Secure Web Application Development A Handson Guide With Python And Django 1st Edition Matthew Baker by Matthew Baker 9781484285954, 1484285956 instant download after payment.

Cyberattacks are becoming more commonplace and the Open Web Application Security Project (OWASP), estimates 94% of sites have flaws in their access control alone.  Attacks evolve to work around new defenses, and defenses must evolve to remain effective.  Developers need to understand the fundamentals of attacks and defenses in order to comprehend new techniques as they become available.

This book uses a hand-on approach to teach you how to write secure web applications and will highlight how hackers attack applications along with a broad arsenal of defenses. You'll see how to Implement the right defenses in Python/Django applications to prevent such attacks. Secure Web Application Development is your guide to picking the appropriate techniques to close vulnerabilities and ensuring you still provide users with their needed functionality.

Topics covered include:
• A framework for deciding what needs to be protected and how strongly
• Configuring services such as databases and web servers
• Safe use of HTTP methods such as GET, POST, etc, cookies and use of HTTPS
• Safe REST APIs
• Server-side attacks and defenses such as injection and cross-site scripting
• Client-side attacks and defenses such as cross-site request forgery
• Security techniques such as CORS, CSP
• Password management, authentication and authorization, including OAuth2
• Best practices for dangerous operations such as password change and reset
• Use of third-party components and supply chain security (Git, CI/CD etc)

You will:
• Understand common coding vulnerabilities and how to avoid them
• Configure services, such as databases and web servers, to minimize the risk of attack
• Implement secure methods for password management, authentication, and authorization
• Safely manage requests to and from external web sites
• Establish a framework for modelling and assessing risks

Who This Book Is For
Developers to know more about security
Non-professional such as scientists
Managers ... product/company technical securi