Overview
This book is a practical guide to web application security, from architecture, trust boundaries, and asset discovery to authentication, authorization, injection, XSS, CSRF, SSRF, file handling, and deserialization risks. It explains how vulnerabilities work, how to validate them safely, and how to prioritize findings by exploitability, impact, and business context.
You'll also cover REST and GraphQL APIs, microservices, WebSockets, third-party JavaScript, containers, Kubernetes, serverless platforms, and cloud permissions. Hands-on chapters address Burp Suite, OWASP ZAP, evidence collection, reproducible proofs of concept, logging, detection, incident response, and technical reporting.
Written for security testers, developers, architects, and defenders, the book connects application testing with threat modeling, secure SDLC practices, CI/CD automation, governance, and continuous improvement.
This item is Non-Returnable
Customers Also Bought
Details
- ISBN-13: 9798165637322
- ISBN-10: 9798165637322
- Publisher: Independently Published
- Publish Date: October 2026
- Dimensions: 9 x 6 x 0.25 inches
- Shipping Weight: 0.29 pounds
- Page Count: 98
Related Categories
