Book description
Cyberattacks are becoming more commonplace and the Open Web Application Security Project (OWASP), estimates 94% of sites have flaws in their access control alone. Attacks evolve to work around new defenses, and defenses must evolve to remain effective. Developers need to understand the fundamentals of attacks and defenses in order to comprehend new techniques as they become available. This book teaches you how to write secure web applications.The focus is highlighting how hackers attack applications along with a broad arsenal of defenses. This will enable you to pick appropriate techniques to close vulnerabilities while still providing users with their needed functionality.
A framework for deciding what needs to be protected and how strongly Configuring services such as databases and web servers Safe use of HTTP methods such as GET, POST, etc, cookies and use of HTTPS Safe REST APIs Server-side attacks and defenses such as injection and cross-site scripting Client-side attacks and defenses such as cross-site request forgery Security techniques such as CORS, CSP Password management, authentication and authorization, including OAuth2 Best practices for dangerous operations such as password change and reset Use of third-party components and supply chain security (Git, CI/CD etc)
Topics covered include:
What You'll Learn
- Review the defenses that can used to prevent attacks
- Model risks to better understand what to defend and how
- Choose appropriate techniques to defend against attacks
- Implement defenses in Python/Django applications
Who This Book Is For
- Developers who already know how to build web applications but need to know more about security
- Non-professional software engineers, such as scientists, who must develop web tools and want to make their algorithms available to a wider audience.
- Engineers and managers who are responsible for their product/company technical security policy
Table of contents
- Cover
- Front Matter
- 1. Introduction
- 2. The Hands-On Environment
- 3. Threat Modelling
- 4. Transport and Encryption
- 5. Installing and Configuring Services
- 6. APIs and Endpoints
- 7. Cookies and User Input
- 8. Cross-Site Requests
- 9. Password Management
- 10. Authentication and Authorization
- 11. OAuth2
- 12. Logging and Monitoring
- 13. Third-Party and Supply Chain Security
- 14. Further Resources
- Back Matter
Product information
- Title: Secure Web Application Development: A Hands-On Guide with Python and Django
- Author(s):
- Release date: October 2022
- Publisher(s): Apress
- ISBN: 9781484285961
You might also like
video
Django 3 - Full Stack Websites with Python Web Development
Django is an amazing framework for web developers because it provides the infrastructure required for database-driven …
video
Build REST APIs with Django REST Framework and Python
This course touches on each and every important topic through concept explanation, documentation, and implementation. The …
book
Web Development with Django
Learn how to create your own websites simply, safely, and quickly with Django by tackling practical …
book
Decoupled Django: Understand and Build Decoupled Django Architectures for JavaScript Front-ends
Apply decoupling patterns, properly test a decoupled project, and integrate a Django API with React, and …
