Web Security Sourcebook

Hackers into personal and corporate web sites are viewed as invasive by computer professionals and consumers as traditional home burglars. On the browser side, three computer security experts offer break-in deterrent tips via user passwords and IDs, anti-cookie, and advanced anonymity strategies. Server-side security entails firewalls, privacy-conscious Java applets, CGI scripts, and encrypted payment protocols/products. An appendix deciphers cryptography basics. To further ensure that computer users don’t get caught in unsecured webs, the authors provide a companion web site.

Here’s book that’s valuable today and indispensable for the future. It includes basic and advanced techniques for client-side and server-side security, browser security, writing secure CGI scripts, firewalls, and secure e-commerce. There’s a special appendix that demystifies the complex world of cryptography. And the book comes with access to a dedicated Web site containing up-to-the-minute information on the latest security threats and solutions. So whether you’re a Webmaster trying to close the door on sites and applications, or an everyday user hoping to keep your desktop safe, this is your essential source on protecting and securing Web pages, search engines, servers, and browsers; writing impregnable applets and scripts, and avoiding the dangers inherent in every language; using (and abusing) firewalls and cryptographic controls; and securing commerce and payment transactions.

The technical tools and techniques for building secure Web sites and applications

The Web has made it easier to transfer information around the world. It has also made it harder to keep that information secure. This book shows Web masters, Web managers, and Web designers the hands on programming techniques necessary to build secure Web sites. Readers will learn how to secure the server, use firewalls and cryptography, write secure Java applets and CGI scripts and more. Companion Web Site includes source code examples plus updates on the latest security threats and techniques.

From the Back Cover “The authors . . . bring wide-ranging experience to this work, moving from theory to hands-on, bit-shoveling practical advice.” –Steven M. Bellovin A serious security sourcebook for Web professionals and users. The front door is unlocked and wide open. The alarm’s not working and no one’s home. All of your valuables, money, and intimate details of your life are just sitting inside, waiting to be taken. No, it’s not your house . . . it’s your computer. The Web now penetrates every aspect of our lives, from the home PC to the business office. But with each advance in convenience comes a geometric increase in vulnerability to the integrity of data and software as well as to the confidentiality of information. Although the flaws inherent in the Web are real, solutions are available. Let Aviel Rubin, Daniel Geer, and Marcus Ranum give you the answers. Here’s a book that’s valuable today and indispensable for the future. It includes basic and advanced techniques for client-side and server-side security, browser security, writing secure CGI scripts, firewalls, and secure e-commerce. There’s a special appendix that demystifies the complex world of cryptography. And the book comes with access to a dedicated Web site containing up-to-the-minute information on the latest security threats and solutions. So whether you’re a Webmaster trying to close the door on sites and applications, or an everyday user hoping to keep your desktop safe, this is your essential source on: *Protecting and securing Web pages, search engines, servers, and browsers *Writing impregnable applets and scripts, and avoiding the dangers inherent in every language *Using (and abusing) firewalls and cryptographic controls *Securing commerce and payment transactions

Source : http://avirubin.com/books/book1/