Web Security Sourcebook

By Marcus Ranum and Aviel D. Rubin

"The authors . . . bring wide-ranging experience to this work, moving from theory to hands-on, bit-shoveling practical advice." -Steven M. Bellovin A serious security sourcebook for Web professionals and users. The front door is unlocked and wide open. The alarm's not working and no one's home. All of your valuables, money, and intimate details of your life are just sitting inside, waiting to be taken. No, it's not your house . . . it's your computer. The Web now penetrates every aspect of our lives, from the home PC to the business office. But with each advance in convenience comes a geometric increase in vulnerability to the integrity of data and software as well as to the confidentiality of information. Although the flaws inherent in the Web are real, solutions are available. Let Aviel Rubin, Daniel Geer, and Marcus Ranum give you the answers. Here's a book that's valuable today and indispensable for the future. It includes basic and advanced techniques for client-side and server-side security, browser security, writing secure CGI scripts, firewalls, and secure e-commerce. There's a special appendix that demystifies the complex world of cryptography. And the book comes with access to a dedicated Web site containing up-to-the-minute information on the latest security threats and solutions. So whether you're a Webmaster trying to close the door on sites and applications, or an everyday user hoping to keep your desktop safe, this is your essential source on: * Protecting and securing Web pages, search engines, servers, and browsers * Writing impregnable applets and scripts, and avoiding the dangers inherent in every language * Using (and abusing) firewalls and cryptographic controls * Securing commerce and payment transactions

• Format: Paperback
• Language: English
• ISBN: 047118148X
• ISBN13: 9780471181484
• Release Date: June 1997
• Publisher: John Wiley & Sons
• Length: 368 Pages
• Weight: 1.45 lbs.
• Dimensions: 0.8" x 7.5" x 9.2"

Customer Reviews

The Web Security Sourcebook

This is an excellent "all-topics" covered book about web security. The book covers both server and client side considerations, as well as deployment issues (e.g., position of web servers and firewalls). The authors are among the most qualified security pundits in the industry - Marcus Ranum practically invented the firewall, and explains in lay terms the factors that influence web and server firewall deployment. Dan Geer and Aviel Rubin make outstanding contributions as well.

an excellent hands-on guide

Before reading this book, I thought I understood the important security issues on the web. Boy was I wrong. This book is an excellent guide to the real dangers on the web and how to protect yourself. It is easy reading, although in some parts I found it to be a bit too technical. However, it sure is nice to know that I'm reading something where the authors really know what they are talking about, unlike many technical books that you find nowadays.

adequate primer that reeks of the authors' personalities

The coverage of technical issues was adequate for the beginner. I was disappointed at having to fend off what seemed like one or more typographical errors per page. Ranum's infatuation with his own eccentricity and overeagerness to engage in name-dropping muddy the book just as they plague his technical conference participation.

Strongly recommended for anyone serious about web security!

Written in a clear and understandable style, this book speaks directly to anyone involved in designing, evaluating, and improving world wide web security. It plows through the vendor rhetoric and names names, identifies specific weaknesses, and gives you the prescription for your browser and server security ills. While you may not like the medicine (such as blocking all Java, JavaScript, and ActiveX at your firewall) you cannot argue with the results, namely significantly improved web security. This book should be part of the basic library for security managers, system and network administrators, world wide web developers, and web application consultants. It bears reading more than once, trust me.