Innocent Code: A Security Wake-Up Call for Web ProgrammersISBN: 978-0-470-85744-1
Paperback
248 pages
January 2004
This price is valid for United States. Change location to view local pricing and availability. ![]() This is a Print-on-Demand title. It will be printed specifically to fill your order. Please allow an additional 2-3 days delivery time. The book is not returnable.
Other Available Formats: E-book
|
- This concise and practical book shows where code vulnerabilities lie-without delving into the specifics of each system architecture, programming or scripting language, or application-and how best to fix them
- Based on real-world situations taken from the author's experiences of tracking coding mistakes at major financial institutions
- Covers SQL injection attacks, cross-site scripting, data manipulation in order to bypass authorization, and other attacks that work because of missing pieces of code
- Shows developers how to change their mindset from Web site construction to Web site destruction in order to find dangerous code

