资源描述：
《OReilly.Web.Security.Testing.Cookbook.ebook》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。
1、WebSecurityTestingCookbook,1stEditionbyPacoHope;BenWaltherPublisher:O'ReillyMedia,Inc.PubDate:October28,2008PrintISBN-13:978-0-596-51483-9Pages:300OverviewAmongthetestsyouperformonwebapplications,securitytestingisperhapsthemostimportant,yetit'softenthemostneglected.TherecipesintheWebSecurityTe
2、stingCookbookdemonstratehowdevelopersandtesterscancheckforthemostcommonwebsecurityissues,whileconductingunittests,regressiontests,orexploratorytests.Unlikeadhocsecurityassessments,theserecipesarerepeatable,concise,andsystematic-perfectforintegratingintoyourregulartestsuite.Recipescoverthebasic
3、sfromobservingmessagesbetweenclientsandserverstomulti-phaseteststhatscripttheloginandexecutionofwebapplicationfeatures.Bytheendofthebook,you'llbeabletobuildtestspinpointedatAjaxfunctions,aswellaslargemulti-steptestsfortheusualsuspects:cross-sitescriptingandinjectionattacks.Thisbookhelpsyou:Obt
4、ain,install,andconfigureuseful-andfree-securitytestingtoolsUnderstandhowyourapplicationcommunicateswithusers,soyoucanbettersimulateattacksinyourtestsChoosefrommanydifferentmethodsthatsimulatecommonattackssuchasSQLinjection,cross-sitescripting,andmanipulatinghiddenformfieldsMakeyourtestsrepeata
5、blebyusingthescriptsandexamplesintherecipesasstartingpointsforautomatedtestsDon'tliveindreadofthemidnightphonecalltellingyouthatyoursitehasbeenhacked.WithWebSecurityTestingCookbookandthefreetoolsusedinthebook'sexamples,youcanincorporatesecuritycoverageintoyourtestsuite,andsleepinpeace.Copyrigh
6、tCopyright©2009,BrianHopeandBenWalther.Allrightsreserved.PrintedintheUnitedStatesofAmerica.PublishedbyO'ReillyMedia,Inc.,1005GravensteinHighwayNorth,Sebastopol,CA95472.O'Reillybooksmaybepurchasedforeducational,business,orsalespromotionaluse.Onlineeditionsarealsoavailableformosttitles(http://sa
7、fari.oreilly.com).Formoreinformation,contactourcorporate/institutionalsalesdepartment:(800)998-9938orcorporate@oreilly.com.Editor:MikeLoukidesProductionEditor:LoranahDimantNutshellHandbook,theNutshellHandbooklogo,andtheO'Reillylogoarere
