{"product_id":"secure-web-application-development-a-hands-on-guide-with-python-and-django-9781484285954","title":"Secure Web Application Development: A Hands-On Guide with Python and Django","description":"Cyberattacks are becoming more commonplace and the Open Web Application Security Project (OWASP), estimates 94% of sites have flaws in their access control alone. Attacks evolve to work around new defenses, and defenses must evolve to remain effective. Developers need to understand the fundamentals of attacks and defenses in order to comprehend new techniques as they become available. This book teaches you how to write secure web applications.\u003cbr\u003eThe focus is highlighting how hackers attack applications along with a broad arsenal of defenses. This will enable you to pick appropriate techniques to close vulnerabilities while still providing users with their needed functionality.\u003cbr\u003e\u003cp\u003eTopics covered include: \u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cli\u003eA framework for deciding what needs to be protected and how strongly\u003c\/li\u003e\u003cli\u003eConfiguring services such as databases and web servers\u003c\/li\u003e\u003cli\u003eSafe use of HTTP methods such as GET, POST, etc, cookies and use of HTTPS\u003c\/li\u003e\u003cli\u003eSafe REST APIs\u003c\/li\u003e\u003cli\u003eServer-side attacks and defenses such as injection and cross-site scripting\u003c\/li\u003e\u003cli\u003eClient-side attacks and defenses such as cross-site request forgery\u003c\/li\u003e\u003cli\u003eSecurity techniques such as CORS, CSP\u003c\/li\u003e\u003cli\u003ePassword management, authentication and authorization, including OAuth2\u003c\/li\u003e\u003cli\u003eBest practices for dangerous operations such as password change and reset\u003c\/li\u003e\u003cli\u003eUse of third-party components and supply chain security (Git, CI\/CD etc)\u003c\/li\u003e\u003cbr\u003e\u003cb\u003eWhat You'll Learn\u003c\/b\u003e\u003cbr\u003e\u003cp\u003e\u003c\/p\u003e\u003cul\u003e\n\u003cli\u003e\u003cbr\u003e\u003c\/li\u003e\n\u003cli\u003eReview the defenses that can used to prevent attacks\u003c\/li\u003e\n\u003cli\u003eModel risks to better understand what to defend and how\u003c\/li\u003e\n\u003cli\u003eChoose appropriate techniques to defend against attacks\u003c\/li\u003e\n\u003cli\u003eImplement defenses in Python\/Django applications\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003c\/p\u003e\u003cb\u003eWho This Book Is For\u003c\/b\u003e\u003cp\u003e\u003c\/p\u003e\u003cul\u003e\n\u003cli\u003eDevelopers who already know how to build web applications but need to know more about security\u003c\/li\u003e\n\u003cli\u003eNon-professional software engineers, such as scientists, who must develop web tools and want to make their algorithms available to a wider audience.\u003c\/li\u003e\n\u003cli\u003eEngineers and managers who are responsible for their product\/company technical security policy\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003c\/p\u003e \u003cb\u003e\u003c\/b\u003e\u003cbr\u003e\u003cbr\u003e\u003cb\u003eBinding Type:\u003c\/b\u003e Paperback\u003cbr\u003e\u003cb\u003ePublisher:\u003c\/b\u003e Apress\u003cbr\u003e\u003cb\u003ePublished:\u003c\/b\u003e 10\/29\/2022\u003cbr\u003e\u003cb\u003eISBN:\u003c\/b\u003e 9781484285954\u003cbr\u003e\u003cb\u003ePages:\u003c\/b\u003e 462\u003cbr\u003e\u003cb\u003eWeight:\u003c\/b\u003e 1.49lbs\u003cbr\u003e\u003cb\u003eSize:\u003c\/b\u003e 9.21h x 6.14w x 0.98d","brand":"Matthew Baker","offers":[{"title":"Default Title","offer_id":42607885222069,"sku":"9781484285954","price":55.24,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0473\/0804\/6492\/products\/img_0e0f3116-044c-47fa-a6a0-8990fb075d26.jpg?v=1674573681","url":"https:\/\/pastforward.org\/products\/secure-web-application-development-a-hands-on-guide-with-python-and-django-9781484285954","provider":"Past Forward","version":"1.0","type":"link"}