Description

While many resources for network and IT security are available, detailed knowledge regarding modern web application security has been lackingâ until now. This practical guide provides both offensive and defensive security concepts that software engineers can easily learn and apply.

Andrew Hoffman, a senior security engineer at Salesforce, introduces three pillars of web application security: recon, offense, and defense. Youâ ll learn methods for effectively researching and analyzing modern web applicationsâ including those you donâ t have direct access to. Youâ ll also learn how to break into web applications using the latest hacking techniques. Finally, youâ ll learn how to develop mitigations for use in your own web applications to protect against hackers.

Explore common vulnerabilities plaguing today's web applications
Learn essential hacking techniques attackers use to exploit applications
Map and document web applications for which you donâ t have direct access
Develop and deploy customized exploits that can bypass common defenses
Develop and deploy mitigations to protect your applications against hackers
Integrate secure coding best practices into your development lifecycle
Get practical tips to help you improve the overall security of your web applications