scripting languages, PHP also has several dangerous

Multiple security vulnerabilities in McAfee Application ControlMultiple security vulnerabilities in McAfee Application Control Release date:Updated on:Affected Systems: McAfee Application Control Description: Bugtraq id: 76062McAfee

Enterprise-Class Web application Security Solution Example Objective We will be from different roles in the enterprise, from the perspective of a developer, security administrator, and department manager, describe in detail how the day-to-day work of each persona is implemented after deploying the IBM Rational ASE Enterprise Web

Networks that install a variety of security technologies are relatively well protected, while hackers and other malicious third parties are launching attacks against online business applications. Companies are configuring Web application Firewall (WAF) technologies to protect their online applications, and software developers ' negligence of security factors has

Learning Android Application Security Testing (Part1) from scratch)In this series of articles, using InsecureBankv2, an Android app with vulnerabilities, we can learn about the concepts related to Android app security. We will look at every problem from the perspective of a newbie. Therefore, I suggest new users follow this series of articles. Since the tutorial