Abhay Bhargav, B. V. Kumar, "Secure Java: For Web Application Development"
C-R-C Press | 2010 | ISBN: 1439823510 | 308 pages | PDF | 3,5 MB

From the risk assessment phase to the proof of concept phase, the book details a secure web application development process. The authors provide in-depth implementation guidance and best practices for access control, cryptography, logging, secure coding, and authentication and authorization in web application development. Discussing the latest application exploits and vulnerabilities, they examine various options and protection mechanisms for securing web applications against these multifarious threats. The book is organized into four sections:

Provides a clear view of the growing footprint of web applications
Explores the foundations of secure web application development and the risk management process
Delves into tactical web application security development with Java EE
Deals extensively with security testing of web applications

This complete reference includes a case study of an e-commerce company facing web application security challenges, as well as specific techniques for testing the security of web applications. Highlighting state-of-the-art tools for web application security testing, it supplies valuable insight on how to meet important security compliance requirements, including PCI-DSS, PA-DSS, HIPAA, and GLBA. The book also includes an appendix that covers the application security guidelines for the payment card industry standards.

>>